last executing test programs: 8m35.949060924s ago: executing program 32 (id=63): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m29.40651582s ago: executing program 33 (id=96): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(0xffffffffffffffff, r0, 0x0) 8m21.545022613s ago: executing program 34 (id=122): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaab8aaaaaa6193a1b1068afa523a2087deab1cc6e9fcb9c2ac29daba00000000"], 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 8m10.420385918s ago: executing program 35 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 8m2.888916261s ago: executing program 36 (id=199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20111}, [@IFLA_LINK={0x8, 0x5, r2}]}, 0x28}, 0x1, 0xba01}, 0x8810) 7m20.884540018s ago: executing program 37 (id=391): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000008c0)="84", 0x1}, {&(0x7f00000001c0)="cabf9fbeda2d61095638735b6441e9d940398e6e60cab91f", 0x18}], 0x3}}], 0x1, 0x4404c880) sendto$inet6(r0, 0x0, 0x0, 0x7b00, 0x0, 0x0) 6m12.997400431s ago: executing program 8 (id=712): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000fc0)="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", 0x29b}, {&(0x7f0000000300)="2e0fd87d8d84b93c7803a87df5acd511ee50b0a0d0d9e3fc8345949042d5449c61a20430aeea469c70772df880777d6e1744da498487c553359a", 0x3a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="ffbcf4974a4a645c6d8cd8ef2dde80a53f40daf5ec8c7b36eb6b4d4d5286a436a562f1656469c511aaadc7389df3d15187940450e3b35c63d66f24df397537c747612c3e38daf2f2336c6de65eb8048c4860fc269b96a50098a9485f692d75ecdf", 0x61}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000900)="f742c97e8353ef9d8afd344747fb058fea97deff79dbb8e7b56b20a2d430240bf6d32e802d80bb22b247cbad7cbbc4ec0293eb6e0c35c044ad426db18e9403dc1b6b93bfb0ea8f4cb3f3f9cf3a2379cbb191560885ad9a829313c85064a06bc36da8d9a89b20656f349ba2f202c322bd93c50ad4a2d407383bfb6bef053dbb620324f60dfce9383279f82f5e7148e317cfa432eb7d7d38db6d1c70af445a17b02ad505e48cde584306bdc40bb021c3957e83336c68286d2fccc1dfa976d5a08b894e72aed5ee5efd350810f8a85f02545d4c6aea8d", 0xd5}, {&(0x7f0000000a40)="9502d92394027a53ed87f498965bb80e4b19c3d35fdef593e6b27023c930b5128b33fc6c3176978e6d6236fd33d41b30c3ba02f9ced9d3b0885326b4465606c6d4bd89c93cf8a9eaaba9a30a68e937b951be4e2935a30af461bd442f11f4b66d4c0146", 0x63}, {&(0x7f0000000b80)="924a47d58460977aa3ca02e00a7f5a29c19a836ac747ed79c3facf74da5489e37c7fb07ad69ad60d07747b3d7069380431087eb6b1baaf69904a056fbcd9210ec4942a8eff38f64d9254fcf620ee3f30d95f4ff1843135bbe3ea9944510eaab3cdb691dcfa857098dfd130e17be1d332b6474474591d8f2fad7272cf9949129985045b51c0f6ecc979e9426e205bb3c5f12385ed84b144fc9195bae4f738b65adb697161b8f2ff3823aa80635e8ff785dd4ae007bcc5d1d7d7da4073275fadf5e43f63efa7a87b4beb26d7ee83c4c57f1cec59e2aef5dca5a85f68d7dbf3", 0xde}, {&(0x7f0000000680)="e08357325e84dba723519aed78136cbdee364d3180cd54110000b807fda4ff54378c32d88400715bb7c779d6c408cf956446b7440650233f4376a5451a910c8cbb9936e732a957efba7c57bf2844c7f58a58c9b9dee9e1e866590d7db31596", 0x5f}, {&(0x7f0000000340)="bf191c6393bf4f8e890d5730567aa1fb3c6711ca39b756c9eff899d97e46819412643124b40bf3cfa46a89886305b1b8a332c4ed6690ba4a0c1bab0f68758684d338cedf7b715c45520e2c06850a28f344470de40def14ab20002038570552ca02a16bddf0f835c7822caf250409001c5f8535d357597b89fce7d403270357597cf64255ae31748366f04dcc7230b617f64369f355290d40c0d9bf31b2fc8389e323a074ebb15017dcd53efb2a6238ad66c641d0fbb24da3e2ae22cdc83963362abf7ac367", 0xc5}, {&(0x7f0000000dc0)="d4cd28f2da13450a6d24eaa414d7ceef2072e2c22d114a3df095247d5169b053636ae037e2e89b441e99ddc8a9916006437b11aaad16a559f12ca0779ee7ffcf7804c16a6211842967faf0c749e0", 0x4e}], 0x7}}], 0x3, 0x40408e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m12.455658553s ago: executing program 8 (id=715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x3f, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0x4, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xe}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 6m11.814044519s ago: executing program 8 (id=717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "000000000100", "eb8e7ba12faf3700", "8000", "d37be5247ac92000"}, 0x38) write(r0, 0x0, 0x0) 6m11.487475595s ago: executing program 8 (id=719): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 6m11.315577345s ago: executing program 2 (id=721): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xe3800000000000, 0x58e}) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x1, 0x2, 0xffffffffffffffff}) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) 6m11.131146294s ago: executing program 2 (id=723): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000003c0), 0x6, 0x8902) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) syz_emit_ethernet(0x52, &(0x7f00000024c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60000210001cf60d000000000000000000000000000000bbff0200000000000000000000000000018200907800040600fe80000000000000000000000000001f110200009e9764c861aebc37835fd4ea38a399bc7b0036cfe4fda0a2e5d4e1440104b1d8b244a75ad251b993cc16717250e3e381fa47e66b2869e8fe624a535719793e65c7cb1cd5b59455cfde0d4e31b3cd"], 0x0) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') syz_fuse_handle_req(r4, &(0x7f0000002580)="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", 0x2000, &(0x7f00000090c0)={&(0x7f0000000340)={0x50, 0x0, 0x8001, {0x7, 0x2b, 0x0, 0x4001008, 0x3f97, 0x7, 0x5b80, 0xfff, 0x0, 0x0, 0x100, 0x2}}, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xf4}}, &(0x7f0000000400)={0x18, 0xfffffffffffffffe, 0x1, {0x1000}}, &(0x7f0000004580)={0x18, 0x0, 0x1, {0x3}}, &(0x7f00000045c0)={0x18, 0x0, 0x8}, &(0x7f0000004680)={0x28, 0x0, 0x3, {{0x5, 0x27}}}, &(0x7f00000046c0)={0x60, 0xfffffffffffffff5, 0xa07, {{0x100, 0x8, 0x6, 0x100000001, 0xffffffffffffffff, 0x0, 0x6, 0x2}}}, &(0x7f0000004740)={0x18, 0x0, 0x8, {0x4}}, &(0x7f0000004780)={0x1c, 0xfffffffffffffff5, 0x8, {'net/netlink\x00'}}, &(0x7f00000047c0)={0x20, 0x0, 0x3, {0x0, 0xa}}, &(0x7f0000004840)={0x78, 0x0, 0x3, {0x8001, 0x6, 0x0, {0x4, 0x3, 0x8000000000000000, 0x4, 0xcbdd, 0x4, 0x0, 0x9, 0x1ff, 0x1000, 0x8, 0x0, 0x0, 0x7fffffff}}}, &(0x7f00000048c0)={0x90, 0xac636a3223100b50, 0x10001, {0x6, 0x3, 0x6, 0x8, 0x4, 0x6, {0x1, 0x3, 0x8000000000000001, 0x5, 0x9, 0x4e, 0x8, 0xa000, 0x873f, 0xc000, 0x80000001, 0x0, 0x0, 0x2498, 0x50}}}, &(0x7f0000004980)=ANY=[@ANYBLOB="30000000000000008a000000000000000200000000000c00ed0000000000000001000000060000000000"], &(0x7f0000008b80)={0x200, 0x0, 0x6, [{{0x4, 0x2, 0xdeb, 0x4, 0x9, 0xed9300, {0x0, 0x7, 0x9, 0x2, 0x1, 0x10001, 0x3b4a, 0x94ca, 0x7, 0x1000, 0xffff, 0x0, 0x0, 0x2, 0x5}}, {0x1, 0xfffffffffffffa51, 0x7, 0x80000000, 'status\x00'}}, {{0x0, 0x1, 0x5, 0x9, 0x4, 0x2, {0x2, 0x100, 0x1ff, 0x0, 0x2, 0x9f, 0x1, 0x3, 0x6, 0x10000, 0x1, 0x0, 0x0, 0x8000, 0x5}}, {0x5, 0x0, 0x2, 0x0, '\\+'}}, {{0x6, 0x2, 0x8, 0x1939, 0x0, 0x80000001, {0x6, 0x400, 0xff, 0x101, 0xfffffffffffffff8, 0x8, 0x10001, 0x0, 0xac9d, 0x8000, 0x1, 0x0, 0x0, 0x7, 0x100}}, {0x3, 0xb, 0x12, 0x101, '/dev/input/event#\x00'}}]}, &(0x7f0000008e40)={0xa0, 0x0, 0x1ff, {{0x0, 0x1, 0x5, 0x7f, 0x6, 0x2, {0x4, 0x80000001, 0x2, 0xffffffffffffffff, 0x67d2, 0x7, 0x2, 0x2, 0xf600, 0x8000, 0x6, 0x0, 0xffffffffffffffff, 0x1, 0x7}}, {0x0, 0x8}}}, &(0x7f0000008f00)={0x20, 0xfffffffffffffff5, 0x10001, {0xb, 0x0, 0x81, 0xc}}, &(0x7f0000008f80)={0x130, 0x0, 0x7ea, {0x1c, 0x7, 0x0, '\x00', {0x800, 0x3, 0x5, 0x9, 0x0, 0xffffffffffffffff, 0xc000, '\x00', 0xb4b, 0x6, 0x3, 0x7fffffff, {0xb192, 0x7}, {0x2, 0x7}, {0x3, 0xffff}, {0x200, 0x8d03}, 0x0, 0x0, 0x6, 0x1000}}}}) lseek(r4, 0x1000000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x100, 0x0) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x4a, 0x3, 0x1, "444900d730fae90100000004000000060ff697b900", 0x3234564e}) 6m10.388951053s ago: executing program 8 (id=725): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20e280, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2000000000000009, 0x8, 0x0, 0x4}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r4, 0x101, 0xfffffffb}, 0x10) openat$ttynull(0xffffff9c, &(0x7f0000000980), 0x200, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRESHEX=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r7], 0x50}, 0x1, 0xba01}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x78}, 0x94) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', r8, &(0x7f00000001c0)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ftruncate(0xffffffffffffffff, 0xffff) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x191c) 6m9.649081491s ago: executing program 2 (id=730): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) setpriority(0x2, 0xffffffffffffffff, 0x4d) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x1000) r3 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xe, 0x0, @thr={0x0, 0x0}}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@any, 0xffffffff}, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000003, 0x804}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10190}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x44}}, 0x0) 6m9.581153808s ago: executing program 8 (id=732): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) r2 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x4d9b6eaf) 6m9.072398183s ago: executing program 38 (id=732): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) r2 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x4d9b6eaf) 6m8.635514543s ago: executing program 2 (id=736): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 6m8.128829306s ago: executing program 9 (id=737): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ppoll(&(0x7f0000000280)=[{r1, 0x8007}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6m7.715179764s ago: executing program 2 (id=738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 6m7.287491192s ago: executing program 2 (id=739): socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001d40)=[{0x0}], 0x1) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6071, 0x0, 0xe7}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2071, 0x0, 0xe7}}}}}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) 6m7.054443953s ago: executing program 39 (id=739): socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001d40)=[{0x0}], 0x1) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6071, 0x0, 0xe7}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2071, 0x0, 0xe7}}}}}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) 6m6.968831785s ago: executing program 9 (id=741): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000003c0), 0x6, 0x8902) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) syz_emit_ethernet(0x52, &(0x7f00000024c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60000210001cf60d000000000000000000000000000000bbff0200000000000000000000000000018200907800040600fe80000000000000000000000000001f110200009e9764c861aebc37835fd4ea38a399bc7b0036cfe4fda0a2e5d4e1440104b1d8b244a75ad251b993cc16717250e3e381fa47e66b2869e8fe624a535719793e65c7cb1cd5b59455cfde0d4e31b3cd"], 0x0) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') syz_fuse_handle_req(r4, &(0x7f0000002580)="ea0e8e46e6de6d0363d4fcc3acb26dbf5141e7c72554ef15fc0f71b51d048c744e19c7573cb849c310378cad270ac72ae47c849d074c606becc9e11de4d8bc016dfbbd027937c0655e6e8e76865405a8eb52555838ca05a5a321bc990140a5789eb7bad92f9d2b0b1ee396fb83a076a33934e542c298a558972248b1a89b5a70a786a82bca1130f0fc4bffe062afe5da5b798492eb9f76c39edb63c3377cda4344f529e0af8139ca10b731f100d8f03e69befa322302e7d4ef2583e16d6f9ed0b627c8efb29a48dd10dde8926fef6c1f78c4672a96cfe7ad2932905890335e36c0de7b2156c84ae6feb55ba2f5c8e3764c69573eb86be22e78cc7f7e342573d6517abab4db3b369b9327b67ea31c81f46a7f9b63f051e6d74ac85bb374064f0fbd35efc678df4f307f3b1e4f7057e1f7dac5cf6eb3332c6178b7bbdcb4e1b06e6143243c6877be122404d1e1ef2ed1002937468e90ffe0536889560304e9b8ba90799a4327d4d94bf982917d54550a53b025685cd323872cb44ee6fbef175a9579081bf8a188b5894add4688778036ec8ddd3be989e02f0d413d3ed1231d3ee15023ed6a4682e39007995ff25e48179f314e56e245af16f08b16b6f66e9428529bda3c0b37945407b16d44444fe847539a710309154493d7f5afcf9e2e48344a0b90075bfcf9b6f19f0e20c2968bfde67bf9b981fbb2fc7f3119f708108440d887b0e7f625de03d407b1dff39d97807788fe07b0e865bf65bda17b843be8bf9601966107e4a427d3eebbbe0e6aad419567924e2b8f0a4b28e4781d1c5607c1f0ac631205e908d0603725af9a3d3858a84144ac875610b407ba695ffa5ff5a8bc0fb77e2d6dfd034327654d02b572a909fb7840bf9817e9d55b6b38af82e1c9586c787ca5141ce7986441fb0e06b6423f11fea5224402f3a2532bfa2b613381a3e84bdfb52149458e7bcfb4c52529c62a34a57c26354b2887b1c332603203c0b557eb28857f71ba35d321123a96e4376287811dfea4ddedeb2afa1fede0aa59efd9439dce1b46358f23f590324e142390c48f22f2fb72bd55cd02d1573e71cf42dca4da6902347d0d37620bf7e001c3aa9782e30af80db2f2f98a924d623b67379f50edba4a3042cf42a634eb73a808375a69c1f8d7cc5151067e144f42c9e30274e3b3a5f4daf149de401b13e4397d0e5903a2cb71cb36482cb6a3e3bfb10eaa22fbf888c28cac482e70e80216e1ea123bab1b6e7f53d54d0c8318c2090582663feb3eb99ee848691179bba80763d9a31d3ce630d9417d5f501f1eafefb724a383353a0e9a031418a6240de95a3333aadb2eda70b5029dad18d2d2b9afdde357a4cee9a3fa0e97220a434187b53c5771dac048fca9079d6e83ba1d0152f179b16ba279be865a6737c87083966d1697e7cc152d27ae4a5376cd62c6b4508df673b4b2fa6975de02c4ee2cf5309f5510009132861f1819250823ed59798b09545e84d38e1a9f4d1564603ecfe236aa8f02a9a35a03fede08387e12456234a8f313c861c4bdf18ebdf0602641aadb40af5ffc2d64ae58f0592263d5482b97251205be41fac7a974a03ef90ca9417a402996a82aace0ed82f16aeaa9f523ebd577eba99cb20013a627c309ca9283704b9ae9f88d17cdc4e9112ce12e9511afc95385072f42cf39aaa1b584ffb95be7475f65e82fbd901f4f0ace82061f6dde02ef4362595c476db846c51265d4882b58e6dfcfe58d81bbe4e4f28d42f2c3697f94c4e957655c1991a001b07ec824b794308baf10c5bec17afdba63c29ce5c9efb97f33abcb4e71f3d9cf468127ecdd16b82a1830d82fb59e65b388218d2834600b68ecb9b80691d24ef9293528ef5ec36cdbe0a2d232f88c383f5e7f2cb08c909969454671754a336d2b2e0f4493775739b7a3ea54c02fafe38bf3327e7f1baa828c04d69667e3d5fe91856ecc292d5ad0a987a14bf3d55c6799c88c5a0c7ce278c8e796e4f711305134101e9569cbf30dd1546a9489cc64f82d421d1ad54c534e0fcdab320ba7b533ef6cfc417a4b2dd7ad89a9fab39b6ff3ce6b28e3790df6f28261e1b7801dcc97393f6a09354ec8142aee7dc8db9b430652482b28de8dadbf26cb0e9f2c6a034ef66c48ebfa264223b201cf883f9d97f0f020ce2eb8dbdc38b4c0ea1f5fc2d592a3df70acf618fd9a95ad0d1b80510ea1f1a1183ad7c9c16d5cf802d4d33e4cc06ff7c9a843648bd1e62834b6610e2f41d2b347377ae0d874d77e5a61598d5fc400b0e11699c72377657f726e1fc09daa3a8ef4c394216dcaed6a9d54ca9e3273d1b7e8621ed52cab13bf8bf6ae8008dd217edee8583381b9557d16bceb41eac0c7d8986e91b60ce4216b419ae3d51968d0465681c912be07d533192786188a54585483c8f515fcb34a3d325a8bfc01d797c4b528d9a05d3396ee8471a4273badeddb15695eba368c9aac0dc1a5020f3682e3358df50bc5b4bdc7a17edb81c3070f1ddbaf98292897b7b3e2db63157b303024025a9bc379c72ae1439fc2e93f4c75f0da2a16003b4121e37e7b3eaecda315aafedd8bf80741fdee0955893897d3b45676a1662fb0a13d4285838fb8233f4eb2ea8c11c2f950bb3e8e91cff3af31f1517c6cee0f116324e8431822d48a1927c34dc7e08981a3ab114ac1df13996cf0bcb6e1a1abd997e31d43cd096804e5fbf34510967fe09498cd77928881cf010757a7ce461b9f5d9af74f48b478792a1f470448fb2150762968ddb7e416434597e08be9f9204b76aac088da5735fb15488ad303e3a09889b821d4993d60fa925d0691df56347007bb373a7847008fd576793622e64032ff74319105d3d6544347a0789e59e8189709285b2b4a3f7af0492c37b0fcec77386463e6ee8318496a9d2c667da6c89b2751d4dcf63b31dc0eb89dd454370cf2bda2029bfe980a4606e37fb3332c540d322f7bb7e5f1cc3eea1ce07f542e13eed66c4be1b2ee930619ac969de4b354e5ab518bc6cd2f66e3a052c07f3547cb47c5240f08a3daf7672ef9976f43dfde231650b82dcb12edb58a0e08f78daa6318358fe5f1160c562874dcc59b88752250c6bdcc83d9a1b7c3a1b54f8e22af1f9077dbf458a8d6133c7adb015e9e101f99b5f59cd6fd7782c07dd48ba41f0a66eb38e04815527989a9cdcd31ecf1d8104cab4843178319463d1c113beee912d8eec684d1f326b932c157ad0ee8c8d9f325536ab6cc74daed3f258a9d2241b118f0eecb2350e243d494d245cdf42dc6f99fc27596be71ea84f0e12f5255401e03fc3115d545801e76dfc9eace07320e6e998d6ab0c34100a841c8e9180da83ef208cbf9d0f99267b4d34e07f88f177d57aaa68a4f2744c769c3363eaef138a82d1b108d942a88b76fb259902cea9535830c68a9a28a4752a79b7cd8f775fa3ce71f20045a0eb604aac169e184aa5dbc5b055678156981ce30967626c751ad4b6f720c044b5d53cc50e8b5f331bb7d31c083b5601e0d7b7d602d633e28c83e2791c244c6405db51010efb13a8a6c45cbe4fece5523161fba7d6fa5c012428371b9a5e479c0d69f04e8474473b80a3505b13588bdd41aa89e335ce19fb157e4e929694ebb486db08b1d33d60515871b61fc8e9aae53fda7183ee9dd5d18d1d8ce5e8257e3492ffcd1e5174de7c031ac748f0bb7684f4e8c81ad4c554321f0ee73406d0dbefbb5971755eb886961b66691578912f455fb43d2e1a51d7a3fa98c03f58f0f0a703daa5c11d46063a42c970143546de4698b65ba947d6bf7648122a22840af6a45a1235298ae7efb8c2ba24e4a194e9bbb3fff834394dd4960d9d871ab3271a159c75714d549430dc4ab0501311bc497cb198cb9b0f03a75726703487986a7c468c2e773e48e26fbae6ca71c4ba713fdf40b70a2c69bfdba311717a9e31a8eb3473a2275e3f24c6a5c9bb7a5c17f63b1fd9a7757c78afd9302dab9559628107d167df0bbdbad38e2fd4f670483df5eeb9145e4334c9b0761a93592814d356fe2c3a67630c20cb60e490aa9e91b0aca9bfbcc48420f022889d6aa438463558f895c7507bf4305f9642ce9cae19894d8c38a6f9084567a76268ca3677e8145553544383e1767b3eaeb6f6d6f85a2b705a5c8e2282f4df203b3b9e54a9bfd7469432aeaa9dc995e6839fe978f903bb5aa5f2e86a1cb9361979608346a945715131f954ea6b457919cd5d97757301c51bdc0c99d8fc1d70b88f2fffd53321d41a859c254d0fb6c09806760089c8655e1304a4eaf148f0e60671e71a8a88e3b6cab6e0caa0f1a642f7c82648ed373ae3a92a41dc808530c5a1913bc09e72718ce84ae0f5067c7407d7d2f4f800c7ad84b882f8a91fa51e93feb60aa3b77f8c7c8a59f484756f423fdd591ceef0076801b8a92f9e261f4a067ccc950cd7b638f00838b719ad1318a5375e1930cb0f5b9ec1264a304143a1b24a4abbc10d3f34ae75020303bfbaeb72c7f8bada705640d1cf4a833eb507d01441003bc473cce07fa9b4ed5c4b40d479adac4e46559d9a6b5ddb991b76b5728efa18929ec0ad0fd4973a615c69df6b71bcbf94d6fc6c11e6909681bd8208859750cdb7e657a4cc02b5b2efe73faa195386e2d1e96fe97868b2612e4280f6479d800e5e882abc4c6054c75eb7101ac3d8d5bf34914f7f2a88a0867ae0b2e53af4179dc5b3dff7ea620dceb6c75dcdd9d4f68ddbec10b1842dd664fc89c0a17b77bf2f09652c985017f10f1f17204dedf0f3a99cc5257c2a0dac599aab8ea1c8f21b707a8e698e4900ecfd2cd1c5844e7ecd2286508733de2f2b18125e9f299bc87e778bc4c61461eca6929e194c0efe85406a1fb241456d2a8d2e265156f4749bf8e29c13f2952997cffb84eaa1c1289b8525a0e663157d9d296961b1e07c30f7023b16f28e9bd2e363e3a2f9976ae5c2254cd73f3cda365d50cfe16a54af3712d42579cb5ee4707739e4ea05af0873b44607b49eeeb1d04c5d1241026a3479499eb27126931fc0cf0ce51fc8e05a8c3e211ff7d7812e67a71657bfb8d3d940ed5246427b3a84f08bba99db555c086e44b175354b36d1cd063e1a588fb36b4e9254167db12f4295aeb3628a49898772138e352f833d81f6631ca5fa00502133e462dac4275e1932e4c48d144bad34e4c0ca31b957c5a471e22b2ed9ad66f659f00ff8f324c308b0c67a0c1d18cb0321639b636f9c8c73a92a6faf4bbdbe5a92fd4b5b1dc721ddb1e78481b29bc0a92441f505c18c1b5a96e240ff89baf9fbc7a5682a3288ac9c0585d5d0831ec4f91178551b7bd1f1da3a9419ae13f44d492d300cd10de46e7178ab5f53d3a1153021ff0b8efffa119fb64fb1bd239f1d7f1cc4c481cc385bdf3189f14a6e9c434eae16e5ed08d6b42d8b2e9a95f0868e52d98646c3bec87490f2fed187a419984f4b0dace71d3ee75c6b81224c575d6dd19fbf02796b9cfff2d472c91df19839dccec585260fddaa97ab480fe1b50b3fd114f221ecbd5a3f79f24b3a7b5d1a2b23fa09a3a76c03a68891d36b3f6dd730d828fc5e9ff5895fb0068fa0d1e6277b40cb507debe513e64736872b7685ddba468ad09294c88c24ec8b9a298eb66bfbac5b96a6e82033435bdb6e412f3d413d899b3fb26f843b1a645b83df6dc14f4f486a94d7ee7ac9bc8acb209de83f123860b18fefe0e041f663b6e136b7b76ff34bce6d9a1c935f39cbac05c975b52a9589dc1ad197a2e29f4b37763b46a7c560461aa1fa75683f4dd96c5af352fc4f088445b051fcef87629710ef024d9f97f174250ed32df2fb92aaee53cec2e1f8c8df521f2326b27c1367c395761c41f655e195e5b6b7084a4ed04f31850a206bcca3166d87f64c92fd7b56a82d2fba9565cc0f460219b44e78a7110892ea3420e37c115c5ff622a698a7145c7d3694c9df9f2cea7193db2c5b1cb6449a0961a982b9d31f66eb9d04568bf5e9f9a5b01f552c5a0905c227f61e1b4fa840138f168d3f90ce616b0f7e5c76309ffb557ada76224a65616bc759df9c5676a2a90b283599387a8ddb133dc27d41353caaf10a2569c45cf35f7d7cb59f8e2680726575ba963909b8b7e3b52cfbb320878c1185c3b9dbc120a323ce4d362d7875b4f1a1b137eb72cc3cfe04cb435f323b8661b14819fc9adbcddee161ad2b3a8d2631dcd11ea421efd112616d1b564db792740728face6dae2320d41bd9a7855299bb6f7572b65a6782ff5429706a407bf39673aa7aca0c5a80dd00c07899f14e2db648f83f425619c0d238ef7ba5f2903703cc702e89ce337d2509f2f4284698c494029b7f5e2f53dd20db2f3f9f8f529b919b76518f584576c947ac01c405dbaeb0eff07a2e8bf5c31c677000568a139d2dba4a87494465dd7eb606fe59abcf693cabb2af2ea8f566f52709e61bf75898d0766900e9a66662ff0984f8f46cabc288bb40a03a56e1bbeba2593139a7b546ee6122062cdfe1d8eb2700f859f45fc4cd5f0f6ee98e30b4ee3e2298ba0cd6370430fa1bccc36136f6aa9f9673fd1a6aa8aa2209a9ec8bbc1fc545288e61e2448635289f8c4e4e73204c3d09212fc37ccd0980f505aff54115b01f435fd2cc0a5f1ba58014a0dfdfb23d3d85db6d936832aef7e02b2c093a184f97d167ac4eddb5a7bd1d4e15840cbc74d3ddcf74c5722fcc9bc24dbce4f5e94861c699ae52eacaf9e4215514e66c277fbb7e61248982f76e4e9cbf075e8209b6b302a9f125864416ac0fb03095aa11951e9118f97447ce01265bd3993a8884175d1b4ad6e264231c4aef99904cd0935043c02aa5f0ba3263304c105091f37745857ae2fe126be1dde7aab9402919b1f9bda8e979cb446d7b90c2c49e4af15747ad41884559ca9f337159c45afa080ebdda791f6ca5e16f39ca32865a9e8474c927d0cbb0980b74ce03e6569d4c0938c554d35f1ee447ca30cb51a944f632385d37e039b8abe4f280c35cc63653290f52e63cbbc597cdbc00539102d0ddcdd48d808cb806e405297ab8e48b06e9d81b79ecc31bf4c270ba86c6614f2df6967e19903a1b7717398958b76a2febd005c9f522194bfc480e4a306c9a7bcc97d5c040f015beed182ff6a1d9089909882b82ca3f4cf3e82edbcf3c55fe55c9f177e2f100b483a92078143e3fa01a17066f82770b8561e39b8666be8b991efd7d6dbbb28fd34f8d319245b8b4bf9455c75b4b13474970ce9cd35bd2480626af133581320a1422fd16e8fea802da072a6bc9b75e35f6ed57ae867651e29002c9c1ef2f0893e67067f58667d83ab3d8eccd8d8df9c21c4d777320b6b57e4e4d485927ab82069e7b0465d2a8fc46f8319b2de159394581e4897d693401ffaceaf6eb316731fba03981fc9bfea62c20547417d47864140479c2718cbf4b8462d116b309ad60a27b34fe3958b5e32652af9da126e2ab22b159dee3d4330a5dcd1a253ce5b5e94871ec18069729efc0814b5b9c5a12fdc6cb7352454aceee820424a243906b2aaba6e932c5e4738c59a413e9d6adecc6ced029592b5044b0007d5d0f1cffa7f44da523b4ce66705adfe0be055994ed6730f107d90038f0945573b6f2e7d111fe15f14a9654d0f9f7d1f836cc5934da9fc3131d9734e4fa1503e67331a2efd1047970dddfcbc192c1417c304faa554f62d8ce8c712237e998145b147ae034d30374b51a5fe364fe9e60279e66521b21692ae0083648c34e49bf0b867c8c8529068addd73e541c9cb55bc407e4fee9ff31ab0b0cef636bd5c8e8b27af2f88c9d9044efb511dde65ab331daf01d1febcf0233f18a194603998144df97a5cfd9741a8b6c79f5c3d664f66713f37d4e4c48ac15f43783e5b2a77d70c352191970d7a37a8ed267677ec587d31d0b1e8a5f1a57fdb79bbbb3807b49eda8c21a7044c78cf0ea573082a4b8fc1a20693d04d6f4da0d99a16bc31896ecf55bad45eb19e5dd7cefde1ff8f6dac99cfe7d4f2e7a9b513b19e97972241d4ff637c228343c25db4456bc3e1f592329c52dfd89913566ec89eb64695632802e6a5069adbd5617cf46184bce0377f09e47b8b0dbd62b582a5ce573a7233f3736a496d6a1abe34d2b7d5ddd1f2f376b5123b635e23633d35f0d783585c4ca7e8f456e8dc9d42df293181b730265cb34108cc1af388086765fbc8267383294abc8f17f135944bb7dd590bef5ffebff0fd079766ac5872902c9ac6fe5f75ef7e854a3521adebea57e344c5f86342fd468d39dd54779ed91e4fba7e44143e416ba49eaa423ce1837cfbcc322b5d5046973919c9d46634152ffea4e4ac93b14c5bf06c934559612cac03d4bf9a1a802ed08576e30a739affe17ac98f032236ac7d56cddc190b0ef899546f8244cbf5de5a076f41a11a8d62102f4ab7dafe79e540923a7122d1a794939a481bd9032dfd68d500f1855c3329abd48c04de14c06f40c46020eab98bce8297e1b978bc8882d37193edb533fd67673003e8af51204195c7f3796e7e8d217485cdfdb47f157679bbffb75be381f1390cb51a48ca54a4f63486b913c8f7d5389fb14c6e24a9d21230be08fe575646614a8b5a8e54eb33a38beec0ff2f74ab02f9da783ae4a03fbad3418ab3719c8add7194f494ef99ff5ad418618c84ff68b3229eb5cf61f2a3ec9ec24eac133b9e739f3ae5d3bfbd89dfab8612433063cc57d8b56b8408d1179cc262acca193d26b66e621738d875aba6a892ac059c0aa8791823b6b579992305fb889e8d01b1ff9e192fe83d0004fc93f9e1fb63491fd9dadf3df02be328c47501354004f31f16e13473e2329634b66b372bbac5e30dd18683a28ae5dea32e1bd99348f4dda13484964880500fdec956d3d410103976c0c51c766fac9046b2743119d3510891e48f3d24834449e23d785f61065136b8e26e2d6d39d72801d3aedbb012c7d02bac58de6d0887e0589c457d7a2b7319168a18191f692c814762e8b5c6511f2392b2e0f3d05dd096314828af2a2a6751b37bb40ff34c25ba4c4c4062a03254148c67ceaeeac428538a3c5f7cb6b483405ff27bcdaa2a44d27ead87e742edbf9ca3f4f8f29fb4cbf9f74f9de7f78359b6049409fb335b7b7ad6bc38df85e623a47528f7349767caf3ba05c8a3a5cada6f842dfa6a4b5a458e479b36acc3b562975f4ed87ec4ea84dc3084b5e1957a9a661fcb1ab5f30efcb3c4053be21b352e60e3ef4c5012a6ac1c8a2184e9b5ad5303d63b88f3188d4b46ee39d0c614762a9d9c86f010d4506d26768744afa33ca4f99c257ed859fe8771464b137950e762856064b6fb324c4d979741980efb9bcc529fae433a98e6c40f622b0ed96b305e71807dbb1c02cebb4cc3dc29dc2f35cfac440738aef084dde60caa042767850de842ed8769293c16795f4281c71bb4fb4ceac5067ffb58e9d1259d6d1e84b50cd987c03c0727397e2f06213975a7411c3347a6edd26ad9986c39b223df72abf5f640e2069ef0c84a147a30905040126b230c284b96e967c9bd97a7a48af152de160df8cd35501f1a03182646bcbf06e6c663b6268dea48f255f4cc46178d6094d78cd6397ccd2be7725f6aadce8f20d238085d086f07c81f463f8f1c0c8843af05027454b8dc568d4f428132b2c177bf497776662e00ff3496ebeb897aefa82fc3107d59f2ba8b94bb27b2833e3316cb7057e7e75985182af0c5b31b2c56f0786d8723448cbae9f6a3d9b9fee2e97b6ad5314599318baf5f02fe380e42af813d6191d3445c3234cebf238509652eb9bcc6cbb11bf5a20165184d0d1d31d9e28426f943a374878239426e6b1be74af8ce2264a0da5c7154bac692eed700c6c664afe52899be303b70c9b461624e09d9fda871f5f1faea15839660bb9331839527f88adad7365b12ba54faf7235a3e74933e0888c6775f94f199b1a00d89aa7ea38abb5ca8c641b542eaa591b33e9ae716986c96d26dd748a6bd2e974a32b5b3c44761ff919fd7d2bbda4b0733c2d763b23432fdde9f1322e5d4eb782ef567240f1e984ff52a1884dc641ba0cd1ef4890e4f8f2a334c01b73f59c063959e746276ae5fa437faff3234b5124a9dd1d9aaf34ea810175d19062fe5dcaa7f13581319065c22556d82f9d5d58943e7b17e537ada860fab9d5ab9a5150b37fe5a4c903f1c2a82ac4d41f098fd59e51c19cca63523d43c7d3c5b4c929c6d7c448618a9694e9f20bcdc2a2ca07ea2bbca06369572a9b61dd78a420d217d73b889c9d317c23f96f95e1b36018fe2d8e282aee57ee112bd915ad38e44e4e0f26815a8104b4e1aff4590edb0ddc4f7bbea15b4cac6b1eb30a92f139fd9217b9cc97026ea8fde577a7334c235225c20eebfe88b4520d6d170ac967b07a18f5381ef912514b679bf2cff322fbe2d25fefb3135edfc4eeb72d4bfdce0720adad03161b75b7e89619b26c8a70078e82a9ec36e3124be479b7f0c67143ec21f7874452e57251589aff5c2fdc8f3b3a65671670e5c418b175d917dc350566db790c1c112bdd759ae178a57df026629ee75cdc88e7632711701960311db31666ce15eb1751272094413bc4719c8382551ef6b566c5f2e02827f9b943952488b8a2f9fb6b1fe7a8773f6037cfb7909be11cd45027d1eb78390dd8df0b1ef011c9b19dcf0f6135c916aa5da556105e256c887524b0d505fa0de6db3bad9a101416ba456e692ebdc7b2f759713ca675f4e0fa3d6ddff177affe7384f4c6c6d1fd8b8b8bddb81f16b206c1861ac48e2f18dc1f58a4aa54ad099a7f48248f37792c4b0c7d79e09badf6ca0d8a7cf7d851e95b4f48061e5a052439422ce31f8367f491ea659350ea1e7d7838efc7e9e07eb107ef9c37b78f02e88c7bde2f3a19ddc15997b41ea9504c4669a36f6e073ed69da491bab618e31b26068fda6b58b2c031e694736305d2ceb94e8c6603b3b0bdb639b22f3a94e47ec1cfd93bccd5e76e23e5436cb16d680b8411c88dbbdeaa7d5426160b9e29d627dcd024e7d132899d3c36426d87c00d86b48c2ac08109cfe30f2b59873c20c0fe002c78d7917d29d612ee865f5cf909368080a2d0dd376b5cc2ee2e94712b1992171edd82cb4eb54aa6d708c178e66c8eb92c127ce49aa87a420679b919f5e30d6e9027ed6f3061b713571a2e7f2604d5a1ce8c1f3c7d8e0287088a882c2b3be85a61e8b0950fe9125f8b7309149d20b8ae221ec9c4166bb6ba1a53e95181e99e607ae54ffa914190e8ca0d17bb30d9d04e40187eae225d05b0a3a9777731f830112520d0bb5bd536073b4194d0d19e9b03cc203246f5c8ba5ec48070ba46281eb322f67d2c84f7acdfadc0f672100745c75ccf355b99551298995c69dda72180bd09fad069f0e40158cd22221cca074bc2be58ca65d168ec2c23831ee67f23349824959b019ebce659dd31349e8d47f19241683d492e00bc3b21e54bc622ebe95ea87a5c14725bf41575d81a0f8102b209568f155272ef413bb3ab58f95ad1e4c7b6f4f188038aca33f39438b88b3bac2408eddd338f9e8713abdc4eef542bfee38899b7ccc69da229414df8f15ad8f39b51bb59fd4b85ee0359b8d0d90614c0a721b703808af8593245a631a170989", 0x2000, &(0x7f00000090c0)={&(0x7f0000000340)={0x50, 0x0, 0x8001, {0x7, 0x2b, 0x0, 0x4001008, 0x3f97, 0x7, 0x5b80, 0xfff, 0x0, 0x0, 0x100, 0x2}}, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xf4}}, &(0x7f0000000400)={0x18, 0xfffffffffffffffe, 0x1, {0x1000}}, &(0x7f0000004580)={0x18, 0x0, 0x1, {0x3}}, &(0x7f00000045c0)={0x18, 0x0, 0x8}, &(0x7f0000004680)={0x28, 0x0, 0x3, {{0x5, 0x27}}}, &(0x7f00000046c0)={0x60, 0xfffffffffffffff5, 0xa07, {{0x100, 0x8, 0x6, 0x100000001, 0xffffffffffffffff, 0x0, 0x6, 0x2}}}, &(0x7f0000004740)={0x18, 0x0, 0x8, {0x4}}, &(0x7f0000004780)={0x1c, 0xfffffffffffffff5, 0x8, {'net/netlink\x00'}}, &(0x7f00000047c0)={0x20, 0x0, 0x3, {0x0, 0xa}}, &(0x7f0000004840)={0x78, 0x0, 0x3, {0x8001, 0x6, 0x0, {0x4, 0x3, 0x8000000000000000, 0x4, 0xcbdd, 0x4, 0x0, 0x9, 0x1ff, 0x1000, 0x8, 0x0, 0x0, 0x7fffffff}}}, &(0x7f00000048c0)={0x90, 0xac636a3223100b50, 0x10001, {0x6, 0x3, 0x6, 0x8, 0x4, 0x6, {0x1, 0x3, 0x8000000000000001, 0x5, 0x9, 0x4e, 0x8, 0xa000, 0x873f, 0xc000, 0x80000001, 0x0, 0x0, 0x2498, 0x50}}}, &(0x7f0000004980)=ANY=[@ANYBLOB="30000000000000008a000000000000000200000000000c00ed0000000000000001000000060000000000"], &(0x7f0000008b80)={0x200, 0x0, 0x6, [{{0x4, 0x2, 0xdeb, 0x4, 0x9, 0xed9300, {0x0, 0x7, 0x9, 0x2, 0x1, 0x10001, 0x3b4a, 0x94ca, 0x7, 0x1000, 0xffff, 0x0, 0x0, 0x2, 0x5}}, {0x1, 0xfffffffffffffa51, 0x7, 0x80000000, 'status\x00'}}, {{0x0, 0x1, 0x5, 0x9, 0x4, 0x2, {0x2, 0x100, 0x1ff, 0x0, 0x2, 0x9f, 0x1, 0x3, 0x6, 0x10000, 0x1, 0x0, 0x0, 0x8000, 0x5}}, {0x5, 0x0, 0x2, 0x0, '\\+'}}, {{0x6, 0x2, 0x8, 0x1939, 0x0, 0x80000001, {0x6, 0x400, 0xff, 0x101, 0xfffffffffffffff8, 0x8, 0x10001, 0x0, 0xac9d, 0x8000, 0x1, 0x0, 0x0, 0x7, 0x100}}, {0x3, 0xb, 0x12, 0x101, '/dev/input/event#\x00'}}]}, &(0x7f0000008e40)={0xa0, 0x0, 0x1ff, {{0x0, 0x1, 0x5, 0x7f, 0x6, 0x2, {0x4, 0x80000001, 0x2, 0xffffffffffffffff, 0x67d2, 0x7, 0x2, 0x2, 0xf600, 0x8000, 0x6, 0x0, 0xffffffffffffffff, 0x1, 0x7}}, {0x0, 0x8}}}, &(0x7f0000008f00)={0x20, 0xfffffffffffffff5, 0x10001, {0xb, 0x0, 0x81, 0xc}}, &(0x7f0000008f80)={0x130, 0x0, 0x7ea, {0x1c, 0x7, 0x0, '\x00', {0x800, 0x3, 0x5, 0x9, 0x0, 0xffffffffffffffff, 0xc000, '\x00', 0xb4b, 0x6, 0x3, 0x7fffffff, {0xb192, 0x7}, {0x2, 0x7}, {0x3, 0xffff}, {0x200, 0x8d03}, 0x0, 0x0, 0x6, 0x1000}}}}) lseek(r4, 0x1000000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x100, 0x0) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x4a, 0x3, 0x1, "444900d730fae90100000004000000060ff697b900", 0x3234564e}) 6m6.076985876s ago: executing program 4 (id=745): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_ep_read(r0, 0x1, 0x9a, &(0x7f0000000140)=""/154) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)="2d31115fd9", 0x2}], 0x1, 0x4, 0xa) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="320200007d01000005f1000000000400000000000000040000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff81020200000000000000bc920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8105"], 0x232) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="d1b7d79b451c2bca6584aeaf9ea89f0529529da7199ea4b224f5695c7b4be2f436d939e254298273c7b0381f872783637ffc59f4cddd2e99ebba9245d9bada550b9120e5ae6ae652be56a3189102c9ed4f3c0c", 0x53}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000100)=0x6, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x4, 0x9, 0xfffffffffffffff7, 0x8, 0x0, 0x9, 0x5, 0x3, 0x8000000000000001, 0x0, 0x0, 0x800, 0xfff, 0x57, 0x4], 0x2, 0xc0000}) 6m5.587492253s ago: executing program 9 (id=746): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/157, 0x9d}, 0x39d2}], 0x1, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x200, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x20004005) 6m5.395383986s ago: executing program 9 (id=747): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) 6m4.412610264s ago: executing program 9 (id=749): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ppoll(&(0x7f0000000280)=[{r1, 0x8007}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6m4.407459804s ago: executing program 4 (id=750): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 6m3.795563805s ago: executing program 9 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x10) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) pselect6(0x40, &(0x7f0000000a80)={0x5, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x8, 0xa, 0x100000002dd6, 0x800, 0x1000000000f, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6m3.268718531s ago: executing program 40 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x10) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) pselect6(0x40, &(0x7f0000000a80)={0x5, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x8, 0xa, 0x100000002dd6, 0x800, 0x1000000000f, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6m2.31348618s ago: executing program 4 (id=755): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/157, 0x9d}, 0x39d2}], 0x1, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x200, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x20004005) 6m2.039564161s ago: executing program 4 (id=757): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) 6m1.055322148s ago: executing program 4 (id=758): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_ep_read(r0, 0x1, 0x9a, &(0x7f0000000140)=""/154) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)="2d31115fd9", 0x2}], 0x1, 0x4, 0xa) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="320200007d01000005f1000000000400000000000000040000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff81020200000000000000bc920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8105"], 0x232) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="d1b7d79b451c2bca6584aeaf9ea89f0529529da7199ea4b224f5695c7b4be2f436d939e254298273c7b0381f872783637ffc59f4cddd2e99ebba9245d9bada550b9120e5ae6ae652be56a3189102c9ed4f3c0c", 0x53}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000100)=0x6, 0x4) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000680)={0x0, "4900bb33663fb3b6d05a929145325c94db33661d4653f6702f7c8d16a03d8bc8", 0x1, 0x10, 0x6660, 0x1, 0x8, 0x9, 0x0, 0x1}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x4, 0x9, 0xfffffffffffffff7, 0x8, 0x0, 0x9, 0x5, 0x3, 0x8000000000000001, 0x0, 0x0, 0x800, 0xfff, 0x57, 0x4], 0x2, 0xc0000}) 6m0.690417006s ago: executing program 4 (id=759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x400, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c041}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x4c}}, 0x22008000) 6m0.196811483s ago: executing program 41 (id=759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x400, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c041}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x4c}}, 0x22008000) 4m21.88552011s ago: executing program 6 (id=1102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r1, 0x605, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040080) 4m21.717522484s ago: executing program 6 (id=1104): socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, 0x0, 0x0) dup2(r5, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r0, 0xffffffffffffffff, 0x0) 4m21.319897173s ago: executing program 6 (id=1105): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000d00070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000", 0x42}], 0x1) 4m21.094783101s ago: executing program 6 (id=1107): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 4m20.152920775s ago: executing program 6 (id=1116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r2, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000400)="5e8725069c61bb107488812bf4a7ad0490ec46eb4bfe2dd1272847c7054723ea3b0273fb89723dae65662ce699b418f0559f2e5ad073d17072f2ba7c39153220f344c0ca2335f6d342a1ce1a2c5454ca29de2e0560cccb86d25afe991cd0a2c79781b4ec57121da20fc59f63cf711fd3c1ed9e06db131db125746438e2d7f7693fc355cc5dac4894712f236afd579521c8", 0x91}], 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) close(r3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffee61435"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b0, 0x8031, 0xffffffffffffffff, 0x3000) 4m19.959770531s ago: executing program 6 (id=1119): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0x43c, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xd39, 0x8000, 0x4, 0x1, 0x7fffffff, 0x6, 0x6, 0x7, 0xffff, 0x3896330b, 0x0, 0x10000, 0x2, 0x8, 0xf, 0x2, 0x2, 0x0, 0x9, 0x7, 0x10001, 0x5, 0xc3, 0x0, 0xe, 0x3, 0x5, 0xf, 0x800, 0xbac, 0x200, 0x5, 0x10, 0x0, 0x9fe, 0x2, 0xfffffffc, 0x0, 0xffffffc0, 0x7, 0x10000, 0x2, 0x7, 0x0, 0x5, 0x100, 0x0, 0x6, 0x3, 0x7ff, 0x4, 0x1000, 0x3, 0x7ff, 0x2, 0x8, 0x1ee, 0x200, 0x2, 0x3ff, 0x102000, 0xffffffdc, 0x0, 0x0, 0xfff, 0xfffffffa, 0x200, 0x9, 0x8, 0xfffffbff, 0x1, 0x19, 0x7, 0x0, 0x8, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0x1000, 0x8, 0x2, 0xfffffffe, 0x0, 0x7fffffff, 0x8, 0x5, 0xe, 0x8, 0x3f, 0x81, 0x1, 0x1000, 0x0, 0x3, 0x7, 0x3, 0xcb, 0x5, 0x101, 0x400, 0x3ff, 0x0, 0x8d13, 0xff, 0x5, 0x4, 0x21ad, 0x2, 0x1, 0x8, 0x8001, 0x1, 0x80000001, 0x1ff, 0x10000, 0x5, 0x101, 0xb4b4, 0x3, 0x1, 0xc, 0x8, 0x2, 0x80000000, 0x8000, 0x8, 0x1, 0x9, 0x4, 0x7, 0x6, 0xc2c9, 0x7, 0x1e9, 0x4, 0x0, 0x4, 0xfffffffa, 0x80000001, 0xff, 0xfffffffb, 0x400, 0xb0d, 0x7, 0xffffb6f2, 0xe, 0x4, 0xe, 0x5, 0x80000000, 0x8a3, 0x2d8, 0x1, 0x6299, 0x7439, 0x1, 0x5, 0x6, 0x400, 0x0, 0x5, 0x9, 0x10000, 0xfffffff6, 0xf, 0xfffffffc, 0x38, 0x5, 0x0, 0x3, 0x5, 0xe, 0x0, 0x252d, 0xfffffffe, 0xfffffffd, 0x3, 0x200, 0x0, 0x4000000, 0x9, 0xfffffff7, 0x0, 0x2, 0xf, 0x5, 0x8, 0x3, 0x6, 0x1, 0x8, 0x4, 0x200000, 0xfffffff7, 0x0, 0x7, 0x431e, 0x0, 0x8000000, 0x2, 0x831, 0x180000, 0x1, 0x8a1, 0x5, 0x5, 0x8, 0xffff8000, 0xffffc917, 0x9, 0x4, 0x4085, 0x40, 0x80000000, 0xdc42, 0x0, 0x7, 0xffffff7d, 0xf805, 0x6, 0x45, 0x2, 0x0, 0x8, 0x200, 0x0, 0xfffff8fe, 0x1, 0x5, 0x2, 0xffffffff, 0x4, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xfff, 0x8, 0x81d, 0x45a, 0x3, 0x2, 0x7fdde78e, 0x7f, 0x80, 0x5, 0x3, 0x7, 0x80, 0x7993]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/74, 0x4a}], 0x1}, 0x20) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) 4m19.031916287s ago: executing program 42 (id=1119): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0x43c, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xd39, 0x8000, 0x4, 0x1, 0x7fffffff, 0x6, 0x6, 0x7, 0xffff, 0x3896330b, 0x0, 0x10000, 0x2, 0x8, 0xf, 0x2, 0x2, 0x0, 0x9, 0x7, 0x10001, 0x5, 0xc3, 0x0, 0xe, 0x3, 0x5, 0xf, 0x800, 0xbac, 0x200, 0x5, 0x10, 0x0, 0x9fe, 0x2, 0xfffffffc, 0x0, 0xffffffc0, 0x7, 0x10000, 0x2, 0x7, 0x0, 0x5, 0x100, 0x0, 0x6, 0x3, 0x7ff, 0x4, 0x1000, 0x3, 0x7ff, 0x2, 0x8, 0x1ee, 0x200, 0x2, 0x3ff, 0x102000, 0xffffffdc, 0x0, 0x0, 0xfff, 0xfffffffa, 0x200, 0x9, 0x8, 0xfffffbff, 0x1, 0x19, 0x7, 0x0, 0x8, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0x1000, 0x8, 0x2, 0xfffffffe, 0x0, 0x7fffffff, 0x8, 0x5, 0xe, 0x8, 0x3f, 0x81, 0x1, 0x1000, 0x0, 0x3, 0x7, 0x3, 0xcb, 0x5, 0x101, 0x400, 0x3ff, 0x0, 0x8d13, 0xff, 0x5, 0x4, 0x21ad, 0x2, 0x1, 0x8, 0x8001, 0x1, 0x80000001, 0x1ff, 0x10000, 0x5, 0x101, 0xb4b4, 0x3, 0x1, 0xc, 0x8, 0x2, 0x80000000, 0x8000, 0x8, 0x1, 0x9, 0x4, 0x7, 0x6, 0xc2c9, 0x7, 0x1e9, 0x4, 0x0, 0x4, 0xfffffffa, 0x80000001, 0xff, 0xfffffffb, 0x400, 0xb0d, 0x7, 0xffffb6f2, 0xe, 0x4, 0xe, 0x5, 0x80000000, 0x8a3, 0x2d8, 0x1, 0x6299, 0x7439, 0x1, 0x5, 0x6, 0x400, 0x0, 0x5, 0x9, 0x10000, 0xfffffff6, 0xf, 0xfffffffc, 0x38, 0x5, 0x0, 0x3, 0x5, 0xe, 0x0, 0x252d, 0xfffffffe, 0xfffffffd, 0x3, 0x200, 0x0, 0x4000000, 0x9, 0xfffffff7, 0x0, 0x2, 0xf, 0x5, 0x8, 0x3, 0x6, 0x1, 0x8, 0x4, 0x200000, 0xfffffff7, 0x0, 0x7, 0x431e, 0x0, 0x8000000, 0x2, 0x831, 0x180000, 0x1, 0x8a1, 0x5, 0x5, 0x8, 0xffff8000, 0xffffc917, 0x9, 0x4, 0x4085, 0x40, 0x80000000, 0xdc42, 0x0, 0x7, 0xffffff7d, 0xf805, 0x6, 0x45, 0x2, 0x0, 0x8, 0x200, 0x0, 0xfffff8fe, 0x1, 0x5, 0x2, 0xffffffff, 0x4, 0x4, 0x4, 0x10000, 0x0, 0x1, 0x0, 0xfff, 0x8, 0x81d, 0x45a, 0x3, 0x2, 0x7fdde78e, 0x7f, 0x80, 0x5, 0x3, 0x7, 0x80, 0x7993]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/74, 0x4a}], 0x1}, 0x20) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) 16.194004207s ago: executing program 3 (id=1823): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="e000000013000100000000008bcd36aa5f9eca00000000cde73661dc24b5af93b6"], 0xe0}], 0x1}, 0x0) 15.927033636s ago: executing program 3 (id=1825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}, {0x6, 0x6808, 0x81, &(0x7f00000009c0)="043cb60a56e27a4c68b366d3e58181b5c34b74bee631798684f5a56d6532ffca5d36143fdcec18cc8b3213976a3fc08aff92f2b89945b7b0c5eefa27023b1255d07451cb983965bf38fa80e4f5da4a21b5352bff6de3f6e27b29198193485b14b2dfafd1ad93bac454dc7168420ddbb1513d32409ea706b665945461437464ad4a"}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) 12.543011885s ago: executing program 0 (id=1835): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x5, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) (fail_nth: 3) 12.333221755s ago: executing program 0 (id=1837): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000300)={0x0, 0x23, 0x15, {0x15, 0x1, "e46107002bc56b6d1d75c259c49961cc2b12dd"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f0000000380)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x8, "7e83ec18"}, @local=@item_012={0x2, 0x2, 0xa, "f51c"}, @main=@item_4={0x3, 0x0, 0x9, "ab573d6f"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3e7, 0x6, 0x1, {0x22, 0x912}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000480)={0x20, 0x9, 0x4d, "ee792face184dd2c1aea8260511bfcb2324ce1c7917f4d7fbf707d41cc136296ed22e6c0c731151fd71ec444cfa4bc0e66a4d3490a8c5ecd5138c5602098f3c9cf4bdb4f47c61219b9e342d3fe"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000580)={0x20, 0x1, 0xfb, "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"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x4}}) 10.687432468s ago: executing program 7 (id=1840): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) syz_emit_ethernet(0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1208004500005e000000000000000000090000000000002480655800000000100008000005039e0fff000086dd080088be00000000100c00000100000000000000080022eb00000000200002000000000000000000000008006558000000003660227ebc393137d93a6ecddf"], 0x0) sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) r2 = gettid() ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) 9.581134544s ago: executing program 1 (id=1844): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d", @ANYRES32], 0x0) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}, 0x39d2}], 0x1, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x200, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x20004005) 9.531306979s ago: executing program 3 (id=1845): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_disconnect(r2) close_range(r1, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="24010003001f66088f0510660548010203010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x3, 0x6000, 0x0, 0x0}, {0x1, 0xa211, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 9.250297416s ago: executing program 7 (id=1846): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 8.809031541s ago: executing program 0 (id=1847): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) r1 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x49a4, 0x1, 0x101, 0x13e}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x9685, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 8.511387634s ago: executing program 0 (id=1848): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x4b, 0x8001, 0x0, 0x4, 0x1003, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) r3 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) write$qrtrtun(r5, &(0x7f0000000200)="b85b0038f29bbd5398c97e27bbe86d01f9022b5b52986bd229e755df85be10f3805a032cbf665dac354aea5056bbd9f714466ab62b2344199407b1f97ea368300b98d8e5bfacedd90d4da5cff58941294d345334c431426753188f26629d6f665b3cda2369bb4d22733ad979774dcc27de6add5edb6316784b1a241af9a7b4305bc3750f7434273fd778e2e32b4b9a3fb3caa558e0a4da09c7d2c6375fee4b96cfae4d43a020726d7f4db2d5917925f7eae64ecf0aa16a41", 0xb8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x4010) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 8.491097334s ago: executing program 1 (id=1849): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r0, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "00008000", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000400)="5e8725069c61bb107488812bf4a7ad0490ec46eb4bfe2dd1272847c7054723ea3b0273fb89723dae65662ce699b418f0559f2e5ad073d17072f2ba7c39153220f344c0ca2335f6d342a1ce1a2c5454ca29de2e0560cccb86d25afe991cd0a2c79781b4ec57121da20fc59f63cf711fd3c1ed9e06db131db125746438e2d7f7693fc355cc5dac4894712f236afd579521c8", 0x91}], 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) close(r1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffee61435"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b0, 0x8031, 0xffffffffffffffff, 0x3000) 8.40874778s ago: executing program 7 (id=1850): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.01922233s ago: executing program 1 (id=1851): socket$key(0xf, 0x3, 0x2) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x2, 0x1) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) read$FUSE(r4, 0x0, 0x0) capget(&(0x7f0000000140)={0x19980330}, &(0x7f0000000300)={0xffffffff, 0x7, 0x9, 0x9, 0x7f, 0x80000204}) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000240)={0x10001, 0x1, 0x2, "8608ba41085e351e77cebd465b38ae3ecb74783a1e8e07a9a026ad7bfb2ae176", 0x494e4f4b}) lsetxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x2) r6 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x21e2f, 0x7f, 0x1681bcd7, 0x0, 0x0, 0x400, 0x0, 0x6}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = gettid() ptrace$getsig(0x4202, r7, 0xf1f0, 0x0) 7.975129298s ago: executing program 7 (id=1852): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x18, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x200002f, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x375, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000032000000", 0xfe60) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8090) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaa21bbbbbbbbbbbb88b71500810048008848450407000066004005069078ffffffffac14140f4e244e223433bbd677b4771f9f3a55f13b61730dc1986032638fd652660b400775e9510659675c2601f00683b0f5ccd5a7a2b063917a0ea085a71746", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], &(0x7f00000001c0)={0x1, 0x93, [0xb33, 0x9aa, 0x80000000, 0xc0f]}) 6.465250236s ago: executing program 1 (id=1853): r0 = socket(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000640)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xfffffffffffffe2d, 0x0, 0x2, 0x2}}, 0x48) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}}, &(0x7f0000000200)) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0xffffffff, @remote, 0x5000009}, 0x1c) sendmmsg$inet(r8, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)="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", 0x2d7}, {&(0x7f0000000340)="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", 0x22f}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf032a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5c", 0x58}, {&(0x7f0000001080)="8faf7172d3633337220d108a9a30ebea9e53fe6da99d0af7559a91c233149eb33b48ad046a2851", 0x27}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0xfffffffe, 0x7fffbfff, {0x0, 0x0, 0x0, r9, {0xfff1, 0xfff2}, {0xa, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{}, {0x0, 0x2, [@TCA_CAKE_SPLIT_GSO={0x0, 0x11, 0x1}]}}]}, 0x18}, 0x1, 0x0, 0x0, 0x4045}, 0x40000) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x8000003d) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000580)=0x1) r11 = syz_open_pts(0xffffffffffffffff, 0x4000) ioctl$KDFONTOP_GET(r11, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x16, 0x2, 0x87, &(0x7f00000000c0)}) 6.464725778s ago: executing program 5 (id=1854): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) 6.396775886s ago: executing program 0 (id=1855): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}, {0x6, 0x6808, 0x81, &(0x7f00000009c0)="043cb60a56e27a4c68b366d3e58181b5c34b74bee631798684f5a56d6532ffca5d36143fdcec18cc8b3213976a3fc08aff92f2b89945b7b0c5eefa27023b1255d07451cb983965bf38fa80e4f5da4a21b5352bff6de3f6e27b29198193485b14b2dfafd1ad93bac454dc7168420ddbb1513d32409ea706b665945461437464ad4a"}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) 6.284484273s ago: executing program 3 (id=1856): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1, &(0x7f0000006680)) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000040)=""/64, 0x40}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000002a00)=""/18, 0x12}], 0x5}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}, {{&(0x7f0000002740)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002880)=[{&(0x7f00000027c0)=""/136, 0x88}], 0x1}, 0x40}], 0x3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x24004042}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000140)="90", 0x1}], 0x1}}], 0x1, 0xf1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x1b, 0x76, 0x36, 0x20, 0x525, 0x9901, 0x3975, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x84, 0x4, 0x2, 0xc4, 0xc6, 0x1f, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) 5.917785252s ago: executing program 1 (id=1857): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000300)={0x0, 0x23, 0x15, {0x15, 0x1, "e46107002bc56b6d1d75c259c49961cc2b12dd"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f0000000380)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x8, "7e83ec18"}, @local=@item_012={0x2, 0x2, 0xa, "f51c"}, @main=@item_4={0x3, 0x0, 0x9, "ab573d6f"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3e7, 0x6, 0x1, {0x22, 0x912}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000480)={0x20, 0x9, 0x4d, "ee792face184dd2c1aea8260511bfcb2324ce1c7917f4d7fbf707d41cc136296ed22e6c0c731151fd71ec444cfa4bc0e66a4d3490a8c5ecd5138c5602098f3c9cf4bdb4f47c61219b9e342d3fe"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000580)={0x20, 0x1, 0xfb, "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"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x4}}) 5.46440126s ago: executing program 5 (id=1858): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) r1 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x49a4, 0x1, 0x101, 0x13e}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x9685, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 5.367700663s ago: executing program 5 (id=1859): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d", @ANYRES32], 0x0) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}, 0x39d2}], 0x1, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x200, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x20004005) 5.321352718s ago: executing program 7 (id=1860): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.523934335s ago: executing program 5 (id=1861): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r2, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "00008000", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000400)="5e8725069c61bb107488812bf4a7ad0490ec46eb4bfe2dd1272847c7054723ea3b0273fb89723dae65662ce699b418f0559f2e5ad073d17072f2ba7c39153220f344c0ca2335f6d342a1ce1a2c5454ca29de2e0560cccb86d25afe991cd0a2c79781b4ec57121da20fc59f63cf711fd3c1ed9e06db131db125746438e2d7f7693fc355cc5dac4894712f236afd579521c8", 0x91}], 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) close(r3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffee61435"], 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b0, 0x8031, 0xffffffffffffffff, 0x3000) 3.987595794s ago: executing program 7 (id=1862): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f210040290000000109021200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}, {0x6, 0x6808, 0x801, &(0x7f00000009c0)="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"}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) 3.936422102s ago: executing program 3 (id=1863): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x3, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000080)=[{0x26, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) socket$packet(0x11, 0x3, 0x300) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x40000, 0x0) syz_io_uring_setup(0x312d, &(0x7f0000000200)={0x0, 0x8008663, 0x10100, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f0000002080)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x4845a088, 0x1, 0x3, 0x1, 0xffffffff, 0x0, 0x0, 0x40, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fsopen(&(0x7f0000000180)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 3.264994775s ago: executing program 5 (id=1864): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.917900457s ago: executing program 3 (id=1865): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0/file0'}, 0x11) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000004c0)={0x18, &(0x7f0000001240)={0x40, 0x23, 0x25, {0x25, 0xa, "dd68be70000abdf5cf1a266ca5a45f0ea4bdd18b9ae0a1e0cf9e74d7776b74594cb885"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000400)={0x1}) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) add_key(&(0x7f0000000040)='user\x00', 0x0, &(0x7f0000000340)="312a15daf32e2c018696dbd27ccc09430c72f20ac7338f55fc4e3b135a3b16b8d7acf68ddbc688745d9b8d8027225a4587268b790f135bfb00d8de04e14aad6b325729e16c072cbbbede43d03017cf6059e0dbf530e68fb4a07f91e8463d430e6139fca6beb9ca23bd1d70c2cd6dbfb763", 0x71, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.348715873s ago: executing program 1 (id=1866): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_disconnect(r2) close_range(r1, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="24010003001f66088f0510660548010203010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x3, 0x6000, 0x0, &(0x7f00000003c0)}, {0x1, 0xa211, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 123.358326ms ago: executing program 5 (id=1867): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x1, 0x0, {0xa, 0x4e23, 0x400, @mcast1}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x2) syz_usb_connect(0x0, 0x120, &(0x7f0000000000)=ANY=[@ANYBLOB="120101007cde0440720c130049b30000000109020e0101000000000904e50008c5440600090501"], 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3fc, 0x204, 0x940c, 0x3002, 0x204, 0x2c0, 0x334, 0x3d8, 0x3d8, 0x334, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1bc, 0x204, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}, @common=@inet=@recent0={{0xf4}, {0x6, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x80, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x458) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185648, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f00000000c0), 0x10) sendto$l2tp(r7, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback, 0x40000}, 0x10) setsockopt$inet_int(r7, 0x0, 0xc, &(0x7f0000000080)=0x3, 0x4) r8 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$zero(0xffffff9c, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) 0s ago: executing program 0 (id=1868): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x9, 0xfc, 0x0, @generic=0x800}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, 0x0, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r14 = dup2(r5, r8) ioctl$VIDIOC_S_JPEGCOMP(r14, 0x408c563e, &(0x7f00000006c0)={0x0, 0xe, 0x4, "4bb034868517e4acda426ee59e4bd8a8ca4b64f2fa2ac9523fee3e0dc9b804330368d739d0e69e155d4b0b78d876b48ffdbe9e118720ac4f7738dbed", 0xf, "79e350aaca376e008c1d32b29223e8db13b2945dbb18c6734ae47954cfd8cd21d27d9e5c047edf9a216764f94ab9adfe25691155276e727352a9a6f3", 0xd0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000006000000050019000100000008000800faffffff0800070000fd0000050018"], 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000400)={'ip6tnl0\x00', r2, 0x0, 0x8, 0x9, 0xfffffff6, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x3, 0x1}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x170, r13, 0x0, 0x70bd2b, 0x0, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040009) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r16}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) kernel console output (not intermixed with test programs): T855] usb 8-1: no configurations [ 489.150311][ T855] usb 8-1: can't read configurations, error -22 [ 489.188447][ T855] usb usb8-port1: unable to enumerate USB device [ 489.195179][ T7181] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 489.215993][ T5917] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 489.229826][ T7181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.242199][ T5914] usb usb1-port1: unable to enumerate USB device [ 489.256797][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.257535][ T7181] usb 2-1: config 0 descriptor?? [ 489.465967][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.510461][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 489.569900][ T5917] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 489.587010][ T5917] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 489.613667][ T5917] usb 4-1: Manufacturer: syz [ 489.697392][ T5917] usb 4-1: config 0 descriptor?? [ 489.969646][T13324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1533'. [ 489.985611][ T7181] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 489.992844][ T7181] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 490.002119][ T7181] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 490.127512][ T7181] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 490.135599][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 490.149614][ T7181] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 490.160510][ T7181] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 490.175083][ T7181] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 490.206104][ T7181] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 490.370213][ T5917] appleir 0003:05AC:8243.0010: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 490.590704][ T7181] cp2112 0003:10C4:EA90.000F: Part Number: 0x00 Device Version: 0x00 [ 490.774556][ T7181] cp2112 0003:10C4:EA90.000F: error requesting SMBus config [ 490.826078][ T7181] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -32 [ 490.990625][ T5828] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 491.260102][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 491.275207][ T5828] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.299730][ T5828] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 491.343175][ T5828] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 491.399677][ T5828] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 491.488579][ T5828] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 491.504018][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.525939][ T5828] hub 1-1:1.0: bad descriptor, ignoring hub [ 491.538922][ T5828] hub 1-1:1.0: probe with driver hub failed with error -5 [ 491.551389][ T5828] cdc_wdm 1-1:1.0: skipping garbage [ 491.557368][ T5828] cdc_wdm 1-1:1.0: skipping garbage [ 491.574823][ T5828] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 491.585522][ T5828] cdc_wdm 1-1:1.0: Unknown control protocol [ 491.859738][ T5917] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 491.909154][ T5828] usb 1-1: USB disconnect, device number 51 [ 492.279670][ T5834] usb 2-1: USB disconnect, device number 35 [ 492.362937][ T24] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 492.516453][T13362] tipc: Enabled bearer , priority 0 [ 492.530951][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.545320][T13362] syzkaller0: entered promiscuous mode [ 492.565390][T13362] syzkaller0: entered allmulticast mode [ 492.568226][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 492.634379][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 492.658604][T13364] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1539'. [ 492.674499][T13362] tipc: Resetting bearer [ 492.689325][ T24] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 492.711483][T13359] tipc: Resetting bearer [ 492.723458][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.750522][T13359] tipc: Disabling bearer [ 492.762642][T13335] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.785768][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 492.816156][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 492.846429][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 492.866376][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 492.907787][ T24] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 492.932998][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 493.015813][ T24] usb 1-1: USB disconnect, device number 52 [ 493.063034][ T5914] usb 4-1: USB disconnect, device number 38 [ 493.819335][ T7181] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 494.138503][T13394] netlink: 'syz.0.1545': attribute type 10 has an invalid length. [ 494.339409][ T7181] usb 8-1: device descriptor read/64, error -71 [ 494.721226][ T7181] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 494.891503][ T7181] usb 8-1: device descriptor read/64, error -71 [ 495.000306][ T7181] usb usb8-port1: attempt power cycle [ 495.080990][ T5914] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 495.369671][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 495.401687][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 495.421312][ T5914] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 495.431083][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.439613][ T7181] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 495.447502][ T5914] usb 6-1: Product: syz [ 495.492618][ T5914] usb 6-1: Manufacturer: syz [ 495.497268][ T5914] usb 6-1: SerialNumber: syz [ 495.511980][ T7181] usb 8-1: device descriptor read/8, error -71 [ 495.623679][ T5914] usb 6-1: config 0 descriptor?? [ 495.799444][ T7181] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 495.830716][ T7181] usb 8-1: device descriptor read/8, error -71 [ 496.094655][ T7181] usb usb8-port1: unable to enumerate USB device [ 497.368908][ T7181] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 497.709885][ T7181] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 497.742885][ T7181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.786302][ T7181] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.825756][ T24] usb 6-1: USB disconnect, device number 47 [ 497.928177][ T7181] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 497.952496][ T7181] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 497.972620][ T7181] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 498.157681][ T7181] usb 8-1: Manufacturer: syz [ 498.210494][ T7181] usb 8-1: config 0 descriptor?? [ 499.147056][ T7181] appleir 0003:05AC:8243.0011: item fetching failed at offset 0/1 [ 499.277992][ T7181] appleir 0003:05AC:8243.0011: parse failed [ 499.327153][ T7181] appleir 0003:05AC:8243.0011: probe with driver appleir failed with error -22 [ 499.741992][T13477] netlink: 'syz.1.1556': attribute type 10 has an invalid length. [ 500.789739][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1557'. [ 501.243426][ T7181] usb 8-1: USB disconnect, device number 47 [ 501.264347][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 501.538555][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.545263][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.479549][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 502.702314][ T24] usb 2-1: device descriptor read/64, error -71 [ 502.909412][ T5828] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 502.959410][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 503.141814][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 503.148659][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 503.174494][ T5828] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 503.195467][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.269525][ T24] usb 2-1: device descriptor read/64, error -71 [ 503.290397][ T5828] usb 1-1: Product: syz [ 503.296889][ T5828] usb 1-1: Manufacturer: syz [ 503.323037][ T5828] usb 1-1: SerialNumber: syz [ 503.348797][ T5828] usb 1-1: config 0 descriptor?? [ 503.379910][ T24] usb usb2-port1: attempt power cycle [ 503.789579][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 503.959328][ T5914] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 504.106099][ T24] usb 2-1: device descriptor read/8, error -71 [ 504.195185][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1567'. [ 504.229770][ T5914] usb 8-1: Using ep0 maxpacket: 32 [ 504.239438][ T5914] usb 8-1: no configurations [ 504.244087][ T5914] usb 8-1: can't read configurations, error -22 [ 504.359500][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 504.392534][ T5914] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 504.392582][ T24] usb 2-1: device descriptor read/8, error -71 [ 504.559650][ T24] usb usb2-port1: unable to enumerate USB device [ 504.569428][ T5914] usb 8-1: Using ep0 maxpacket: 32 [ 504.583039][ T5914] usb 8-1: no configurations [ 504.589106][ T5914] usb 8-1: can't read configurations, error -22 [ 504.599131][ T5914] usb usb8-port1: attempt power cycle [ 504.963456][ T5914] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 505.010116][ T5914] usb 8-1: Using ep0 maxpacket: 32 [ 505.018808][ T5914] usb 8-1: no configurations [ 505.092249][ T5914] usb 8-1: can't read configurations, error -22 [ 505.247329][ T5914] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 505.340020][ T5914] usb 8-1: Using ep0 maxpacket: 32 [ 505.346327][ T5914] usb 8-1: no configurations [ 505.351524][ T5914] usb 8-1: can't read configurations, error -22 [ 505.425201][ T5914] usb usb8-port1: unable to enumerate USB device [ 505.871248][ T5907] usb 1-1: USB disconnect, device number 53 [ 506.308585][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 506.308602][ T30] audit: type=1326 audit(1761524881.845:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 506.367731][T13589] --map-set only usable from mangle table [ 506.380375][ T30] audit: type=1326 audit(1761524881.885:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 506.402773][ T30] audit: type=1326 audit(1761524881.885:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 506.501953][ T30] audit: type=1326 audit(1761524881.895:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 506.574686][ T30] audit: type=1326 audit(1761524881.895:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 506.654232][ T30] audit: type=1326 audit(1761524881.895:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 506.728376][ T30] audit: type=1326 audit(1761524881.905:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 507.179435][ T30] audit: type=1326 audit(1761524881.905:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 507.239583][ T30] audit: type=1326 audit(1761524881.905:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 507.408241][ T30] audit: type=1326 audit(1761524881.905:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 509.728222][T13636] --map-set only usable from mangle table [ 510.449349][ T5907] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 510.957730][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.968832][ T5907] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 511.008456][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.049639][ T5907] usb 6-1: config 0 descriptor?? [ 511.314586][ T5907] usbhid 6-1:0.0: can't add hid device: -71 [ 511.320742][ T5907] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 511.333046][ T5907] usb 6-1: USB disconnect, device number 48 [ 511.759346][ T5917] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 512.009342][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 512.016509][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.163046][ T5917] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 512.192026][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.322234][ T5917] usb 6-1: config 0 descriptor?? [ 512.624655][ T5917] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 512.645784][ T5917] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 512.838377][ T5917] usb 6-1: USB disconnect, device number 49 [ 512.929763][ T5939] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 512.965756][ T5917] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 513.430854][ T5939] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 513.587425][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.651286][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.686076][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 513.744919][ T5939] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 513.754433][ T5939] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 513.925801][ T5939] usb 1-1: Manufacturer: syz [ 514.060471][ T5939] usb 1-1: config 0 descriptor?? [ 514.532908][ T5939] appleir 0003:05AC:8243.0012: item fetching failed at offset 0/1 [ 514.551217][ T5939] appleir 0003:05AC:8243.0012: parse failed [ 514.557645][ T5939] appleir 0003:05AC:8243.0012: probe with driver appleir failed with error -22 [ 516.411055][ T9] usb 1-1: USB disconnect, device number 54 [ 517.634962][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 517.804707][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 517.815813][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.863319][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.404995][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 518.419938][T13766] netlink: 'syz.7.1601': attribute type 10 has an invalid length. [ 518.525047][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 518.535897][ T9] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 518.707672][ T9] usb 6-1: Manufacturer: syz [ 518.802441][T13772] netlink: 'syz.1.1602': attribute type 10 has an invalid length. [ 518.843057][ T9] usb 6-1: config 0 descriptor?? [ 519.293221][ T9] appleir 0003:05AC:8243.0013: item fetching failed at offset 0/1 [ 519.660880][ T9] appleir 0003:05AC:8243.0013: parse failed [ 519.689199][ T9] appleir 0003:05AC:8243.0013: probe with driver appleir failed with error -22 [ 520.899346][ T5907] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 520.980599][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 521.096660][ T5907] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 521.185105][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.198277][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.208114][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 521.241240][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 521.282834][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.311841][ T5907] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 521.344547][ T5907] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 521.365105][ T5907] usb 4-1: Manufacturer: syz [ 521.387374][ T5907] usb 4-1: config 0 descriptor?? [ 521.488934][T13083] usb 6-1: USB disconnect, device number 50 [ 521.489360][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.629720][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 521.733482][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 521.829899][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 521.862722][ T9] usb 2-1: Manufacturer: syz [ 521.871516][ T9] usb 2-1: config 0 descriptor?? [ 522.008486][ T5907] appleir 0003:05AC:8243.0014: item fetching failed at offset 0/1 [ 522.500381][ T5907] appleir 0003:05AC:8243.0014: parse failed [ 522.502643][ T9] appleir 0003:05AC:8243.0015: item fetching failed at offset 0/1 [ 522.514484][ T5907] appleir 0003:05AC:8243.0014: probe with driver appleir failed with error -22 [ 522.607872][ T9] appleir 0003:05AC:8243.0015: parse failed [ 522.729584][ T9] appleir 0003:05AC:8243.0015: probe with driver appleir failed with error -22 [ 522.899956][ T7181] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 523.287984][ T7181] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 523.365944][ T7181] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.474259][ T7181] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.499721][ T7181] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 523.527988][ T7181] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 523.545536][ T7181] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 523.560240][ T7181] usb 6-1: Manufacturer: syz [ 523.613920][ T7181] usb 6-1: config 0 descriptor?? [ 524.041182][ T7181] appleir 0003:05AC:8243.0016: item fetching failed at offset 0/1 [ 524.049883][ T7181] appleir 0003:05AC:8243.0016: parse failed [ 524.055826][ T7181] appleir 0003:05AC:8243.0016: probe with driver appleir failed with error -22 [ 524.143782][ T9] usb 4-1: USB disconnect, device number 39 [ 524.343916][ T5887] usb 2-1: USB disconnect, device number 40 [ 525.022320][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 525.229982][T13839] tipc: Enabled bearer , priority 0 [ 525.371973][T13839] syzkaller0: entered promiscuous mode [ 525.379455][T13839] syzkaller0: entered allmulticast mode [ 525.477882][T13839] tipc: Resetting bearer [ 525.503084][T13838] tipc: Resetting bearer [ 525.691586][T13838] tipc: Disabling bearer [ 526.029913][T13851] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1617'. [ 526.231255][T13083] usb 6-1: USB disconnect, device number 51 [ 526.350989][T13851] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1617'. [ 527.279319][T13083] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 527.279325][ T5887] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 527.349457][ T5917] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 527.439337][T13083] usb 2-1: Using ep0 maxpacket: 32 [ 527.446405][T13083] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 527.456380][T13083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.465768][ T5887] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 527.467528][T13083] usb 2-1: config 0 descriptor?? [ 527.498348][ T5887] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 527.533761][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 527.569633][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 527.593239][ T5917] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 527.617962][ T5887] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.638348][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.657512][ T5917] usb 6-1: config 0 descriptor?? [ 527.663517][ T5887] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 527.700115][T13083] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 527.705382][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 527.733217][T13083] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 527.739349][ T5887] usb 4-1: Product: syz [ 527.746657][ T5887] usb 4-1: Manufacturer: syz [ 527.766918][T13083] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 527.786151][T13083] usb 2-1: media controller created [ 527.809387][ T5887] cdc_wdm 4-1:1.0: skipping garbage [ 527.820571][ T5887] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 527.832222][T13083] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 527.920516][ T5917] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 527.932529][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 527.953611][ T5917] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 527.973980][ T5917] usb 6-1: media controller created [ 528.011334][T13083] DVB: Unable to find symbol dib7000p_attach() [ 528.023168][ T5887] usb 4-1: USB disconnect, device number 40 [ 528.038236][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.164755][ T5917] DVB: Unable to find symbol dib7000p_attach() [ 528.185097][ T5917] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 528.269369][T13083] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 528.283009][ T5917] rc_core: IR keymap rc-dib0700-rc5 not found [ 528.295076][ T5917] Registered IR keymap rc-empty [ 528.308448][ T5917] dvb-usb: could not initialize remote control. [ 528.327555][ T5917] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 528.367474][ T5917] usb 6-1: USB disconnect, device number 52 [ 528.440798][ T5917] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 528.458556][T13083] rc_core: IR keymap rc-dib0700-rc5 not found [ 528.464733][T13083] Registered IR keymap rc-empty [ 528.471945][T13083] dvb-usb: could not initialize remote control. [ 528.478235][T13083] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 528.489758][ T5887] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 528.512807][T13083] usb 2-1: USB disconnect, device number 41 [ 528.537678][T13083] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 528.650663][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 528.657933][ T5887] usb 4-1: unable to get BOS descriptor or descriptor too short [ 528.667644][ T5887] usb 4-1: config 4 interface 0 has no altsetting 0 [ 528.677559][ T5887] usb 4-1: string descriptor 0 read error: -22 [ 528.701366][ T5887] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 528.719569][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.753669][ T5887] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 528.791597][ T5887] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 528.829775][ T5887] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 528.847383][ T5887] usb 4-1: media controller created [ 528.900023][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.923080][T13890] tipc: Enabled bearer , priority 0 [ 528.933824][T13892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1631'. [ 528.949176][T13890] syzkaller0: entered promiscuous mode [ 528.957685][T13890] syzkaller0: entered allmulticast mode [ 528.973491][T13892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1631'. [ 529.004991][T13890] tipc: Resetting bearer [ 529.047937][T13889] tipc: Resetting bearer [ 529.181868][T13889] tipc: Disabling bearer [ 529.225181][ T5887] usb 4-1: USB disconnect, device number 41 [ 530.855001][T13923] netlink: 'syz.0.1639': attribute type 10 has an invalid length. [ 532.965758][ T5887] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 533.172073][ T5887] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 533.189362][ T5887] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 533.223763][ T5887] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 533.247290][ T5887] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.272270][ T5917] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 533.520669][T13083] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 533.645607][ T5887] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 533.669343][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 533.674652][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 533.683521][ T5917] usb 2-1: no configurations [ 533.712301][T13083] usb 8-1: Using ep0 maxpacket: 8 [ 533.718386][ T5917] usb 2-1: can't read configurations, error -22 [ 533.720489][T13083] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.735249][T13083] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 533.737794][ T5887] usb 1-1: Product: syz [ 533.744557][T13083] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 533.759631][ T5887] usb 1-1: Manufacturer: syz [ 533.766937][T13083] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 533.814549][T13083] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 533.828577][ T5887] cdc_wdm 1-1:1.0: skipping garbage [ 533.834256][ T5887] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 533.854231][T13083] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.869429][ T5917] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 533.883578][T13083] hub 8-1:1.0: bad descriptor, ignoring hub [ 533.909781][T13083] hub 8-1:1.0: probe with driver hub failed with error -5 [ 533.931555][T13083] cdc_wdm 8-1:1.0: skipping garbage [ 533.957776][T13083] cdc_wdm 8-1:1.0: skipping garbage [ 534.099438][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 534.110023][ T5917] usb 2-1: no configurations [ 534.114662][ T5917] usb 2-1: can't read configurations, error -22 [ 534.135145][ T5887] usb 1-1: USB disconnect, device number 55 [ 534.149861][ T5917] usb usb2-port1: attempt power cycle [ 534.223313][T13083] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 534.279045][T13083] cdc_wdm 8-1:1.0: Unknown control protocol [ 534.330708][T13083] usb 8-1: USB disconnect, device number 52 [ 534.510999][ T5917] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 534.540128][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 534.546011][ T5917] usb 2-1: no configurations [ 534.550841][ T5917] usb 2-1: can't read configurations, error -22 [ 534.579307][ T855] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 534.679539][ T5917] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 534.705194][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 534.711163][ T5917] usb 2-1: no configurations [ 534.715865][ T5917] usb 2-1: can't read configurations, error -22 [ 534.722958][ T5917] usb usb2-port1: unable to enumerate USB device [ 534.729565][T13083] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 534.737363][ T855] usb 1-1: Using ep0 maxpacket: 8 [ 534.747072][ T855] usb 1-1: unable to get BOS descriptor or descriptor too short [ 534.760153][ T855] usb 1-1: config 4 interface 0 has no altsetting 0 [ 534.774258][ T855] usb 1-1: string descriptor 0 read error: -22 [ 534.781332][ T855] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 534.799328][ T855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.842868][ T855] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 534.882588][ T855] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 534.897919][T13083] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.915953][T13083] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 534.970291][ T855] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 534.980421][T13083] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 535.075438][ T855] usb 1-1: media controller created [ 535.086089][T13083] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 535.245111][T13083] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.260030][ T855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 535.298223][T13959] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 535.317327][T13083] hub 8-1:1.0: bad descriptor, ignoring hub [ 535.351476][T13083] hub 8-1:1.0: probe with driver hub failed with error -5 [ 535.426226][T13083] cdc_wdm 8-1:1.0: skipping garbage [ 535.439890][T13083] cdc_wdm 8-1:1.0: skipping garbage [ 535.459668][T13083] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 535.465740][T13083] cdc_wdm 8-1:1.0: Unknown control protocol [ 535.557115][ T855] usb 1-1: USB disconnect, device number 56 [ 535.623481][ T5917] usb 8-1: USB disconnect, device number 53 [ 535.739372][ T7181] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 535.982648][ T7181] usb 4-1: Using ep0 maxpacket: 32 [ 536.022019][ T7181] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.047407][ T7181] usb 4-1: config 0 has no interfaces? [ 536.064619][ T7181] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 536.080643][ T7181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.119279][ T7181] usb 4-1: Product: syz [ 536.126297][ T7181] usb 4-1: Manufacturer: syz [ 536.194690][ T7181] usb 4-1: SerialNumber: syz [ 536.222315][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1655'. [ 536.232537][ T7181] usb 4-1: config 0 descriptor?? [ 537.191617][T14006] netlink: 'syz.5.1657': attribute type 10 has an invalid length. [ 537.601761][T14013] netlink: 'syz.1.1660': attribute type 10 has an invalid length. [ 537.722394][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 537.899704][T14020] FAULT_INJECTION: forcing a failure. [ 537.899704][T14020] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 537.914785][T14020] CPU: 0 UID: 0 PID: 14020 Comm: syz.0.1663 Not tainted syzkaller #0 PREEMPT(full) [ 537.914811][T14020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.914830][T14020] Call Trace: [ 537.914837][T14020] [ 537.914845][T14020] dump_stack_lvl+0x189/0x250 [ 537.914882][T14020] ? irqentry_exit+0x74/0x90 [ 537.914906][T14020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.914945][T14020] should_fail_ex+0x414/0x560 [ 537.914975][T14020] _copy_from_user+0x2d/0xb0 [ 537.914998][T14020] get_compat_msghdr+0xad/0x4a0 [ 537.915022][T14020] ? __pfx_get_compat_msghdr+0x10/0x10 [ 537.915052][T14020] ___sys_sendmsg+0x193/0x2a0 [ 537.915075][T14020] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.915126][T14020] ? __fget_files+0x2a/0x420 [ 537.915143][T14020] ? __fget_files+0x3a0/0x420 [ 537.915169][T14020] __sys_sendmsg+0x164/0x220 [ 537.915189][T14020] ? __pfx___sys_sendmsg+0x10/0x10 [ 537.915216][T14020] ? __pfx_ksys_write+0x10/0x10 [ 537.915243][T14020] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 537.915267][T14020] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.915291][T14020] __do_fast_syscall_32+0xb6/0x2b0 [ 537.915321][T14020] do_fast_syscall_32+0x34/0x80 [ 537.915351][T14020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.915375][T14020] RIP: 0023:0xf7f72539 [ 537.915397][T14020] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 537.915412][T14020] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 537.915432][T14020] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 537.915444][T14020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.915454][T14020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.915464][T14020] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 537.915474][T14020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.915500][T14020] [ 538.420037][ T5887] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 538.485181][ T5917] usb 4-1: USB disconnect, device number 42 [ 538.579302][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 538.592959][ T5887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.605292][ T5887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 538.614611][ T5887] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 538.627152][ T5887] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 538.639428][ T855] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 538.639688][ T5887] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 538.658138][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.688927][ T5887] hub 6-1:1.0: bad descriptor, ignoring hub [ 538.707927][ T5887] hub 6-1:1.0: probe with driver hub failed with error -5 [ 538.721670][ T7181] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 538.722549][ T5887] cdc_wdm 6-1:1.0: skipping garbage [ 538.736755][ T5887] cdc_wdm 6-1:1.0: skipping garbage [ 538.751546][ T5887] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 538.765578][ T5887] cdc_wdm 6-1:1.0: Unknown control protocol [ 538.831093][ T855] usb 1-1: Using ep0 maxpacket: 32 [ 538.842231][ T855] usb 1-1: no configurations [ 538.850929][ T855] usb 1-1: can't read configurations, error -22 [ 538.891391][ T7181] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 538.902285][ T7181] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 539.030941][ T7181] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 539.049089][ T7181] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.065465][ T7181] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 539.074680][ T855] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 539.083276][ T7181] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 539.117013][ T7181] usb 2-1: Product: syz [ 539.131537][ T7181] usb 2-1: Manufacturer: syz [ 539.146620][ T7181] cdc_wdm 2-1:1.0: skipping garbage [ 539.157077][ T7181] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 539.251189][ T855] usb 1-1: Using ep0 maxpacket: 32 [ 539.264505][ T855] usb 1-1: no configurations [ 539.279571][ T855] usb 1-1: can't read configurations, error -22 [ 539.295314][ T855] usb usb1-port1: attempt power cycle [ 539.457186][ T5887] usb 6-1: USB disconnect, device number 53 [ 539.464352][ T7181] usb 2-1: USB disconnect, device number 46 [ 539.488857][T14024] cdc_wdm 6-1:1.0: Error autopm - -16 [ 539.507771][T14026] cdc_wdm 6-1:1.0: Error autopm - -16 [ 539.520853][T14041] cdc_wdm 6-1:1.0: Error autopm - -16 [ 539.590677][ T9] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 539.649351][ T855] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 539.670444][ T5887] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 539.680789][ T855] usb 1-1: Using ep0 maxpacket: 32 [ 539.750272][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 539.771131][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 539.771289][ T855] usb 1-1: no configurations [ 539.796090][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 539.805336][ T855] usb 1-1: can't read configurations, error -22 [ 539.813353][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.822179][ T9] usb 8-1: Product: syz [ 539.826516][ T9] usb 8-1: Manufacturer: syz [ 539.831567][ T9] usb 8-1: SerialNumber: syz [ 539.839006][ T5887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.850545][ T5887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 539.862515][ T9] usb 8-1: config 0 descriptor?? [ 539.878410][ T5887] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 539.901321][ T9] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 539.911537][ T5887] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 539.923015][ T9] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 539.929654][ T855] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 539.929758][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.951090][T14038] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 539.962034][ T855] usb 1-1: Using ep0 maxpacket: 32 [ 539.964590][ T5887] hub 6-1:1.0: bad descriptor, ignoring hub [ 539.973215][ T5887] hub 6-1:1.0: probe with driver hub failed with error -5 [ 539.981249][ T5887] cdc_wdm 6-1:1.0: skipping garbage [ 539.981276][ T855] usb 1-1: no configurations [ 539.986493][ T5887] cdc_wdm 6-1:1.0: skipping garbage [ 540.003565][ T855] usb 1-1: can't read configurations, error -22 [ 540.008579][ T5887] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 540.010142][ T7181] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 540.021382][ T5887] cdc_wdm 6-1:1.0: Unknown control protocol [ 540.026992][ T855] usb usb1-port1: unable to enumerate USB device [ 540.230249][ T7181] usb 2-1: Using ep0 maxpacket: 8 [ 540.237823][ T7181] usb 2-1: unable to get BOS descriptor or descriptor too short [ 540.253575][ T7181] usb 2-1: config 4 interface 0 has no altsetting 0 [ 540.268362][ T7181] usb 2-1: string descriptor 0 read error: -22 [ 540.274794][ T7181] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 540.290968][ T7181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.309814][ T5887] usb 6-1: USB disconnect, device number 54 [ 540.367578][ T7181] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 540.386015][ T7181] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 540.403858][ T7181] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 540.414420][ T7181] usb 2-1: media controller created [ 540.455029][ T7181] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.540653][ T9] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 540.757200][ T7181] usb 2-1: USB disconnect, device number 47 [ 540.984994][ T9] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 540.997519][ T9] em28xx 8-1:0.0: board has no eeprom [ 541.169333][ T5917] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 541.339452][ T9] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 541.347453][ T9] em28xx 8-1:0.0: dvb set to bulk mode. [ 541.354044][ T5939] em28xx 8-1:0.0: Binding DVB extension [ 541.359864][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 541.373902][ T5917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.404985][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 541.496037][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 541.627969][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 541.669665][T14040] em28xx 8-1:0.0: write to i2c device at 0xfffe failed with unknown error (status=1) [ 541.699216][ T5917] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 541.709580][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.729040][ T5917] hub 4-1:1.0: bad descriptor, ignoring hub [ 541.735219][ T5917] hub 4-1:1.0: probe with driver hub failed with error -5 [ 541.763898][ T5917] cdc_wdm 4-1:1.0: skipping garbage [ 541.790234][ T5917] cdc_wdm 4-1:1.0: skipping garbage [ 541.817635][ T5917] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 541.826298][ T9] usb 8-1: USB disconnect, device number 54 [ 541.833522][ T9] em28xx 8-1:0.0: Disconnecting em28xx [ 541.859120][ T5917] cdc_wdm 4-1:1.0: Unknown control protocol [ 541.916858][ T5939] em28xx 8-1:0.0: Registering input extension [ 541.934913][ T9] em28xx 8-1:0.0: Closing input extension [ 542.036232][ T9] em28xx 8-1:0.0: Freeing device [ 542.104180][T14064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1677'. [ 542.122367][T14064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1677'. [ 542.257792][T14072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 542.379404][ T5917] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 542.542381][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 542.564278][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.575239][ T5917] usb 6-1: config 0 has no interfaces? [ 542.584369][ T5917] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 542.594073][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.603014][ T5917] usb 6-1: Product: syz [ 542.607464][ T5917] usb 6-1: Manufacturer: syz [ 542.612556][ T5917] usb 6-1: SerialNumber: syz [ 542.614522][T14079] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1682'. [ 542.632096][ T5917] usb 6-1: config 0 descriptor?? [ 542.782293][T14066] cdc_wdm 4-1:1.0: Error autopm - -16 [ 542.782451][ T7181] usb 4-1: USB disconnect, device number 43 [ 542.919398][ T5917] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 542.929371][ T7181] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 543.069329][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 543.076294][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.081253][ T7181] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.087121][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 543.106268][ T7181] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 543.110428][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 543.115624][ T7181] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 543.138073][ T7181] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 543.148700][ T7181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.156810][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 543.156866][ T5917] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 543.156886][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.193651][ T5917] hub 1-1:1.0: bad descriptor, ignoring hub [ 543.196344][T14052] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 543.209172][ T5917] hub 1-1:1.0: probe with driver hub failed with error -5 [ 543.226101][ T7181] hub 4-1:1.0: bad descriptor, ignoring hub [ 543.229893][ T5917] cdc_wdm 1-1:1.0: skipping garbage [ 543.240677][ T5917] cdc_wdm 1-1:1.0: skipping garbage [ 543.243441][ T7181] hub 4-1:1.0: probe with driver hub failed with error -5 [ 543.248854][ T5917] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 543.255615][ T7181] cdc_wdm 4-1:1.0: skipping garbage [ 543.264947][ T7181] cdc_wdm 4-1:1.0: skipping garbage [ 543.286194][ T5917] cdc_wdm 1-1:1.0: Unknown control protocol [ 543.313138][ T7181] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 543.328688][ T7181] cdc_wdm 4-1:1.0: Unknown control protocol [ 543.580406][ T5917] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 543.599720][ T5939] usb 4-1: USB disconnect, device number 44 [ 543.719421][ T5917] usb 8-1: device descriptor read/64, error -71 [ 543.959396][ T5917] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 544.089676][ T5917] usb 8-1: device descriptor read/64, error -71 [ 544.147418][T14081] cdc_wdm 1-1:1.0: Error autopm - -16 [ 544.149471][ T9] usb 1-1: USB disconnect, device number 61 [ 544.153179][T14087] cdc_wdm 1-1:1.0: Error autopm - -16 [ 544.200596][ T5917] usb usb8-port1: attempt power cycle [ 544.319373][ T9] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 544.549345][ T5917] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 544.569835][ T5917] usb 8-1: device descriptor read/8, error -71 [ 544.581684][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.593350][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 544.602616][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 544.613891][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 544.623279][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.648200][T14086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 544.677356][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 544.686649][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 544.696850][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 544.703629][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 544.711173][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 544.717208][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 544.809422][ T5917] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 544.830045][ T5917] usb 8-1: device descriptor read/8, error -71 [ 544.940323][ T5917] usb usb8-port1: unable to enumerate USB device [ 544.989993][ T9] usb 1-1: USB disconnect, device number 62 [ 545.189729][ T9] usb 6-1: USB disconnect, device number 55 [ 545.201845][ T7181] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 545.394311][ T7181] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 545.412334][ T7181] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 545.449851][ T7181] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 545.471403][ T7181] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.501345][ T7181] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 545.519725][ T7181] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 545.555579][ T7181] usb 4-1: Product: syz [ 545.569570][ T7181] usb 4-1: Manufacturer: syz [ 545.600650][ T7181] cdc_wdm 4-1:1.0: skipping garbage [ 545.739451][ T7181] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 545.837801][ T7181] usb 4-1: USB disconnect, device number 45 [ 545.862483][T14106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1690'. [ 546.019196][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1690'. [ 546.309922][ T7181] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 546.459325][ T7181] usb 4-1: Using ep0 maxpacket: 8 [ 546.471165][ T7181] usb 4-1: unable to get BOS descriptor or descriptor too short [ 546.490618][ T7181] usb 4-1: config 4 interface 0 has no altsetting 0 [ 546.518770][ T7181] usb 4-1: string descriptor 0 read error: -22 [ 546.525202][ T7181] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 546.569442][ T7181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.672903][ T7181] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 546.722685][ T7181] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 546.749661][ T7181] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 546.767691][ T7181] usb 4-1: media controller created [ 546.937744][ T7181] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 547.117318][ T7181] zl10353_read_register: readreg error (reg=127, ret==0) [ 547.138633][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 547.179321][ T5917] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 547.339330][ T5917] usb 8-1: Using ep0 maxpacket: 16 [ 547.352606][ T5917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 547.366285][ T5917] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 547.375971][ T5917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.385989][ T5917] usb 8-1: Product: syz [ 547.390391][ T5917] usb 8-1: Manufacturer: syz [ 547.395059][ T5917] usb 8-1: SerialNumber: syz [ 547.464678][ T5917] usb 8-1: config 0 descriptor?? [ 547.472221][ T5917] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 547.491961][ T5917] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 547.586362][ T7181] usb 4-1: USB disconnect, device number 46 [ 547.849043][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1699'. [ 548.273643][ T5917] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 548.725460][ T5917] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 548.734932][ T5917] em28xx 8-1:0.0: board has no eeprom [ 548.859950][ T5834] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 548.989462][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 549.011071][ T5834] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 549.019490][ T5834] usb 2-1: config 7 has no interface number 0 [ 549.027635][ T5834] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 549.036819][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.044980][ T5834] usb 2-1: Product: syz [ 549.049200][ T5834] usb 2-1: Manufacturer: syz [ 549.054045][ T5834] usb 2-1: SerialNumber: syz [ 549.079406][ T5917] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 549.087411][ T5917] em28xx 8-1:0.0: dvb set to bulk mode. [ 549.093438][ T5939] em28xx 8-1:0.0: Binding DVB extension [ 549.141287][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 549.151715][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 549.164295][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 549.177502][ T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 549.186916][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.195134][ T9] usb 4-1: Product: syz [ 549.199554][ T9] usb 4-1: Manufacturer: syz [ 549.204281][ T9] usb 4-1: SerialNumber: syz [ 549.233596][ T9] usb 4-1: config 0 descriptor?? [ 549.239644][T14159] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 549.247113][T14159] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 549.256085][ T9] usb 4-1: ucan: probing device on interface #0 [ 549.269637][T14127] em28xx 8-1:0.0: write to i2c device at 0xfffe failed with unknown error (status=1) [ 549.283144][ T5834] as10x_usb: device has been detected [ 549.290345][ T5834] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 549.312899][ T5834] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 549.325412][ T5834] as10x_usb: error during firmware upload part1 [ 549.332773][ T5834] Registered device Elgato EyeTV DTT Deluxe [ 549.336267][ T5834] usb 2-1: USB disconnect, device number 48 [ 549.375503][ T5834] Unregistered device Elgato EyeTV DTT Deluxe [ 549.377702][ T5834] as10x_usb: device has been disconnected [ 549.443287][ T855] usb 8-1: USB disconnect, device number 59 [ 549.463398][ T855] em28xx 8-1:0.0: Disconnecting em28xx [ 549.470779][ T9] usb 4-1: ucan: could not read protocol version, ret=-71 [ 549.486877][ T9] usb 4-1: ucan: probe failed; try to update the device firmware [ 549.507209][ T5939] em28xx 8-1:0.0: Registering input extension [ 549.514945][ T855] em28xx 8-1:0.0: Closing input extension [ 549.520708][ T9] usb 4-1: USB disconnect, device number 47 [ 549.553234][ T855] em28xx 8-1:0.0: Freeing device [ 550.331289][ T855] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 550.469390][ T855] usb 8-1: device descriptor read/64, error -71 [ 550.709372][ T855] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 550.859588][ T855] usb 8-1: device descriptor read/64, error -71 [ 550.970253][ T855] usb usb8-port1: attempt power cycle [ 551.079344][ T7181] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 551.244392][ T7181] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 551.253871][ T7181] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 551.265253][ T7181] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 551.274841][ T7181] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 551.296518][ T7181] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 551.308067][ T7181] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 551.317385][ T7181] usb 6-1: Product: syz [ 551.322098][ T855] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 551.329898][ T7181] usb 6-1: Manufacturer: syz [ 551.343259][ T7181] cdc_wdm 6-1:1.0: skipping garbage [ 551.348665][ T7181] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 551.357383][ T855] usb 8-1: device descriptor read/8, error -71 [ 551.551334][ T5834] usb 6-1: USB disconnect, device number 56 [ 551.599666][ T855] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 551.624505][ T855] usb 8-1: device descriptor read/8, error -71 [ 551.740338][ T855] usb usb8-port1: unable to enumerate USB device [ 551.999822][ T855] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 552.123534][T14191] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 552.133580][T14191] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 552.169405][ T855] usb 6-1: Using ep0 maxpacket: 8 [ 552.178738][ T855] usb 6-1: unable to get BOS descriptor or descriptor too short [ 552.191583][ T855] usb 6-1: config 4 interface 0 has no altsetting 0 [ 552.201236][ T855] usb 6-1: string descriptor 0 read error: -22 [ 552.207606][ T855] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 552.216785][ T855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.243938][ T855] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 552.293871][ T855] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 552.357298][ T855] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 552.368641][ T855] usb 6-1: media controller created [ 552.413904][ T5939] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 552.471117][ T855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 552.559402][ T5939] usb 2-1: device descriptor read/64, error -71 [ 552.701224][ T855] zl10353_read_register: readreg error (reg=127, ret==0) [ 552.762280][ T855] usb 6-1: USB disconnect, device number 57 [ 552.802903][ T5939] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 552.938262][T14197] FAULT_INJECTION: forcing a failure. [ 552.938262][T14197] name failslab, interval 1, probability 0, space 0, times 1 [ 552.952393][T14197] CPU: 1 UID: 0 PID: 14197 Comm: syz.3.1716 Not tainted syzkaller #0 PREEMPT(full) [ 552.952418][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 552.952430][T14197] Call Trace: [ 552.952437][T14197] [ 552.952446][T14197] dump_stack_lvl+0x189/0x250 [ 552.952475][T14197] ? __pfx____ratelimit+0x10/0x10 [ 552.952495][T14197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.952518][T14197] ? __pfx__printk+0x10/0x10 [ 552.952539][T14197] ? __pfx___might_resched+0x10/0x10 [ 552.952559][T14197] ? fs_reclaim_acquire+0x7d/0x100 [ 552.952589][T14197] should_fail_ex+0x414/0x560 [ 552.952620][T14197] should_failslab+0xa8/0x100 [ 552.952639][T14197] __kmalloc_cache_noprof+0x6f/0x6f0 [ 552.952662][T14197] ? nft_pernet+0x23/0x240 [ 552.952681][T14197] ? nf_tables_newtable+0x435/0x1890 [ 552.952707][T14197] nf_tables_newtable+0x435/0x1890 [ 552.952725][T14197] ? nfnetlink_subsys_unregister+0x171/0x1b0 [ 552.952766][T14197] nfnetlink_rcv+0x11d9/0x2590 [ 552.952823][T14197] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 552.952869][T14197] ? ref_tracker_free+0x63a/0x7d0 [ 552.952914][T14197] ? __netlink_deliver_tap+0x807/0x850 [ 552.952938][T14197] ? netlink_deliver_tap+0x2e/0x1b0 [ 552.952981][T14197] netlink_unicast+0x82f/0x9e0 [ 552.953012][T14197] ? __pfx_netlink_unicast+0x10/0x10 [ 552.953037][T14197] ? netlink_sendmsg+0x642/0xb30 [ 552.953052][T14197] ? skb_put+0x11b/0x210 [ 552.953072][T14197] netlink_sendmsg+0x805/0xb30 [ 552.953098][T14197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.953116][T14197] ? __import_iovec+0x5d4/0x7f0 [ 552.953135][T14197] ? aa_sock_msg_perm+0xf1/0x1d0 [ 552.953162][T14197] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.953180][T14197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.953198][T14197] __sock_sendmsg+0x21c/0x270 [ 552.953223][T14197] ____sys_sendmsg+0x505/0x830 [ 552.953248][T14197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.953282][T14197] ___sys_sendmsg+0x21f/0x2a0 [ 552.953303][T14197] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.953356][T14197] ? __fget_files+0x2a/0x420 [ 552.953373][T14197] ? __fget_files+0x3a0/0x420 [ 552.953399][T14197] __sys_sendmsg+0x164/0x220 [ 552.953420][T14197] ? __pfx___sys_sendmsg+0x10/0x10 [ 552.953447][T14197] ? __pfx_ksys_write+0x10/0x10 [ 552.953473][T14197] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 552.953498][T14197] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.953523][T14197] __do_fast_syscall_32+0xb6/0x2b0 [ 552.953546][T14197] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.953571][T14197] do_fast_syscall_32+0x34/0x80 [ 552.953594][T14197] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 552.953614][T14197] RIP: 0023:0xf7f34539 [ 552.953631][T14197] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 552.953646][T14197] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 552.953666][T14197] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 552.953679][T14197] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.953689][T14197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 552.953699][T14197] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 552.953710][T14197] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.953739][T14197] [ 552.955456][ T5939] usb 2-1: device descriptor read/64, error -71 [ 553.409714][ T5939] usb usb2-port1: attempt power cycle [ 553.509629][ T855] usb 8-1: new full-speed USB device number 64 using dummy_hcd [ 553.570633][ T5834] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 553.671328][ T855] usb 8-1: config 7 has an invalid interface number: 101 but max is 0 [ 553.680086][ T855] usb 8-1: config 7 has no interface number 0 [ 553.688089][ T855] usb 8-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 553.697301][ T855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.705334][ T855] usb 8-1: Product: syz [ 553.709591][ T855] usb 8-1: Manufacturer: syz [ 553.714223][ T855] usb 8-1: SerialNumber: syz [ 553.739421][ T5834] usb 6-1: Using ep0 maxpacket: 16 [ 553.746360][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 553.757117][ T5939] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 553.767871][ T5834] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 553.777119][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.786238][ T5834] usb 6-1: Product: syz [ 553.790681][ T5939] usb 2-1: device descriptor read/8, error -71 [ 553.796973][ T5834] usb 6-1: Manufacturer: syz [ 553.799750][ T5907] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 553.801852][ T5834] usb 6-1: SerialNumber: syz [ 553.816272][ T5834] usb 6-1: config 0 descriptor?? [ 553.826256][ T5834] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 553.835762][ T5834] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 553.935503][ T855] as10x_usb: device has been detected [ 553.942180][ T855] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 553.959437][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 553.968308][ T855] usb 8-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 553.978001][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 553.994596][ T5907] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 554.003888][ T855] as10x_usb: error during firmware upload part1 [ 554.011032][ T855] Registered device Elgato EyeTV DTT Deluxe [ 554.013022][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.027914][ T855] usb 8-1: USB disconnect, device number 64 [ 554.040451][ T5939] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 554.040691][ T5907] usb 4-1: Product: syz [ 554.056552][ T5907] usb 4-1: Manufacturer: syz [ 554.072104][ T855] Unregistered device Elgato EyeTV DTT Deluxe [ 554.077949][ T855] as10x_usb: device has been disconnected [ 554.090207][ T5939] usb 2-1: device descriptor read/8, error -71 [ 554.097497][ T5907] usb 4-1: SerialNumber: syz [ 554.105279][ T5907] usb 4-1: config 0 descriptor?? [ 554.118375][ T5907] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 554.128165][ T5907] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 554.199662][ T5939] usb usb2-port1: unable to enumerate USB device [ 554.456477][ T5834] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 554.721229][ T5907] em28xx 4-1:0.0: chip ID is em2874 [ 554.871821][ T5834] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 554.881174][ T5834] em28xx 6-1:0.0: board has no eeprom [ 554.949468][ T24] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 555.099358][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 555.114902][ T24] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 555.129128][ T24] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 555.139692][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.147758][ T24] usb 8-1: Product: syz [ 555.152338][ T24] usb 8-1: Manufacturer: syz [ 555.156947][ T24] usb 8-1: SerialNumber: syz [ 555.174835][ T24] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 555.192724][ T24] imon 8-1:155.0: unable to initialize intf0, err -19 [ 555.200986][ T24] imon:imon_probe: failed to initialize context! [ 555.207540][ T24] imon 8-1:155.0: unable to register, err -19 [ 555.332020][ T5907] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 555.341539][ T5907] em28xx 4-1:0.0: board has no eeprom [ 555.669313][ T5907] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 555.680923][ T5907] em28xx 4-1:0.0: dvb set to bulk mode. [ 555.687378][ T855] em28xx 4-1:0.0: Binding DVB extension [ 555.940718][T14206] em28xx 6-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 555.951113][T14208] em28xx 6-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 555.999907][ T5834] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 556.007806][ T5834] em28xx 6-1:0.0: dvb set to bulk mode. [ 556.018541][ T5834] usb 6-1: USB disconnect, device number 58 [ 556.029687][ T5834] em28xx 6-1:0.0: Disconnecting em28xx [ 556.257193][ T5939] usb 4-1: USB disconnect, device number 48 [ 556.271187][ T5939] em28xx 4-1:0.0: Disconnecting em28xx [ 556.302577][ T855] em28xx 4-1:0.0: Registering input extension [ 556.420921][ T855] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 556.430639][ T855] Registered IR keymap rc-empty [ 556.441649][ T855] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 556.463321][ T855] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 556.516467][ T855] em28xx 4-1:0.0: Input extension successfully initialized [ 556.538855][ T9] em28xx 6-1:0.0: Binding DVB extension [ 556.631545][ T9] em28xx 6-1:0.0: Registering input extension [ 556.643595][ T5939] em28xx 4-1:0.0: Closing input extension [ 556.681455][ T5834] em28xx 6-1:0.0: Closing input extension [ 556.717459][ T5834] em28xx 6-1:0.0: Freeing device [ 556.726796][ T5939] em28xx 4-1:0.0: Freeing device [ 557.281148][T14237] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1727'. [ 557.499386][ T5939] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 557.634405][T14245] fuse: Unknown parameter 'user_i00000000000000000000' [ 557.674854][ T5939] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 557.694426][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.715646][ T9] usb 8-1: USB disconnect, device number 65 [ 557.793585][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.830881][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 557.839373][ T855] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 557.921701][ T5939] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 557.939583][ T5939] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 557.948071][ T5939] usb 4-1: Manufacturer: syz [ 558.072270][ T855] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 558.073128][ T5939] usb 4-1: config 0 descriptor?? [ 558.107178][ T855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.251456][ T855] usb 2-1: Product: syz [ 558.285444][ T855] usb 2-1: Manufacturer: syz [ 558.311804][ T855] usb 2-1: SerialNumber: syz [ 558.351161][ T855] usb 2-1: config 0 descriptor?? [ 558.550176][ T5939] appleir 0003:05AC:8243.0017: item fetching failed at offset 0/1 [ 558.589495][ T5939] appleir 0003:05AC:8243.0017: parse failed [ 558.594667][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.860300][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.958379][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.967017][ T5939] appleir 0003:05AC:8243.0017: probe with driver appleir failed with error -22 [ 559.038637][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.295355][T14243] kAFS: unable to lookup cell '' [ 559.504868][ T855] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 559.511459][ T855] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 559.518973][ T855] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 559.529411][ T9] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 559.617458][ T855] usb 2-1: USB disconnect, device number 53 [ 559.738400][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 559.761020][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 559.773350][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 559.786244][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.797579][ T9] usb 8-1: Product: syz [ 559.803116][ T9] usb 8-1: Manufacturer: syz [ 559.808415][ T9] usb 8-1: SerialNumber: syz [ 559.844391][ T9] usb 8-1: config 0 descriptor?? [ 559.862268][ T9] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 559.877991][ T9] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 559.983400][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1738'. [ 560.069556][ T5939] usb 4-1: USB disconnect, device number 49 [ 560.120005][ T855] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 560.289375][ T855] usb 1-1: Using ep0 maxpacket: 32 [ 560.304529][ T855] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 560.322730][ T855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.334765][ T855] usb 1-1: config 0 descriptor?? [ 560.368755][T14279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1741'. [ 560.383408][T14279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1741'. [ 560.449433][ T5939] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 560.489784][ T9] em28xx 8-1:0.0: chip ID is em2874 [ 560.548591][ T855] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 560.558790][ T855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 560.569063][ T855] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 560.582549][ T855] usb 1-1: media controller created [ 560.604324][ T855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.609660][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 560.620571][ T5939] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.647051][ T5939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 560.657954][ T5939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 560.670910][ T5939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 560.682451][ T855] DVB: Unable to find symbol dib7000p_attach() [ 560.682467][ T855] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 560.696937][ T5939] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 560.706953][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.722608][ T5907] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 560.730678][ T5939] hub 4-1:1.0: bad descriptor, ignoring hub [ 560.736600][ T5939] hub 4-1:1.0: probe with driver hub failed with error -5 [ 560.752866][ T5939] cdc_wdm 4-1:1.0: skipping garbage [ 560.766535][ T5939] cdc_wdm 4-1:1.0: skipping garbage [ 560.773941][ T5939] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 560.780299][ T5939] cdc_wdm 4-1:1.0: Unknown control protocol [ 560.790881][ T855] rc_core: IR keymap rc-dib0700-rc5 not found [ 560.801311][ T855] Registered IR keymap rc-empty [ 560.806420][ T855] dvb-usb: could not initialize remote control. [ 560.813649][ T855] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 560.832795][ T855] usb 1-1: USB disconnect, device number 63 [ 560.864295][ T855] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 560.890057][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 560.897090][ T5907] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 560.912028][ T5907] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 560.921266][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.929374][ T5907] usb 2-1: Product: syz [ 560.933576][ T5907] usb 2-1: Manufacturer: syz [ 560.938203][ T5907] usb 2-1: SerialNumber: syz [ 560.952678][ T5907] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 560.962478][ T5907] imon 2-1:155.0: unable to initialize intf0, err -19 [ 560.974381][ T5907] imon:imon_probe: failed to initialize context! [ 560.986382][ T5907] imon 2-1:155.0: unable to register, err -19 [ 561.106893][ T9] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 561.115275][ T9] em28xx 8-1:0.0: board has no eeprom [ 561.432086][ T9] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 561.440275][ T9] em28xx 8-1:0.0: dvb set to bulk mode. [ 561.446549][ T5887] em28xx 8-1:0.0: Binding DVB extension [ 561.831723][T14274] cdc_wdm 4-1:1.0: Error autopm - -16 [ 561.839534][ T5939] usb 4-1: USB disconnect, device number 50 [ 562.093836][ T5939] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 562.422280][ T5939] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.433069][ T5939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 562.442162][ T5939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 562.453520][ T5939] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 562.462675][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.474955][T14285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 562.486981][ T5939] hub 4-1:1.0: bad descriptor, ignoring hub [ 562.499596][ T5939] hub 4-1:1.0: probe with driver hub failed with error -5 [ 562.512018][ T5939] cdc_wdm 4-1:1.0: skipping garbage [ 562.517676][ T5939] cdc_wdm 4-1:1.0: skipping garbage [ 562.528432][ T5939] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 562.537804][ T5939] cdc_wdm 4-1:1.0: Unknown control protocol [ 562.651935][T14262] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 562.665348][ T5939] usb 8-1: USB disconnect, device number 66 [ 562.672745][ T5939] em28xx 8-1:0.0: Disconnecting em28xx [ 562.907000][ T5887] em28xx 8-1:0.0: Registering input extension [ 562.974676][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.981122][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.030034][ T855] usb 4-1: USB disconnect, device number 51 [ 563.037297][ T5887] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 563.067793][ T5887] Registered IR keymap rc-empty [ 563.083122][ T5887] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 563.118102][ T5887] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input53 [ 563.147321][ T5887] em28xx 8-1:0.0: Input extension successfully initialized [ 563.155328][ T5939] em28xx 8-1:0.0: Closing input extension [ 563.276642][ T5939] em28xx 8-1:0.0: Freeing device [ 563.475829][ T5887] usb 2-1: USB disconnect, device number 54 [ 565.688363][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1754'. [ 565.781814][T14340] netlink: 'syz.3.1754': attribute type 9 has an invalid length. [ 566.569501][ T5887] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 566.779575][ T5887] usb 8-1: Using ep0 maxpacket: 8 [ 566.941314][ T5887] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.953805][ T5887] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 566.963074][ T5887] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 566.980141][ T5887] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 567.010535][ T5887] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 567.020071][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.109602][ T5887] hub 8-1:1.0: bad descriptor, ignoring hub [ 567.178902][ T5887] hub 8-1:1.0: probe with driver hub failed with error -5 [ 567.222607][ T5887] cdc_wdm 8-1:1.0: skipping garbage [ 567.231549][ T5887] cdc_wdm 8-1:1.0: skipping garbage [ 567.242125][ T5887] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 567.248286][ T5887] cdc_wdm 8-1:1.0: Unknown control protocol [ 567.329432][ T7181] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 567.670450][ T7181] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 567.717920][ T7181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.746721][ T7181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.766372][ T7181] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 567.790828][ T7181] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 567.809858][ T7181] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 567.824159][ T7181] usb 2-1: Manufacturer: syz [ 567.835863][ T7181] usb 2-1: config 0 descriptor?? [ 567.998781][T14370] fuse: Bad value for 'fd' [ 568.121584][T14365] cdc_wdm 8-1:1.0: Error autopm - -16 [ 568.127375][ T5887] usb 8-1: USB disconnect, device number 67 [ 568.279432][ T5887] usb 8-1: new full-speed USB device number 68 using dummy_hcd [ 568.414761][ T7181] appleir 0003:05AC:8243.0018: item fetching failed at offset 0/1 [ 568.434100][ T5887] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.446854][ T5887] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 568.477978][ T5887] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 568.516725][ T7181] appleir 0003:05AC:8243.0018: parse failed [ 568.528815][ T5887] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 568.539738][ T7181] appleir 0003:05AC:8243.0018: probe with driver appleir failed with error -22 [ 568.555243][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.570602][T14346] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 568.583228][ T5887] hub 8-1:1.0: bad descriptor, ignoring hub [ 568.589742][ T5887] hub 8-1:1.0: probe with driver hub failed with error -5 [ 568.599370][ T5939] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 568.608771][ T5887] cdc_wdm 8-1:1.0: skipping garbage [ 568.614652][ T5887] cdc_wdm 8-1:1.0: skipping garbage [ 568.641332][ T5887] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 568.647510][ T5887] cdc_wdm 8-1:1.0: Unknown control protocol [ 568.749455][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 568.756308][ T5939] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 568.766399][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.777463][ T5939] usb 1-1: config 0 descriptor?? [ 568.938258][ T7181] usb 8-1: USB disconnect, device number 68 [ 569.035060][ T5939] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 569.100747][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 569.133271][ T5939] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 569.167135][ T5939] usb 1-1: media controller created [ 569.245651][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.425748][ T5939] DVB: Unable to find symbol dib7000p_attach() [ 569.435966][T14388] FAULT_INJECTION: forcing a failure. [ 569.435966][T14388] name failslab, interval 1, probability 0, space 0, times 0 [ 569.453061][ T5939] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 569.495234][T14388] CPU: 0 UID: 0 PID: 14388 Comm: syz.3.1768 Not tainted syzkaller #0 PREEMPT(full) [ 569.495262][T14388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 569.495271][T14388] Call Trace: [ 569.495278][T14388] [ 569.495284][T14388] dump_stack_lvl+0x189/0x250 [ 569.495311][T14388] ? __pfx____ratelimit+0x10/0x10 [ 569.495332][T14388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.495354][T14388] ? __pfx__printk+0x10/0x10 [ 569.495375][T14388] ? __pfx___might_resched+0x10/0x10 [ 569.495393][T14388] ? fs_reclaim_acquire+0x7d/0x100 [ 569.495420][T14388] should_fail_ex+0x414/0x560 [ 569.495446][T14388] should_failslab+0xa8/0x100 [ 569.495467][T14388] __kmalloc_noprof+0xcb/0x7f0 [ 569.495488][T14388] ? nla_strdup+0x9d/0x140 [ 569.495501][T14388] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 569.495539][T14388] nla_strdup+0x9d/0x140 [ 569.495554][T14388] ? nft_rbtree_privsize+0xf/0x20 [ 569.495575][T14388] nf_tables_newset+0x136f/0x2540 [ 569.495607][T14388] ? __pfx_nf_tables_newset+0x10/0x10 [ 569.495647][T14388] ? __nla_parse+0x40/0x60 [ 569.495668][T14388] nfnetlink_rcv+0x11d9/0x2590 [ 569.495724][T14388] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 569.495762][T14388] ? ref_tracker_free+0x63a/0x7d0 [ 569.495803][T14388] ? __netlink_deliver_tap+0x807/0x850 [ 569.495828][T14388] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.495868][T14388] netlink_unicast+0x82f/0x9e0 [ 569.495901][T14388] ? __pfx_netlink_unicast+0x10/0x10 [ 569.495925][T14388] ? netlink_sendmsg+0x642/0xb30 [ 569.495940][T14388] ? skb_put+0x11b/0x210 [ 569.495960][T14388] netlink_sendmsg+0x805/0xb30 [ 569.495986][T14388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.496005][T14388] ? __import_iovec+0x5d4/0x7f0 [ 569.496024][T14388] ? aa_sock_msg_perm+0xf1/0x1d0 [ 569.496048][T14388] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.496063][T14388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.496081][T14388] __sock_sendmsg+0x21c/0x270 [ 569.496106][T14388] ____sys_sendmsg+0x505/0x830 [ 569.496126][T14388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.496156][T14388] ___sys_sendmsg+0x21f/0x2a0 [ 569.496175][T14388] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.496228][T14388] ? __fget_files+0x2a/0x420 [ 569.496242][T14388] ? __fget_files+0x3a0/0x420 [ 569.496270][T14388] __sys_sendmsg+0x164/0x220 [ 569.496289][T14388] ? __pfx___sys_sendmsg+0x10/0x10 [ 569.496312][T14388] ? __pfx_ksys_write+0x10/0x10 [ 569.496339][T14388] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 569.496363][T14388] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.496387][T14388] __do_fast_syscall_32+0xb6/0x2b0 [ 569.496410][T14388] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.496436][T14388] do_fast_syscall_32+0x34/0x80 [ 569.496458][T14388] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 569.496479][T14388] RIP: 0023:0xf7f34539 [ 569.496495][T14388] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 569.496516][T14388] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 569.496534][T14388] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 569.496546][T14388] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 569.496556][T14388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 569.496567][T14388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 569.496577][T14388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 569.496606][T14388] [ 570.094705][ T5834] usb 2-1: USB disconnect, device number 55 [ 570.209964][ T5939] rc_core: IR keymap rc-dib0700-rc5 not found [ 570.216252][ T5939] Registered IR keymap rc-empty [ 570.233017][ T5939] dvb-usb: could not initialize remote control. [ 570.239958][ T5939] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 570.270375][ T9] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 570.288737][ T5939] usb 1-1: USB disconnect, device number 64 [ 570.445104][ T5939] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 570.495935][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 570.507705][ T9] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 570.596465][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 570.613759][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 570.697618][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 570.707507][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 570.759120][ T9] usb 8-1: Product: syz [ 570.789612][ T9] usb 8-1: Manufacturer: syz [ 570.858849][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 570.867607][ T9] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 571.082314][ T24] usb 8-1: USB disconnect, device number 69 [ 571.453874][T14407] fuse: Bad value for 'fd' [ 571.719370][ T24] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 571.889393][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 571.896972][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 571.911790][ T24] usb 8-1: config 4 interface 0 has no altsetting 0 [ 571.942428][ T24] usb 8-1: string descriptor 0 read error: -22 [ 571.948887][ T24] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 571.959448][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 571.978834][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.001251][ T24] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 572.013681][ T24] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 572.024514][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 572.038076][ T24] usb 8-1: media controller created [ 572.102353][ T9] usb 6-1: device descriptor read/64, error -71 [ 572.108766][ T5939] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 572.139486][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.210421][T14391] usb 8-1: dvb_usb_au6610: wlen=0, aborting [ 572.269478][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 572.292783][ T5838] udevd[5838]: setting mode of /dev/dvb/adapter1/dvr0 to 020660 failed: No such file or directory [ 572.314588][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 572.359513][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 572.369041][ T5838] udevd[5838]: setting owner of /dev/dvb/adapter1/dvr0 to uid=0, gid=28 failed: No such file or directory [ 572.383487][ T5939] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 572.395213][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.406680][ T5939] usb 2-1: Product: syz [ 572.416789][ T5939] usb 2-1: Manufacturer: syz [ 572.421737][ T5939] usb 2-1: SerialNumber: syz [ 572.450779][ T5939] usb 2-1: config 0 descriptor?? [ 572.514546][ T9] usb 6-1: device descriptor read/64, error -71 [ 572.555558][ T24] usb 8-1: USB disconnect, device number 70 [ 572.630070][ T9] usb usb6-port1: attempt power cycle [ 572.655340][ T5939] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 572.669381][ T5939] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 573.093007][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 573.160045][ T9] usb 6-1: device descriptor read/8, error -71 [ 573.340578][ T5939] em28xx 2-1:0.0: chip ID is em2765 [ 573.429457][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 573.453585][ T9] usb 6-1: device descriptor read/8, error -71 [ 573.519381][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 573.539537][ T5834] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 573.570456][ T9] usb usb6-port1: unable to enumerate USB device [ 573.577278][T14434] netlink: 'syz.7.1782': attribute type 10 has an invalid length. [ 573.669338][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 573.676116][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 573.687917][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 573.721605][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 573.730808][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.738978][ T24] usb 1-1: Product: syz [ 573.743454][ T24] usb 1-1: Manufacturer: syz [ 573.748076][ T24] usb 1-1: SerialNumber: syz [ 573.761786][ T5834] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 573.762365][ T24] usb 1-1: config 0 descriptor?? [ 573.782007][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 573.791650][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 573.804995][ T5834] usb 4-1: config 7 has no interface number 0 [ 573.824489][ T5834] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 573.835574][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.849495][ T5834] usb 4-1: Product: syz [ 573.858043][ T5834] usb 4-1: Manufacturer: syz [ 573.864280][ T5834] usb 4-1: SerialNumber: syz [ 573.985154][ T5939] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 573.996870][ T5939] em28xx 2-1:0.0: board has no eeprom [ 574.096641][ T5834] as10x_usb: device has been detected [ 574.112400][ T5834] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 574.134871][ T5834] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 574.148957][ T5834] as10x_usb: error during firmware upload part1 [ 574.156157][ T5834] Registered device Elgato EyeTV DTT Deluxe [ 574.160541][ T5834] usb 4-1: USB disconnect, device number 52 [ 574.206967][ T5834] Unregistered device Elgato EyeTV DTT Deluxe [ 574.208512][ T5834] as10x_usb: device has been disconnected [ 574.279588][ T5939] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 574.287707][ T5939] em28xx 2-1:0.0: dvb set to bulk mode. [ 574.294390][ T9] em28xx 2-1:0.0: Binding DVB extension [ 574.385479][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 574.445710][ T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 574.472300][ T24] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 574.481606][ T24] em28xx 1-1:0.0: No AC97 audio processor [ 574.689383][ T9] em28xx 2-1:0.0: Registering input extension [ 574.689847][ T855] usb 2-1: USB disconnect, device number 56 [ 574.713781][ T24] usb 1-1: USB disconnect, device number 65 [ 574.728390][ T855] em28xx 2-1:0.0: Disconnecting em28xx [ 574.738317][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 574.745639][ T855] em28xx 2-1:0.0: Closing input extension [ 574.758064][ T24] em28xx 1-1:0.0: Freeing device [ 574.801754][ T855] em28xx 2-1:0.0: Freeing device [ 574.908145][T14444] sctp: [Deprecated]: syz.5.1785 (pid 14444) Use of int in max_burst socket option deprecated. [ 574.908145][T14444] Use struct sctp_assoc_value instead [ 574.925059][T14445] sctp: [Deprecated]: syz.5.1785 (pid 14445) Use of int in max_burst socket option deprecated. [ 574.925059][T14445] Use struct sctp_assoc_value instead [ 575.026739][T14447] fuse: Bad value for 'fd' [ 575.109443][ T24] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 575.309351][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 575.411406][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 575.501966][ T24] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 575.679821][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 575.695404][ T24] usb usb1-port1: attempt power cycle [ 575.968066][ T5834] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 576.069643][ T24] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 576.100097][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 576.246103][ T24] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 576.294679][ T5834] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 576.352482][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 576.358177][ T24] usb usb1-port1: unable to enumerate USB device [ 576.385798][ T5834] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 576.457737][ T5834] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 576.473800][ T5834] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.564444][ T5834] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 576.573891][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 576.583589][ T5834] usb 8-1: Product: syz [ 576.587826][ T5834] usb 8-1: Manufacturer: syz [ 576.629139][ T5834] cdc_wdm 8-1:1.0: skipping garbage [ 576.635116][ T5834] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 576.840407][ T5834] usb 8-1: USB disconnect, device number 71 [ 577.121358][T14477] netlink: 'syz.3.1794': attribute type 10 has an invalid length. [ 577.309342][ T24] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 577.469707][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 577.477663][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 577.487254][ T24] usb 8-1: config 4 interface 0 has no altsetting 0 [ 577.489348][ T5834] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 577.497746][ T24] usb 8-1: string descriptor 0 read error: -22 [ 577.508781][ T24] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 577.544369][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.583745][ T24] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 577.612166][ T24] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 577.626800][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 577.636272][ T24] usb 8-1: media controller created [ 577.659446][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 577.668183][ T5834] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 577.670580][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.687572][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.723686][ T5834] usb 2-1: config 0 descriptor?? [ 577.779591][ T5907] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 577.831866][T14464] usb 8-1: dvb_usb_au6610: wlen=0, aborting [ 577.929554][ T855] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 577.946798][ T5907] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 577.951334][ T5834] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 577.964239][ T5907] usb 4-1: config 7 has no interface number 0 [ 577.979910][ T5834] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 577.988578][ T5834] dib0700: firmware download failed at 7 with -22 [ 577.997188][ T5907] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 578.007185][ T5834] usb 2-1: USB disconnect, device number 57 [ 578.026939][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.045652][ T5907] usb 4-1: Product: syz [ 578.065437][ T5907] usb 4-1: Manufacturer: syz [ 578.080276][ T24] usb 8-1: USB disconnect, device number 72 [ 578.086546][ T5907] usb 4-1: SerialNumber: syz [ 578.093053][ T855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.114273][ T855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.124831][ T855] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 578.136072][ T855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.151068][ T855] usb 1-1: config 0 descriptor?? [ 578.184827][T14487] ip6tnl2: entered promiscuous mode [ 578.348175][ T5907] as10x_usb: device has been detected [ 578.354834][ T5907] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 578.375263][ T5907] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 578.388356][ T5907] as10x_usb: error during firmware upload part1 [ 578.395317][ T5907] Registered device Elgato EyeTV DTT Deluxe [ 578.398555][ T5907] usb 4-1: USB disconnect, device number 53 [ 578.437832][ T5907] Unregistered device Elgato EyeTV DTT Deluxe [ 578.440027][ T5907] as10x_usb: device has been disconnected [ 578.479369][ T5834] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 578.578254][ T855] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 578.585660][ T855] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 578.595843][ T855] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 578.613062][ T855] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 578.627002][ T855] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 578.643160][ T855] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 578.671195][ T855] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 578.690786][ T5834] usb 6-1: Using ep0 maxpacket: 16 [ 578.716117][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 578.717273][ T855] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 578.745417][ T5834] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 578.769285][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.815942][T14493] bridge6: entered promiscuous mode [ 578.869074][ T5834] usb 6-1: Product: syz [ 578.878234][T14497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.879432][ T855] cp2112 0003:10C4:EA90.0019: Part Number: 0x00 Device Version: 0x00 [ 578.910102][ T5834] usb 6-1: Manufacturer: syz [ 578.914789][ T5834] usb 6-1: SerialNumber: syz [ 578.932311][T14497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.942038][ T5834] usb 6-1: config 0 descriptor?? [ 578.953541][ T5834] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 578.968327][ T5834] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 579.109380][ T9] usb 8-1: new full-speed USB device number 73 using dummy_hcd [ 579.295518][ T9] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 579.313315][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 579.324565][ T9] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 579.336085][ T9] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 579.349345][ T9] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 579.368618][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 579.395699][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 579.409161][ T9] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 579.418201][ T9] usb 8-1: Product: syz [ 579.425944][ T9] usb 8-1: Manufacturer: syz [ 579.436256][ T9] usb 8-1: SerialNumber: syz [ 579.629476][ T855] cp2112 0003:10C4:EA90.0019: error reading lock byte: -71 [ 579.676576][ T5834] em28xx 6-1:0.0: chip ID is em2765 [ 579.676912][ T855] usb 1-1: USB disconnect, device number 70 [ 579.775750][ T9] usb 8-1: config 0 descriptor?? [ 579.783322][T14498] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 579.798813][ T9] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 579.823417][ T9] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 580.359986][ T5834] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 580.369760][ T5834] em28xx 6-1:0.0: board has no eeprom [ 580.537771][ T5917] usb 8-1: USB disconnect, device number 73 [ 580.545681][ T5917] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 580.649402][ T5834] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 580.677984][ T5834] em28xx 6-1:0.0: dvb set to bulk mode. [ 580.930500][ T5939] em28xx 6-1:0.0: Binding DVB extension [ 581.561032][ T5939] em28xx 6-1:0.0: Registering input extension [ 581.779540][ T5939] usb 6-1: USB disconnect, device number 63 [ 581.810097][ T5939] em28xx 6-1:0.0: Disconnecting em28xx [ 581.847097][ T5939] em28xx 6-1:0.0: Closing input extension [ 581.975326][ T5939] em28xx 6-1:0.0: Freeing device [ 583.249466][ T5939] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 583.269818][ T5907] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 583.578644][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.593955][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.619369][ T5907] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 583.661911][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.692527][ T5939] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 583.735576][ T5907] usb 6-1: config 0 descriptor?? [ 583.759506][ T5939] usb 1-1: config 8 has no interface number 0 [ 583.780309][ T5939] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 583.849162][ T5939] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 583.882122][ T5939] usb 1-1: config 8 interface 177 has no altsetting 0 [ 583.899834][ T5939] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 583.963931][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.029698][T14548] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 584.230466][ T5907] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 584.262008][ T5907] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 584.269064][ T5907] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 584.339430][ T5907] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 584.367234][ T5907] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 584.406192][ T5907] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 584.480497][ T5907] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 584.525684][ T5907] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 584.621126][ T5907] cp2112 0003:10C4:EA90.001A: Part Number: 0x00 Device Version: 0x00 [ 584.821025][ T855] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 584.989678][ T855] usb 8-1: Using ep0 maxpacket: 16 [ 585.009204][ T855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 585.059014][ T855] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 585.132245][ T855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.159479][ T5907] cp2112 0003:10C4:EA90.001A: error reading lock byte: -71 [ 585.171970][ T855] usb 8-1: Product: syz [ 585.202663][ T855] usb 8-1: Manufacturer: syz [ 585.231403][ T5907] usb 6-1: USB disconnect, device number 64 [ 585.255926][ T855] usb 8-1: SerialNumber: syz [ 585.425524][ T855] usb 8-1: config 0 descriptor?? [ 585.435220][ T855] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 585.457583][ T855] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 586.046000][ T5939] usb 1-1: string descriptor 0 read error: -71 [ 586.068244][ T855] em28xx 8-1:0.0: chip ID is em2765 [ 586.098977][ T5939] ir_toy 1-1:8.177: required endpoints not found [ 586.149026][ T5939] usb 1-1: USB disconnect, device number 71 [ 586.686164][ T855] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 586.765536][ T855] em28xx 8-1:0.0: board has no eeprom [ 587.467870][ T855] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 587.479323][ T855] em28xx 8-1:0.0: dvb set to bulk mode. [ 587.492787][ T5907] em28xx 8-1:0.0: Binding DVB extension [ 587.844110][T14622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 587.854774][ T5939] usb 8-1: USB disconnect, device number 74 [ 587.860207][ T5907] em28xx 8-1:0.0: Registering input extension [ 587.862208][ T5939] em28xx 8-1:0.0: Disconnecting em28xx [ 587.899314][ T5939] em28xx 8-1:0.0: Closing input extension [ 587.943907][ T5939] em28xx 8-1:0.0: Freeing device [ 587.999728][ T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 588.159352][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 588.175269][ T9] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 588.193718][ T9] usb 6-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 588.209354][ T5907] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 588.245438][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 588.254927][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.265960][ T9] usb 6-1: Product: syz [ 588.274186][ T9] usb 6-1: Manufacturer: syz [ 588.279170][ T9] usb 6-1: SerialNumber: syz [ 588.364541][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 588.384582][ T9] imon 6-1:155.0: unable to initialize intf0, err -19 [ 588.399389][ T9] imon:imon_probe: failed to initialize context! [ 588.418339][ T9] imon 6-1:155.0: unable to register, err -19 [ 588.429600][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 588.441126][ T5907] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 588.473844][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.538139][ T5907] usb 4-1: config 0 descriptor?? [ 588.822141][ T5907] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 588.865230][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 588.969712][ T5907] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 588.976996][ T5907] usb 4-1: media controller created [ 589.018180][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.157150][ T5907] DVB: Unable to find symbol dib7000p_attach() [ 589.179583][ T5907] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 589.187857][T14639] FAULT_INJECTION: forcing a failure. [ 589.187857][T14639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.207195][T14639] CPU: 0 UID: 0 PID: 14639 Comm: syz.0.1828 Not tainted syzkaller #0 PREEMPT(full) [ 589.207220][T14639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.207229][T14639] Call Trace: [ 589.207236][T14639] [ 589.207244][T14639] dump_stack_lvl+0x189/0x250 [ 589.207271][T14639] ? __pfx____ratelimit+0x10/0x10 [ 589.207297][T14639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.207320][T14639] ? __pfx__printk+0x10/0x10 [ 589.207339][T14639] ? __might_fault+0xb0/0x130 [ 589.207374][T14639] should_fail_ex+0x414/0x560 [ 589.207405][T14639] _copy_from_user+0x2d/0xb0 [ 589.207429][T14639] __sys_sendto+0x25c/0x520 [ 589.207464][T14639] ? __pfx___sys_sendto+0x10/0x10 [ 589.207487][T14639] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 589.207520][T14639] ? __fget_files+0x3a0/0x420 [ 589.207545][T14639] ? ksys_write+0x22a/0x250 [ 589.207565][T14639] ? exc_page_fault+0x82/0x100 [ 589.207587][T14639] ? __pfx_ksys_write+0x10/0x10 [ 589.207615][T14639] __ia32_sys_sendto+0xdd/0x100 [ 589.207644][T14639] __do_fast_syscall_32+0xb6/0x2b0 [ 589.207668][T14639] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.207692][T14639] do_fast_syscall_32+0x34/0x80 [ 589.207715][T14639] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 589.207736][T14639] RIP: 0023:0xf7f72539 [ 589.207751][T14639] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 589.207767][T14639] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 589.207786][T14639] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 589.207800][T14639] RDX: 000000000000ff88 RSI: 0000000000000000 RDI: 0000000080000140 [ 589.207811][T14639] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 589.207822][T14639] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 589.207833][T14639] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.207861][T14639] [ 589.531192][ T5907] rc_core: IR keymap rc-dib0700-rc5 not found [ 589.537620][ T5907] Registered IR keymap rc-empty [ 589.939917][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1830'. [ 590.681410][ T5939] usb 6-1: USB disconnect, device number 65 [ 591.709595][ T855] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 591.970109][ T855] usb 1-1: Using ep0 maxpacket: 16 [ 591.986290][ T855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 592.006259][ T855] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 592.025791][ T855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.042250][ T855] usb 1-1: Product: syz [ 592.046673][ T855] usb 1-1: Manufacturer: syz [ 592.051366][ T855] usb 1-1: SerialNumber: syz [ 592.075689][ T855] usb 1-1: config 0 descriptor?? [ 592.091350][ T855] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 592.101887][ T855] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 592.756236][ T855] em28xx 1-1:0.0: chip ID is em2765 [ 593.480658][ T855] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 593.489487][ T855] em28xx 1-1:0.0: board has no eeprom [ 593.759344][ T855] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 593.767434][ T855] em28xx 1-1:0.0: dvb set to bulk mode. [ 593.774109][ T24] em28xx 1-1:0.0: Binding DVB extension [ 594.036596][T14696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1843'. [ 594.063090][T14696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1843'. [ 594.092103][ T5907] dvb-usb: could not initialize remote control. [ 594.112163][ T5907] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 594.163063][ T5907] usb 4-1: USB disconnect, device number 54 [ 594.199840][ T5939] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 594.303540][ T5907] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 594.333308][ T24] em28xx 1-1:0.0: Registering input extension [ 594.340342][ T24] usb 1-1: USB disconnect, device number 72 [ 594.347309][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 594.359753][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 594.368225][ T5939] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 594.370407][ T24] em28xx 1-1:0.0: Closing input extension [ 594.394445][ T5939] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 594.422497][ T24] em28xx 1-1:0.0: Freeing device [ 594.435385][ T5939] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 594.463914][ T5939] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 594.499951][ T5939] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 594.509623][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.517653][ T5939] usb 6-1: Product: syz [ 594.525430][ T5939] usb 6-1: Manufacturer: syz [ 594.534353][ T5939] usb 6-1: SerialNumber: syz [ 594.552374][ T5939] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 594.561188][ T5939] imon 6-1:155.0: unable to initialize intf0, err -19 [ 594.567959][ T5939] imon:imon_probe: failed to initialize context! [ 594.574566][ T5939] imon 6-1:155.0: unable to register, err -19 [ 594.739550][ T5907] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 594.933635][ T5907] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 594.942755][ T5907] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 594.957386][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 594.977542][ T5907] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 595.156029][ T5907] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 595.165172][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 595.177534][ T5907] usb 4-1: Product: syz [ 595.182192][ T5907] usb 4-1: Manufacturer: syz [ 595.196827][ T5907] cdc_wdm 4-1:1.0: skipping garbage [ 595.203559][ T5907] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 595.619553][ T9] usb 4-1: USB disconnect, device number 55 [ 595.730843][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1850'. [ 596.506860][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 596.819337][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 597.100035][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 597.159618][ T5907] usb 6-1: USB disconnect, device number 66 [ 597.249393][ T9] usb 4-1: config 4 interface 0 has no altsetting 0 [ 597.280791][ T9] usb 4-1: string descriptor 0 read error: -22 [ 597.309475][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 597.358073][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.442732][ T9] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 597.508627][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 597.590128][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 597.611820][ T9] usb 4-1: media controller created [ 597.689399][ T855] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 597.701732][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 597.783585][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 597.862024][ T855] usb 1-1: Using ep0 maxpacket: 32 [ 598.126316][ T855] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 598.141076][ T855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.165088][ T855] usb 1-1: config 0 descriptor?? [ 598.212150][ T9] usb 4-1: USB disconnect, device number 56 [ 598.390485][ T855] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 598.399612][ T5939] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 598.403759][ T855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 598.450073][ T855] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 598.457276][ T855] usb 1-1: media controller created [ 598.476051][ T855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.525876][ T855] DVB: Unable to find symbol dib7000p_attach() [ 598.538903][ T855] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 598.539944][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 598.569440][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 598.579971][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 598.619981][ T855] rc_core: IR keymap rc-dib0700-rc5 not found [ 598.626442][ T855] Registered IR keymap rc-empty [ 598.634745][ T5939] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 598.644081][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.652356][ T5939] usb 2-1: Product: syz [ 598.656714][ T5939] usb 2-1: Manufacturer: syz [ 598.662113][ T5939] usb 2-1: SerialNumber: syz [ 598.672043][ T5939] usb 2-1: config 0 descriptor?? [ 598.693642][ T5939] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 598.707059][ T5939] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 598.769391][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 598.781985][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 598.891109][ T9] usb 4-1: config 0 has no interface number 0 [ 598.898874][ T9] usb 4-1: config 0 interface 132 has no altsetting 0 [ 598.908547][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 598.918026][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.928026][ T9] usb 4-1: Product: syz [ 598.941394][ T9] usb 4-1: Manufacturer: syz [ 599.002054][ T9] usb 4-1: SerialNumber: syz [ 599.018570][ T9] usb 4-1: config 0 descriptor?? [ 599.247310][ T9] cdc_subset 4-1:0.132: probe with driver cdc_subset failed with error -71 [ 599.301203][ T9] usb 4-1: USB disconnect, device number 57 [ 599.307393][ T5939] em28xx 2-1:0.0: chip ID is em2765 [ 599.905355][ T5939] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 599.927333][ T5939] em28xx 2-1:0.0: board has no eeprom [ 599.999415][ T9] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 600.239350][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 600.399755][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.410431][ T9] usb 8-1: config 0 has no interfaces? [ 600.416565][ T9] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 600.426040][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.446869][ T9] usb 8-1: config 0 descriptor?? [ 600.452146][ T5939] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 600.461355][ T5939] em28xx 2-1:0.0: dvb set to bulk mode. [ 600.484903][ T9] em28xx 2-1:0.0: Binding DVB extension [ 600.769718][ T5907] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 600.800417][ T5834] usb 2-1: USB disconnect, device number 58 [ 600.812707][ T9] em28xx 2-1:0.0: Registering input extension [ 600.823018][ T5834] em28xx 2-1:0.0: Disconnecting em28xx [ 600.828732][ T5834] em28xx 2-1:0.0: Closing input extension [ 600.873549][ T5834] em28xx 2-1:0.0: Freeing device [ 600.919477][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 600.926170][ T5907] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 600.936929][ T5907] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 600.948723][ T5907] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 600.959528][ T5907] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 600.975974][ T5907] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 600.985284][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.998181][ T5907] usb 6-1: Product: syz [ 601.005583][ T5907] usb 6-1: Manufacturer: syz [ 601.016010][ T5907] usb 6-1: SerialNumber: syz [ 601.028489][ T5907] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 601.038195][ T5907] imon 6-1:155.0: unable to initialize intf0, err -19 [ 601.046833][ T5907] imon:imon_probe: failed to initialize context! [ 601.053415][ T5907] imon 6-1:155.0: unable to register, err -19 [ 601.369871][ T5907] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 601.545400][ T5907] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 601.557388][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.579399][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.591191][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 601.619979][ T5907] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 601.629166][ T5907] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 601.639284][ T5907] usb 4-1: Manufacturer: syz [ 601.651758][ T5907] usb 4-1: config 0 descriptor?? [ 601.659319][ T5834] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 601.822869][ T5834] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 601.832204][ T5834] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 601.846307][ T5834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 601.872936][ T5834] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 601.898379][ T5834] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 601.913648][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 601.925235][ T5834] usb 2-1: Product: syz [ 601.929708][ T5834] usb 2-1: Manufacturer: syz [ 601.946012][ T5834] cdc_wdm 2-1:1.0: skipping garbage [ 601.952347][ T5834] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 602.137468][ T5907] appleir 0003:05AC:8243.001B: item fetching failed at offset 0/1 [ 602.146561][ T5907] appleir 0003:05AC:8243.001B: parse failed [ 602.153206][ T5907] appleir 0003:05AC:8243.001B: probe with driver appleir failed with error -22 [ 602.156480][ T5834] usb 2-1: USB disconnect, device number 59 [ 602.629427][ T5907] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 602.779652][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 602.787355][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 602.796501][ T5907] usb 2-1: config 4 interface 0 has no altsetting 0 [ 602.807511][ T5907] usb 2-1: string descriptor 0 read error: -22 [ 602.816376][ T5907] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 602.825661][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.843551][ T5907] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 602.854749][ T5907] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 602.865577][ T5907] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 602.873456][ T5907] usb 2-1: media controller created [ 602.897708][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 603.535942][ T5907] usb 6-1: USB disconnect, device number 67 [ 603.697230][T14784] ------------[ cut here ]------------ [ 603.697384][ T855] dvb-usb: could not initialize remote control. [ 603.703202][T14784] usb 1-1: BOGUS control dir, pipe 80004980 doesn't match bRequestType c0 [ 603.722753][ T855] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 603.741869][T14784] WARNING: CPU: 1 PID: 14784 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 603.751807][T14784] Modules linked in: [ 603.755996][T14784] CPU: 1 UID: 0 PID: 14784 Comm: syz.1.1866 Not tainted syzkaller #0 PREEMPT(full) [ 603.765564][T14784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 603.776228][T14784] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 603.781973][T14784] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 80 07 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 64 27 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 603.801918][T14784] RSP: 0018:ffffc900045af660 EFLAGS: 00010246 [ 603.808250][T14784] RAX: e0e7bb9963ec0200 RBX: ffff888063041700 RCX: 0000000000080000 [ 603.810773][ T5939] usb 8-1: USB disconnect, device number 75 [ 603.816358][T14784] RDX: ffffc9001b7ef000 RSI: 00000000000374e1 RDI: 00000000000374e2 [ 603.830406][T14784] RBP: 1ffff11003408dc8 R08: 0000000000000003 R09: 0000000000000004 [ 603.838503][T14784] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff888043315100 [ 603.846531][T14784] R13: ffff88801a046e40 R14: 0000000080004980 R15: ffff888028bb4fc0 [ 603.854678][T14784] FS: 0000000000000000(0000) GS:ffff88812623e000(0063) knlGS:00000000f5466b40 [ 603.863755][T14784] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 603.871157][T14784] CR2: 000000003211affc CR3: 000000002483c000 CR4: 00000000003526f0 [ 603.879372][T14784] Call Trace: [ 603.882676][T14784] [ 603.885605][T14784] usb_start_wait_urb+0x114/0x4c0 [ 603.890680][T14784] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 603.896225][T14784] usb_control_msg+0x232/0x3e0 [ 603.901128][T14784] dib0700_i2c_xfer+0xba7/0xf70 [ 603.906066][T14784] ? __lock_acquire+0xab9/0xd20 [ 603.910938][T14784] __i2c_transfer+0x874/0x2170 [ 603.915689][T14784] ? i2c_transfer+0x120/0x3a0 [ 603.920412][T14784] ? __pfx___i2c_transfer+0x10/0x10 [ 603.925724][T14784] ? rt_mutex_lock_nested+0x172/0x1e0 [ 603.932538][T14784] ? i2c_transfer+0x120/0x3a0 [ 603.937239][T14784] i2c_transfer+0x25b/0x3a0 [ 603.942060][T14784] ? __pfx_i2c_transfer+0x10/0x10 [ 603.947098][T14784] ? _copy_from_user+0x94/0xb0 [ 603.951934][T14784] i2cdev_ioctl_rdwr+0x460/0x740 [ 603.957067][T14784] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 603.962371][T14784] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 603.968024][T14784] ? __fget_files+0x3a0/0x420 [ 603.972748][T14784] ? __fget_files+0x2a/0x420 [ 603.977364][T14784] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 603.982956][T14784] __ia32_compat_sys_ioctl+0x543/0x840 [ 603.988680][T14784] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 603.994761][T14784] ? __se_sys_futex_time32+0x360/0x3e0 [ 604.000298][T14784] ? __pfx_do_sys_openat2+0x10/0x10 [ 604.005518][T14784] ? rcu_is_watching+0x15/0xb0 [ 604.010311][T14784] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 604.016991][T14784] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.022346][T14784] __do_fast_syscall_32+0xb6/0x2b0 [ 604.027739][T14784] do_fast_syscall_32+0x34/0x80 [ 604.032641][T14784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.038979][T14784] RIP: 0023:0xf7f71539 [ 604.043117][T14784] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 604.062853][T14784] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 604.071427][T14784] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000707 [ 604.079532][T14784] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.087590][T14784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.095718][T14784] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 604.103704][T14784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.111780][T14784] [ 604.114815][T14784] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 604.122075][T14784] CPU: 1 UID: 0 PID: 14784 Comm: syz.1.1866 Not tainted syzkaller #0 PREEMPT(full) [ 604.131541][T14784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 604.142113][T14784] Call Trace: [ 604.145522][T14784] [ 604.148574][T14784] dump_stack_lvl+0x99/0x250 [ 604.153192][T14784] ? __asan_memcpy+0x40/0x70 [ 604.158230][T14784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.163452][T14784] ? __pfx__printk+0x10/0x10 [ 604.168079][T14784] vpanic+0x237/0x6d0 [ 604.172056][T14784] ? __pfx_vpanic+0x10/0x10 [ 604.176560][T14784] panic+0xb9/0xc0 [ 604.180334][T14784] ? __pfx_panic+0x10/0x10 [ 604.184743][T14784] __warn+0x31b/0x4b0 [ 604.188707][T14784] ? usb_submit_urb+0x114d/0x18b0 [ 604.193719][T14784] ? usb_submit_urb+0x114d/0x18b0 [ 604.198728][T14784] report_bug+0x2be/0x4f0 [ 604.203041][T14784] ? usb_submit_urb+0x114d/0x18b0 [ 604.208069][T14784] ? usb_submit_urb+0x114d/0x18b0 [ 604.213075][T14784] ? usb_submit_urb+0x114f/0x18b0 [ 604.218090][T14784] handle_bug+0x84/0x160 [ 604.222317][T14784] exc_invalid_op+0x1a/0x50 [ 604.226806][T14784] asm_exc_invalid_op+0x1a/0x20 [ 604.231651][T14784] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 604.237299][T14784] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 80 07 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 64 27 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 604.257439][T14784] RSP: 0018:ffffc900045af660 EFLAGS: 00010246 [ 604.263625][T14784] RAX: e0e7bb9963ec0200 RBX: ffff888063041700 RCX: 0000000000080000 [ 604.271610][T14784] RDX: ffffc9001b7ef000 RSI: 00000000000374e1 RDI: 00000000000374e2 [ 604.279658][T14784] RBP: 1ffff11003408dc8 R08: 0000000000000003 R09: 0000000000000004 [ 604.287610][T14784] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff888043315100 [ 604.295573][T14784] R13: ffff88801a046e40 R14: 0000000080004980 R15: ffff888028bb4fc0 [ 604.303594][T14784] usb_start_wait_urb+0x114/0x4c0 [ 604.308845][T14784] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 604.314420][T14784] usb_control_msg+0x232/0x3e0 [ 604.319211][T14784] dib0700_i2c_xfer+0xba7/0xf70 [ 604.324103][T14784] ? __lock_acquire+0xab9/0xd20 [ 604.329051][T14784] __i2c_transfer+0x874/0x2170 [ 604.333844][T14784] ? i2c_transfer+0x120/0x3a0 [ 604.338559][T14784] ? __pfx___i2c_transfer+0x10/0x10 [ 604.344284][T14784] ? rt_mutex_lock_nested+0x172/0x1e0 [ 604.350010][T14784] ? i2c_transfer+0x120/0x3a0 [ 604.354858][T14784] i2c_transfer+0x25b/0x3a0 [ 604.360156][T14784] ? __pfx_i2c_transfer+0x10/0x10 [ 604.365276][T14784] ? _copy_from_user+0x94/0xb0 [ 604.370058][T14784] i2cdev_ioctl_rdwr+0x460/0x740 [ 604.375013][T14784] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 604.380219][T14784] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 604.386120][T14784] ? __fget_files+0x3a0/0x420 [ 604.390926][T14784] ? __fget_files+0x2a/0x420 [ 604.395682][T14784] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 604.401235][T14784] __ia32_compat_sys_ioctl+0x543/0x840 [ 604.406872][T14784] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 604.412862][T14784] ? __se_sys_futex_time32+0x360/0x3e0 [ 604.418389][T14784] ? __pfx_do_sys_openat2+0x10/0x10 [ 604.423784][T14784] ? rcu_is_watching+0x15/0xb0 [ 604.428544][T14784] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 604.435354][T14784] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.440559][T14784] __do_fast_syscall_32+0xb6/0x2b0 [ 604.445946][T14784] do_fast_syscall_32+0x34/0x80 [ 604.451078][T14784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.457406][T14784] RIP: 0023:0xf7f71539 [ 604.461553][T14784] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 604.481370][T14784] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 604.489867][T14784] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000707 [ 604.497820][T14784] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.506119][T14784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.514082][T14784] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 604.522040][T14784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.530015][T14784] [ 604.533702][T14784] Kernel Offset: disabled [ 604.538129][T14784] Rebooting in 86400 seconds..