last executing test programs: 24m1.062197756s ago: executing program 2 (id=2607): fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003a00290200000000000000000a"], 0x18}}, 0x0) 23m58.918082135s ago: executing program 2 (id=2612): sysinfo(&(0x7f0000000000)=""/196) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) fstatfs(r3, &(0x7f0000000040)=""/173) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0x5d, 0xad, &(0x7f0000000240)="f4ce5ad3c98c1ca1dfcd1d93ae4524818d23cc474c2cf035c99d5b1a2e4bf6d1a5364c8136f15f464721d0f7133ad762604ed5a30cf9181515e5afc0e18049e28d129c8b143056b57efab102bd51e9f6be0f66847321647b09d335ee04", &(0x7f00000005c0)=""/173, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x4, 0x0, 0x80}, 0x50) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) 23m57.935287926s ago: executing program 2 (id=2617): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000004]}}) 23m57.835612741s ago: executing program 2 (id=2618): timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x149002, 0x0) r1 = signalfd(r0, &(0x7f0000000100)={[0xffff]}, 0x5) mkdir(0x0, 0x5) r2 = gettid() fcntl$setown(r1, 0x8, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r4, 0x1, 0x400a00, 0x25dfdbf9, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) ptrace$peek(0x3, 0x0, &(0x7f0000000200)) 23m57.138005859s ago: executing program 2 (id=2623): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0xfffffffffffffe2c) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f00000001c0)={&(0x7f0000002000), 0x0, 0x6}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r3, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) 23m55.554087665s ago: executing program 2 (id=2628): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x2) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xdb) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioperm(0x7, 0x81, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) acct(&(0x7f0000000040)='./file0\x00') 23m40.530477181s ago: executing program 1 (id=2654): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88d, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000), &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 23m40.467639284s ago: executing program 32 (id=2628): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x2) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xdb) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x2) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xdb) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x2) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xdb) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r1, 0x801, 0x48e, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_pgetevents(0x0, 0x0, 0xffffffffffffff76, 0x0, 0x0, 0xfffffffffffffffd) r6 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) remap_file_pages(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000008, 0x9, 0x100000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x4, 0x2, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xa000, 0x6, 0x81, 0xffff, 0x4, 0x5, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x10cb5c00e4dc05a9) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) 12.163535016s ago: executing program 3 (id=7278): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c) 12.06961217s ago: executing program 3 (id=7279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00006dbffc), 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002e35b3320fd0b06013920010203010902240001fb8040570904"], 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000000c0), 0x4) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f0000001080)) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000340)=[{&(0x7f0000000240)="72b93d", 0x3}], 0x1, 0xc) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) add_key(&(0x7f0000000100)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$sndmidi(&(0x7f0000000140), 0x0, 0x88201) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000300)={{}, 0x80}) 9.667638043s ago: executing program 5 (id=7286): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0xffff, @empty, 0x43f1}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0x0, 0x65a2, 'syz0\x00', 0x0}) semget(0x1, 0x4, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) socket$packet(0x11, 0x3, 0x300) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0xffc, 0x0, 0xd968d5b908ac0cde, 0x2, {0x0, 0x8}, {0x350, 0x0, 0x1}, {0xf4ef}, {0x0, 0x4, 0xffe}, 0x1, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x4, 0x0, 0xb}) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() 9.621681706s ago: executing program 4 (id=7287): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) open_tree(0xffffffffffffffff, &(0x7f0000000440)='./cgroup\x00', 0x81101) socket(0x840000000002, 0x3, 0xfa) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f00000002c0)=""/23, 0x17}], 0x2, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000200)={0x1, 0x8, 0xe13}) r4 = fcntl$dupfd(r2, 0x0, r2) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x37a0a6e1a3083b46) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x100, 0x0, 0xa}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000300)={@local, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000100000000000feffffff00000000", @ANYRES32=r10, @ANYBLOB="00000000000200001800128008000100736974000c00028008000100301f31b036fdda9d46503f32689538d31a8878fe7e84e223d4e3e2adac52e1a39393ab0e21c2474691e98deb893346a7ffc8a1d6998b14b6696ab6281b6c4b2f8a43aa2b7071367627644fbea8555a4783102176fc380e0146dbf16d83", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB], 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20044000) 7.699566919s ago: executing program 3 (id=7290): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7}]}}]}, 0x48}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f0000004580)=[{{&(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0x20}}], 0x1, 0x20000000) 7.631736571s ago: executing program 0 (id=7291): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x64142b0381a2aa16, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000001bc65008500000086", @ANYRES32=r3], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) r4 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\v\xdb\x06\x00\x00\x00\x00\x00\x00\x00\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x00\x00\x80\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xcc\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8cI\xdcn\x9b\xa5\xd4\x13\xc0\x82^\x10,\xfa\x88\x93\xc6K2\xf2\xce\x95\x1bG\xb2m\xad\xe7\xd1P.XT\xc1\xc5\xd9\xaf\v\x8d\xcf\x8f`{F\xc7\x95!\xcc\vq0\xd0\x80\x06{\x97\xb0\xdb+Z\xc5\x9d\xf4\x0eS\xd2\xd4\xb5\\\x96\x1dN\xe6\xfd\\\xe32_p\xee\x15JU\x11\x1f\xc6\xeb\xafm\x1e\xb3\xb5\xfe\x02\xe24\x90Uo\xaf\xce/\x9c\xd4\vE \x81\x14\xdf\x9b\x12b\x1a\x173\x8d\t\xab\xec\xf0n\xa5\x95\x9c\xc3\xf2\xb6CS\xf3\xa8p\t!\xb3\x912`\n\xd2\xe2S\x9cU\xcc\"\xf2d(Ec\xb2\x7f\x02'}]}, 0x130) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7.504232067s ago: executing program 5 (id=7292): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r4}) openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x1, "bd4846bb37cfdeaf7d961227fcf113b7b6774f99f5a633a402e0411d86807c37", 0x31324d4e}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='(', @ANYRES16, @ANYBLOB="45cfc11e7000ffdbdf25630000000800", @ANYRES32=r10, @ANYBLOB="0c009900030000006b0000"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x54090) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x100, 0x0) 7.41585684s ago: executing program 0 (id=7293): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="2965c431b3f249a2206038070b626653197c17b12b503c756abd15baf82652e657ec48f783aa9e0fe31177c7ed0e6fadc04494f6b8a86ff8d066e73ae9095cccb4a1ead5c1211f711fa8559ea4416fa3e689e7cfce2f6bd3dc6939a2d99bab7dbd949fac4ac924ecc96628081af15b95fb95ac02bd7ebe6b6499dd62fdc7410ea3ee05c421a1159b6af4cf3096d6dfd4b188ce67bfa89ca2a23d8f50b186f99a467dc489feecec01ec2bf3474d919353199a7a92c3f298905d8aeba98af14a341572157a877c", @ANYRES16=r3, @ANYBLOB="000428bd7000fddbdf253700000008005700ce05000008005700050000000800a1000200000008009f00199b211a080022011003000000002700000000000000a000050000000300a100260500000800a1000700000008002201d3020000"], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4044800) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x87) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) r5 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x79b3, 0x2102, 0x7ffd, 0x25b}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x627, 0xc104effd, 0x43, 0x0, 0x0) futimesat(r4, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={{0x77359400}, {0x0, 0x2710}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000200001002bbd7000ffdbdf250a000079090000041f0001001400e7fffc020000000000000000000600000000080017"], 0x38}, 0x1, 0x0, 0x0, 0x8884}, 0x1854) 7.20267246s ago: executing program 4 (id=7294): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2, 0x1, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, 0x0, 0x0) syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r7, r8, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 6.833681846s ago: executing program 3 (id=7295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x4000300) r4 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00054000000000"], 0x14b0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000240)) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@md0, 0x0, &(0x7f0000000300)='./file0\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000000), 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x5e1e, 0x2, @mcast1, 0xfffffffd}, 0x1c) getsockopt$sock_buf(r7, 0x1, 0x19, 0x0, &(0x7f0000003080)) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r8, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) 5.837255818s ago: executing program 3 (id=7296): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) 5.661438826s ago: executing program 4 (id=7297): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) r5 = syz_io_uring_setup(0x1251, &(0x7f0000000100)={0x0, 0x100577, 0x10, 0x6, 0x42}, &(0x7f0000000040), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) setresuid(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 4.736578166s ago: executing program 4 (id=7298): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0400}]}) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) 4.587760662s ago: executing program 4 (id=7299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00006dbffc), 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002e35b3320fd0b06013920010203010902240001fb8040570904"], 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000000c0), 0x4) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f0000001080)) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000340)=[{&(0x7f0000000240)="72b93d", 0x3}], 0x1, 0xc) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) add_key(&(0x7f0000000100)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$sndmidi(&(0x7f0000000140), 0x0, 0x88201) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000300)={{}, 0x80}) 4.18794479s ago: executing program 0 (id=7300): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x80000) r3 = dup(r2) readv(r3, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/33, 0x21}], 0x1) 4.131054312s ago: executing program 0 (id=7301): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.035647886s ago: executing program 5 (id=7302): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d00000000e30000000240"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x20) 3.899150132s ago: executing program 0 (id=7303): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406a05630000000000000109"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 1.646788049s ago: executing program 5 (id=7305): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x881, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0xa8, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x40, 0x6, "72c0f7aa1fdcac9ad108975d1b9fa7f5488fc269c5476203f83a695af98385a6f04faf6ac66469a4b72cbd3144757af43525dc9ff7735f85c1172c8e"}, @NFTA_TABLE_USERDATA={0x22, 0x6, "394f10d34d34a7208d58a69fd554ef5b233363a9931e3be18deb3d33e36f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x2744, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x750, 0x3, 0x0, 0x1, [{0x234, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x138, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x53}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xdb}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}]}}}, {0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x48}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb6, 0x1, "019e0dc832543abf201d19549b7a1556bdef0766ddbf466cfd4b67f07a63373c803fe1695328ce8b9a330dc61fe4d377d72b1fc1cb7289e122c81557fe48fa3611c9a3d08178ab96c500dc5ece64c1d74aa3c44e082f33f53484798cb06ec3a282999f33c2661cc4d0fb9ef17241691c8cbc0abeba7fda198025d4fc7d13047296552e67e33e6f356f4ab2590e42e3d4cb098483f7d401d05a6014314f5d7368f495085115c75d45002f6fb414532348ff16"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x444, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9e}, @NFTA_SET_ELEM_USERDATA={0xe6, 0x6, 0x1, 0x0, "14fc2231f7c797c09693b56e35da92eebfc5d00a6e612d9ffcd1fff8fb8ae9b8d0c700033acb1002bb2fae7bbcfa3d2c065bd7dc79a3e7846a117702f6fe10d6dfc3c4262cd762b77fc672c89ad26e6867a40d22fa715ee94dd8c3077a7b99e7cbb70e64727888a46f96034a0cd16fceded448fb36c2215fc4a1be690f4da22bf1ab2af024e82903488dda72a5905c9486f241b46d9f25ff39b94dc7a3f25f2b5b1faaeaa994fcafa89d191a1705f5615d44ebb8736a8706e0fa23b069c1d160887a7230d911845a146c1e0b2f3a0fd379d77faa9ee9773c5e035c374e7fe9d098ce"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x63, 0x1, "66cd823be9829bb3f2b2a3cba57add58092a7221a113868ab97e645c4b47e599607c5b07065e5a9597fd96bd3c20e526cec0e60676b49f093123783e5331e3feaf49dab3d7bc907299bc2e7e240931ab3bdea59b5bb33d41f0873a8ee0a2b8"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_DATA={0x1fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x66, 0x1, "b5b3b7507df43e308f57ec0e0584693d17727a23695360fc1de6dbf9c36bcf69f92cbba28cb06d335d449cb42128bd1de01523ddf77b724655575d7b438a3a25b5a972df8700c54260e94135c4abcd592c50b126a537645a96c0fdd9feff473f5fea"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd3, 0x1, "313d07fa066586c510e129a02b6d546fe860bf4d5df4e7b54ef504b5fc697f0050fc4f3d77a496a320bdf846bcdd5aec0df82a49f669d4709e8f26fe39111d9c2d888585fa1a73d7d000f8ba38d5e6e651338adbc9739d8d9ae1faeacd7bf6082aa6c5c85e6b23b3407cbb983c490f51334d3499017b9b2733f982a8bb0990a52b5a94c38af1b4f8480bf7875fe17c2680eb5063a79734640f0976e3528bf035819de5ed48c7d5f43f6c3cf373d98f3005ae5e203b12318c97eae4491de182d38ced451e9e3800814d9f2bb33d6e43"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x68, 0x1, "7c9f475cf433a1e26ada607816ce803d056fafcba0dd8970b1a736dfa91ef5c240076901d988cbeda4c9c94082ccf111701fe6e72782a53d1b47dd06e279bf57461ebf02ad6bc2904dd138f4255f57c5301d6b75eb2767ee454c1fb6c5c54c0f50804d84"}, @NFTA_DATA_VALUE={0x16, 0x1, "5419e66972f2ad6dbfe117e4842fa8b2b0a9"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x84, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x33, 0x1, "90be2a6b8436da90c47ad5c9c6043b6328a7fdcc37f5085bbd9b705f428049fb0516e4c7a7cad31692216a6183d360"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, {0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb6, 0x6, 0x1, 0x0, "ca1a7c24cd2e3b9756de9a393fdef39b3f06b141397373590a10af7e9c5b650f1fda87710d978b20468413f3cc832ec4908e988f24b791c18ad933fa8ae61cd611470ca1587cd7d6a50c6c13baac015d46840281300f48a94b6191918a0015126b65059df53e713ca1dcf9a0a674cf74c0e52fc95002781b3ff9723bb5ae1561be2226bd0cc17716ae5fa59077d8f0c388f7b60571fe64e7423627a0ec6caf46939f5fe414e368c66f9efa844ffbb29baaed"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1f94, 0x3, 0x0, 0x1, [{0x5d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0xa4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x58, 0x1, "a94def932db1cb19cefd809f4c18a4901baa762f5e6b646f207febddbff0ed61f84809387f83c9e3b6142eeb4ab7b3ccb561ed752aeff548db1ed301a729357736dd754df719fbd59281391b2fdcedd0206d3393"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "c92d7e0c85b58b097ced08c7485e8b4c1db312728be45e839c7134f8528d87433359b81aa8bf725ffdbaee"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x19c, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x40}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1b}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6b}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}]}}}, {0x5c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xf9}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x18}]}}}]}, @NFTA_SET_ELEM_KEY={0x370, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1e, 0x1, "0a3c121d80c840309df24fe4924cb968e51cc271d2d1afeab1d7"}, @NFTA_DATA_VALUE={0xce, 0x1, "75f65433701a227b8f7b2dc92ab0a088f0efc0d3d0d605bcf65bce38009783bf768ac5dd1388a972a43bd6cd62c3022ff77adc32852d815c04e6abb8549eda0b09a8e524bc2c7144035cebd70f9254dfdb9299d5b5e2177fc9a2ceafe9989060387dea847e6750c9cdb20875268251d59c737f737181b3547b2fda5dc98ff5d8b2940d1338a79d3a8a39aca7a63c108c8a5fa52c389e39381adb8263a00fb80bd3ef7d4d90a0e0f085f2749e7a5ea71d8db32d490d8744370f5b903659f539e722e4404b31426b3f5259"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xb8, 0x1, "946b6b9caab222337bcec77141d8a54115209a01a0ecae0313a172b32920001abe2de24c8d4c4da6494322eb51989038eb25eeebb7e58c4c4b6bdb01e039c52d10bbb7b853beea0cb85614e5b9adeed206317f671ff8eba2244e130bdf8f5f2cc60ba8cb55f356679c004320dbd803016067d9dd685a57b9d90057d68db389e78448e22a5f8e5a3e343b8547ce1d1f945a946f2986b11d05396e43185ba3b8fdcec379c60d48c4339f251d939eec4179ef6eb2ef"}, @NFTA_DATA_VALUE={0x84, 0x1, "c18652edab55a0654855ac320544f5b91292d6fa3b2250b975d61e5e961b3c32a212f44f9f9e77fecf00104d2032845f6238c9f1b5fb5c9bc43cf08b90a64ebc44c7827bc94f6dad9d77e3a3798cc6c3ee343270280772243d2118e8ca4a0c33997ca58e0cf7fc397691a1b61a17f87f31698ca9cd7a5ca95d11343c322a1c2b"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "1f3aeb19bae4617424810638fa17bd357fe191850d8387ffe3f84c28ab726c3dd86d2bd57761e833a4d7d5fb9c0925c8a8289a37b910d3ae20b81200d56cd21f0af487a1e978b6320bd4ec3e5ed9c0e8db6d6db78f732bae2334a3c38d8db48644a67de5b911b917f8cf560693fc6bf4ddfa05a57c26a1e1a7c6d0f3715b55030c30765b9132fa4194c1c442763afb97feb848669433e189670cb9cb85546cf54e724ce9ed0bd78c303e42481f1fc95ba882b84dbf9f066c44e6ea22cf6c07e565286245b5003a9e65edcc15d18d848474fc2f66154b6d004ed0a27a8bb13cb7bb03a683450bff5cf69a5dc31b3f"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xaff}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x12e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1174, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1000, 0x1, "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"}, @NFTA_DATA_VALUE={0x4e, 0x1, "632071737ef8d3cb7086c1f827428a7d044511eb5e71748f554b8a8f7c8305a383d0ffe5b5c9024ef5fd18ec8e85f15c21c52eee999e3c1f6048aa9a2c545cc5309a47341a3ab35dc2d5"}, @NFTA_DATA_VALUE={0xfd, 0x1, "d4709196a18e335a42634370efda74fa319c273f172210c73aecdfd6ceaa19427a602a6e699586abe0ec79eb2693ecd7b47fc3b7b822d2c81918c8282ece99bc28fb8a870c2fcce4c2aa0f515b423de61e2ae7deca889408262511b75c95b8c6b7625060ba1740c255e9d7880aecaafad0de5db88a6b7d351c3e592d9f516ef015babd24dcd5ab020fbd65368d0bb743befc3344f9daaf5db1cfc5dc6821d54b2c2576510679ebbc410842c2aa522d6a4263563da5525a58e8edb612ab2fc7250dbeb4474d41f1487458d05506cc4b463eab84710f6d4b9115161079bf0063cb35e2e27c96e8494ce0e339a457dd55df27047f4d7a66017db2"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x164, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "1460274e42c2831753a3f4a3c5497759e4ba8ddd7103aab5971fa5a3842da59a4dfb3549487b7fb46f4314f04f277162d9c777ae18d0522cb35d3cd3a35609b08ac2fa5839a062bc04ad1bdf9648cf4be22f5471f4231593640c0e92ab8ee9bc9203a7aa8482e889ff43"}, @NFTA_DATA_VALUE={0x70, 0x1, "40ecc363f4fa89f784e54fe6cfa6af88633dbccf37276fec573a414899e86f6aea1a99a0cbb377350d406e3c86550bb50b6db63d5a6e9109a01a28938645f14395676392f8c28a1e46124f333aa9eea052eaaaf715b96e76795529f42594ef12a5ff068253cb94c08e6c0112"}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "2c4eed9185e1fd8e41946cc36eae9ecf043baf20223a3b2797d907cb7f26292f2051d5e55940742f68f6bb0f32e30a219540c3f0cbc1eed47c5c4c0e922bdb6cef076928e722badfd554a00e5d8c6f00e45c0d97bb985e7d3c070af31caddeee8c7dd879057348f7e7b185c9b2234571ad899cb270cbc7caad19694c1935ead0ec984beda5d8219df24f50afdf7b8cac42d6e0e652c2856704ec5e670a8206213d571dd5cd1143470c75b91d90733ccb808b43a5d0eec6dfdbb9433764347f91765aca3be2aa6f39f441f1d2103fd119cb574909ebb09296cc931462c41fcf75a6b0"}]}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x32}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0xd, 0x6, 0x1, 0x0, "2d529d14f43233dfb2"}]}, {0x52c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd4, 0x1, "58e5a8a147181144d777f4c60b53ec23711fd211a2113c861306f486d16d17cc59cdcaf495139cf6f31ab9d45856568133ca995127c95bfc55e54f3142f894d19e6ea04581c1233e04b347324c849b358ac2f2e4a04c175fc5952997f34560cc19d679874fc26a15bc45002023522ba7ce1f992a17267eb317b8b0a831c847dec64a3fcf09b2b89af551acbf601a5a5408b536d939a867297bd855a46db8d606cac48613cab00d30ed0fe08caa474955c3a025187144270fc215e5797198d55040699bd9da2ea7a532d14103748c391b"}, @NFTA_DATA_VALUE={0xb9, 0x1, "79a8c34dbfacd9b074ae0b2275145c9bcebc80393f4242157bb6c1b5b75d6e7d802a80e04d87f33e7fb827ec05422ad4bafe84b237f2a2a272d96f28e9e450673b4c7fff0ececdd7d2134ca13f24e6886b7cfb426eeb41e0a0fbd77a620ab785de5ee5c796152066e8825ca0baa1bb50b17db734bba3d1505621409f53fc53187dbb9c82ef4e3d40a14913794f70bc1a518aa7bd7ddb1cbcf883128a830324023336dc87f31a896f6c61929e0b327605cc56d5b4aa"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "ab7dd4551780e2ad26d27efc09276a43a914215935f223e4195837c99dd418d65059eb0793c9adb5120ceb17873ddaf0dbe64a73f50f681e126448e2ee60f7a8c576ddd2a4a8bae87f07a2f83fa8363baa826658bea6d9dfa07ec2261fa01422c608d750b97136542b512b806f1d01b95ddf17e7d30b2c538c6960f39f7b7c4aeb09282a1777ffe9b8be1122c384d4463cf25b50defdd5d8d7d572166a99a8fd21af06e9409a15655d55339048fba129631368e68af182f9a064919c434e4833895151dc7e1816c0f92651965b4b70e0f1a02c2bf033fbd102223c24e5ecf88eb1"}, @NFTA_DATA_VALUE={0xdb, 0x1, "d42d092e678fa21db9fdaf9f4d0d93da0d6d3c0f975ad811be576221bc1d94d5c1863d41f7ee0dedfb89799d6e802fa761613d8a2fa53befb1216f5f61293ea5db7f0ea9e388fdef732a590f21e0cc7215de8de441bcf4f6b0f6a5aad187bfc0764f0073296e98a840fd891702ea16ece2f7421d8872b0410b8ceaec013199d48084d24f042a942c4e3e58f4ef59d026b0fcef9fea2c48ce766769018cfc30a6fa100da39f36e290f801acbedf8785f58014399e5faab7c254ff63de609309d28fd65b88aa090d3c1bd690d7f0cd910250b2dd54425e16"}, @NFTA_DATA_VALUE={0xac, 0x1, "0a7179ed759ba7ff88852fe92f60ccb3e7369ef51fdeeee8ab7cb158624e41e7ccab83ac4fb957f7c8b73d4faff1e684070c275590c98b1db6cce3bf021028efbdcaad2c9815f98c72769509426aeda4c0419708f863c53411777c595d1b18a8a0f63474b736f2352f9e1b96748ce2ec76d92eaa569f6a007ca7c4144f858202b0d6dbe88f4b50c90c1a7e3ffb393befe3dd30417146cd5dc33e7a53bdd1df2f83cdc313b4763e27"}, @NFTA_DATA_VALUE={0xb2, 0x1, "4421f4547dedd8bb9cecd8436a7da7295f87b9068538bce80726280639a95cb2ddf79c644eb95f58ef92002e8a566fde7f6387426e7488b732de07e0f26cd765bb9d076ce8720d9982a84a1d300223aee1916104e52ea2de5dc46060cf3054549788b336c50657d68f477b04d01af2578ae42be71f57b33001b16c80c3ee4bbe9f1fe4a2845b82c2cfc19170b45efeb6da271e1d7185aac35ad41857f647d26bf7b3e13fc34e9129b23cdbbaaa1e"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3400}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100}]}]}]}], {0x14}}, 0x28a8}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x64142b0381a2aa16, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000001bc65008500000086", @ANYRES32=r3], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) r4 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\v\xdb\x06\x00\x00\x00\x00\x00\x00\x00\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x00\x00\x80\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xcc\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8cI\xdcn\x9b\xa5\xd4\x13\xc0\x82^\x10,\xfa\x88\x93\xc6K2\xf2\xce\x95\x1bG\xb2m\xad\xe7\xd1P.XT\xc1\xc5\xd9\xaf\v\x8d\xcf\x8f`{F\xc7\x95!\xcc\vq0\xd0\x80\x06{\x97\xb0\xdb+Z\xc5\x9d\xf4\x0eS\xd2\xd4\xb5\\\x96\x1dN\xe6\xfd\\\xe32_p\xee\x15JU\x11\x1f\xc6\xeb\xafm\x1e\xb3\xb5\xfe\x02\xe24\x90Uo\xaf\xce/\x9c\xd4\vE \x81\x14\xdf\x9b\x12b\x1a\x173\x8d\t\xab\xec\xf0n\xa5\x95\x9c\xc3\xf2\xb6CS\xf3\xa8p\t!\xb3\x912`\n\xd2\xe2S\x9cU\xcc\"\xf2d(Ec\xb2\x7f\x02'}]}, 0x130) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.226147917s ago: executing program 5 (id=7306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) r5 = syz_io_uring_setup(0x1251, &(0x7f0000000100)={0x0, 0x100577, 0x10, 0x6, 0x42}, &(0x7f0000000040), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) setresuid(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 152.447684ms ago: executing program 5 (id=7307): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x1f8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 144.332064ms ago: executing program 4 (id=7308): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="2965c431b3f249a2206038070b626653197c17b12b503c756abd15baf82652e657ec48f783aa9e0fe31177c7ed0e6fadc04494f6b8a86ff8d066e73ae9095cccb4a1ead5c1211f711fa8559ea4416fa3e689e7cfce2f6bd3dc6939a2d99bab7dbd949fac4ac924ecc96628081af15b95fb95ac02bd7ebe6b6499dd62fdc7410ea3ee05c421a1159b6af4cf3096d6dfd4b188ce67bfa89ca2a23d8f50b186f99a467dc489feecec01ec2bf3474d919353199a7a92c3f298905d8aeba98af14a341572157a877c", @ANYRES16=r3, @ANYBLOB="000428bd7000fddbdf253700000008005700ce05000008005700050000000800a1000200000008009f00199b211a080022011003000000002700000000000000a000050000000300a100260500000800a1000700000008002201d3020000"], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4044800) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x87) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) r5 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x79b3, 0x2102, 0x7ffd, 0x25b}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x627, 0xc104effd, 0x43, 0x0, 0x0) futimesat(r4, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={{0x77359400}, {0x0, 0x2710}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000200001002bbd7000ffdbdf250a000079090000041f0001001400e7fffc020000000000000000000600000000080017"], 0x38}, 0x1, 0x0, 0x0, 0x8884}, 0x1854) 0s ago: executing program 0 (id=7309): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x80000) r3 = dup(r2) readv(r3, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/33, 0x21}], 0x1) kernel console output (not intermixed with test programs): 4][T14564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2239.892236][T14564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.912256][T14564] usb 1-1: Product: syz [ 2239.916439][T14564] usb 1-1: Manufacturer: syz [ 2239.921207][T14564] usb 1-1: SerialNumber: syz [ 2240.629077][T27065] (null): rxe_set_mtu: Set mtu to 1024 [ 2240.636228][T27065] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2241.130339][T14564] cdc_ncm 1-1:1.0: bind() failure [ 2241.142346][T14564] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 2241.154524][T14564] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 2241.170639][T14564] usbtest: probe of 1-1:1.1 failed with error -71 [ 2241.193385][T14564] usb 1-1: USB disconnect, device number 62 [ 2241.334688][T27072] team0 (unregistering): Port device team_slave_0 removed [ 2241.349137][T27072] team0 (unregistering): Port device team_slave_1 removed [ 2241.414811][T27077] netlink: 38028 bytes leftover after parsing attributes in process `syz.5.5846'. [ 2241.907167][T27096] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.5851'. [ 2242.032468][T14564] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 2242.648944][T27099] (null): rxe_set_mtu: Set mtu to 1024 [ 2242.654714][T27099] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2242.767378][T14564] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2242.783657][T14564] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 2242.795609][T14564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.804282][T14564] usb 4-1: Product: syz [ 2242.809992][T14564] usb 4-1: Manufacturer: syz [ 2242.814877][T14564] usb 4-1: SerialNumber: syz [ 2243.065458][T14564] usb 4-1: selecting invalid altsetting 1 [ 2243.265904][T14564] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 2243.265967][T14564] dvb_usb_lmedm04: probe of 4-1:2.0 failed with error -22 [ 2243.374784][T12791] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 2243.470032][T14564] usb 4-1: USB disconnect, device number 75 [ 2244.837195][T27127] (null): rxe_set_mtu: Set mtu to 1024 [ 2244.843277][T27127] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2245.690783][T12791] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 2248.011572][T27165] syz1: rxe_newlink: already configured on syz_tun [ 2248.613174][T27177] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.5877'. [ 2250.092025][T13780] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2250.228929][T12791] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 2250.402265][T13780] usb 5-1: device descriptor read/64, error -71 [ 2250.682187][T13780] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2250.846728][T13780] usb 5-1: device descriptor read/64, error -71 [ 2250.972313][T13780] usb usb5-port1: attempt power cycle [ 2251.395289][T13780] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2251.432778][T13780] usb 5-1: device descriptor read/8, error -71 [ 2251.714306][T13780] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2251.762884][T13780] usb 5-1: device descriptor read/8, error -71 [ 2251.902284][T13780] usb usb5-port1: unable to enumerate USB device [ 2251.991624][T27206] syz1: rxe_newlink: already configured on syz_tun [ 2253.769520][T27223] loop9: detected capacity change from 0 to 7 [ 2253.951881][T27223] Dev loop9: unable to read RDB block 7 [ 2253.971311][T27223] loop9: unable to read partition table [ 2253.978384][T27222] nvme_fabrics: missing parameter 'transport=%s' [ 2253.985182][T27222] nvme_fabrics: missing parameter 'nqn=%s' [ 2254.025841][T27223] loop9: partition table beyond EOD, truncated [ 2254.057354][T27223] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2254.441887][T12791] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 2254.837352][T27242] (null): rxe_set_mtu: Set mtu to 1024 [ 2254.843099][T27242] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2255.782395][T14564] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2256.002561][T14564] usb 4-1: device descriptor read/64, error -71 [ 2256.282971][T14564] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2256.407017][T27256] nvme_fabrics: missing parameter 'transport=%s' [ 2256.414905][T27256] nvme_fabrics: missing parameter 'nqn=%s' [ 2256.452078][T14564] usb 4-1: device descriptor read/64, error -71 [ 2256.577599][T27262] geneve1: entered promiscuous mode [ 2256.597412][T14564] usb usb4-port1: attempt power cycle [ 2256.608835][T27262] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2257.077408][T14564] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2257.171415][T14564] usb 4-1: device descriptor read/8, error -71 [ 2257.557017][T14564] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2257.633607][T14564] usb 4-1: device descriptor read/8, error -71 [ 2257.697624][T12791] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 2257.752747][T14564] usb usb4-port1: unable to enumerate USB device [ 2258.354233][T27290] nvme_fabrics: missing parameter 'transport=%s' [ 2258.363099][T27290] nvme_fabrics: missing parameter 'nqn=%s' [ 2260.214149][T27327] nvme_fabrics: missing parameter 'transport=%s' [ 2260.220920][T27327] nvme_fabrics: missing parameter 'nqn=%s' [ 2260.282426][ T7915] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2260.297334][T12791] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 2260.472209][ T7915] usb 1-1: device descriptor read/64, error -71 [ 2260.595356][T27336] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2260.754891][ T7915] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2260.952328][ T7915] usb 1-1: device descriptor read/64, error -71 [ 2261.092365][ T7915] usb usb1-port1: attempt power cycle [ 2261.622849][ T7915] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2261.799511][ T7915] usb 1-1: device descriptor read/8, error -71 [ 2262.222060][ T7915] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2262.264328][ T7915] usb 1-1: device descriptor read/8, error -71 [ 2262.389368][ T7915] usb usb1-port1: unable to enumerate USB device [ 2262.908433][T12791] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 2263.118165][T27372] (null): rxe_set_mtu: Set mtu to 1024 [ 2263.123929][T27372] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2265.422180][T13780] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2265.650927][T13780] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2265.682153][T13780] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2265.702365][T13780] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2265.728490][T13780] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2265.772330][T13780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.785074][T27403] (null): rxe_set_mtu: Set mtu to 1024 [ 2265.790849][T27403] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2265.798415][T13780] usb 4-1: Product: syz [ 2265.808981][T13780] usb 4-1: Manufacturer: syz [ 2265.814370][T13780] usb 4-1: SerialNumber: syz [ 2266.802082][ T5809] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2266.955798][T13780] cdc_ncm 4-1:1.0: bind() failure [ 2266.962694][ T5809] usb 1-1: device descriptor read/64, error -71 [ 2266.980633][T13780] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 2266.989665][T13780] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 2267.000907][T13780] usbtest: probe of 4-1:1.1 failed with error -71 [ 2267.020098][T13780] usb 4-1: USB disconnect, device number 80 [ 2267.252232][ T5809] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2267.442069][ T5809] usb 1-1: device descriptor read/64, error -71 [ 2267.582304][ T5809] usb usb1-port1: attempt power cycle [ 2268.012039][ T5809] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2268.052924][ T5809] usb 1-1: device descriptor read/8, error -71 [ 2268.258277][T27434] (null): rxe_set_mtu: Set mtu to 1024 [ 2268.264412][T27434] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2268.355199][ T5809] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2268.403569][ T5809] usb 1-1: device descriptor read/8, error -71 [ 2268.565446][ T5809] usb usb1-port1: unable to enumerate USB device [ 2270.618079][T27465] (null): rxe_set_mtu: Set mtu to 1024 [ 2270.625443][T27465] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2273.217484][T27498] syz1: rxe_newlink: already configured on syz_tun [ 2274.793550][T27517] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.5987'. [ 2276.053450][T27525] (null): rxe_set_mtu: Set mtu to 1024 [ 2276.059257][T27525] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2277.923368][T27555] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.5999'. [ 2278.764921][T27561] syz1: rxe_newlink: already configured on syz_tun [ 2281.038603][T27591] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6012'. [ 2282.705707][T27594] nvme_fabrics: missing parameter 'transport=%s' [ 2282.725442][T27594] nvme_fabrics: missing parameter 'nqn=%s' [ 2282.808232][T27601] (null): rxe_set_mtu: Set mtu to 1024 [ 2282.814087][T27601] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2283.308768][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.365436][T27627] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.6023'. [ 2285.121293][T27635] (null): rxe_set_mtu: Set mtu to 1024 [ 2285.127476][T27635] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2287.948646][T27665] (null): rxe_set_mtu: Set mtu to 1024 [ 2287.954732][T27665] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2289.561084][T14564] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2289.774481][T14564] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2289.810366][T14564] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2289.826873][T14564] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2289.855865][T14564] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2289.865902][T14564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2289.878321][T14564] usb 5-1: Product: syz [ 2289.884352][T14564] usb 5-1: Manufacturer: syz [ 2289.889452][T14564] usb 5-1: SerialNumber: syz [ 2290.523971][T27701] (null): rxe_set_mtu: Set mtu to 1024 [ 2290.529753][T27701] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2291.006592][T14564] cdc_ncm 5-1:1.0: bind() failure [ 2291.042041][T14564] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 2291.072986][T14564] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 2291.101929][T14564] usbtest: probe of 5-1:1.1 failed with error -71 [ 2291.128943][T14564] usb 5-1: USB disconnect, device number 75 [ 2292.208203][T27717] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6052'. [ 2293.985640][T27735] (null): rxe_set_mtu: Set mtu to 1024 [ 2293.991403][T27735] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2294.842906][T22648] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2295.017133][T22648] usb 5-1: device descriptor read/64, error -71 [ 2295.292258][T22648] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2295.482418][T22648] usb 5-1: device descriptor read/64, error -71 [ 2295.663201][T22648] usb usb5-port1: attempt power cycle [ 2296.092096][T22648] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2296.173722][T22648] usb 5-1: device descriptor read/8, error -71 [ 2296.452064][T22648] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2296.502846][T22648] usb 5-1: device descriptor read/8, error -71 [ 2296.634271][T22648] usb usb5-port1: unable to enumerate USB device [ 2297.540698][T27769] nvme_fabrics: missing parameter 'transport=%s' [ 2297.547366][T27769] nvme_fabrics: missing parameter 'nqn=%s' [ 2297.827780][T27775] (null): rxe_set_mtu: Set mtu to 1024 [ 2297.833813][T27775] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2299.104106][T27788] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.6073'. [ 2299.852936][T12791] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 2302.418998][T27814] syz1: rxe_newlink: already configured on syz_tun [ 2304.002590][T27826] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6085'. [ 2304.948230][T12791] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 2306.236151][T27850] (null): rxe_set_mtu: Set mtu to 1024 [ 2306.243471][T27850] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2306.612165][T24516] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2306.962071][T24516] usb 1-1: Using ep0 maxpacket: 32 [ 2306.986163][T27862] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6096'. [ 2307.047501][T13780] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2307.094068][T24516] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2307.181546][T24516] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2307.292611][T24516] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2307.344451][T13780] usb 5-1: Using ep0 maxpacket: 32 [ 2307.369074][T24516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.397285][T13780] usb 5-1: no configurations [ 2307.435155][T13780] usb 5-1: can't read configurations, error -22 [ 2307.450934][T24516] usb 1-1: Product: syz [ 2307.478623][T24516] usb 1-1: Manufacturer: syz [ 2307.497191][T24516] usb 1-1: SerialNumber: syz [ 2307.507442][T24516] usb 1-1: config 0 descriptor?? [ 2307.672233][T13780] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2307.922052][T13780] usb 5-1: Using ep0 maxpacket: 32 [ 2307.929696][T13780] usb 5-1: no configurations [ 2307.937481][T13780] usb 5-1: can't read configurations, error -22 [ 2307.948263][T13780] usb usb5-port1: attempt power cycle [ 2308.292658][T12791] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 2308.362259][T13780] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2308.412783][T13780] usb 5-1: Using ep0 maxpacket: 32 [ 2308.428341][T13780] usb 5-1: no configurations [ 2308.438277][T13780] usb 5-1: can't read configurations, error -22 [ 2308.612107][T13780] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2308.680182][T13780] usb 5-1: Using ep0 maxpacket: 32 [ 2308.686216][T13780] usb 5-1: no configurations [ 2308.690848][T13780] usb 5-1: can't read configurations, error -22 [ 2308.697972][T13780] usb usb5-port1: unable to enumerate USB device [ 2308.807430][T13780] usb 1-1: USB disconnect, device number 71 [ 2309.471481][T27887] syz1: rxe_newlink: already configured on syz_tun [ 2310.762827][T27901] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.6108'. [ 2311.799741][T12791] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 2313.483925][T27930] (null): rxe_set_mtu: Set mtu to 1024 [ 2313.489607][T27930] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2314.317626][T27942] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6119'. [ 2315.102957][T27950] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2315.916176][T27961] (null): rxe_set_mtu: Set mtu to 1024 [ 2315.922145][T27961] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2317.851663][T27981] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6129'. [ 2318.037955][T27982] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6130'. [ 2318.790794][T27994] fuse: Unknown parameter '0xffffffffffffffff' [ 2319.632596][T28005] syz1: rxe_newlink: already configured on syz_tun [ 2320.758449][T28019] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6140'. [ 2321.170433][T28029] syz1: rxe_newlink: already configured on syz_tun [ 2321.389143][T28030] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.6143'. [ 2321.658709][T28032] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2321.860739][T28037] syz1: rxe_newlink: already configured on syz_tun [ 2322.721857][T28046] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6150'. [ 2323.590248][T28056] (null): rxe_set_mtu: Set mtu to 1024 [ 2323.596664][T28056] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2324.241724][T28068] syz1: rxe_newlink: already configured on syz_tun [ 2325.383728][T28082] (null): rxe_set_mtu: Set mtu to 1024 [ 2325.389427][T28082] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2326.186812][T28104] (null): rxe_set_mtu: Set mtu to 1024 [ 2326.192632][T28104] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2326.653791][T28108] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6170'. [ 2327.082092][ T7915] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2327.272501][ T7915] usb 5-1: Using ep0 maxpacket: 32 [ 2327.288934][ T7915] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 2327.297191][ T7915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2327.307945][ T7915] usb 5-1: config 0 has no interface number 0 [ 2327.314590][ T7915] usb 5-1: config 0 interface 188 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2327.383815][ T7915] usb 5-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2327.406338][ T7915] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2327.416720][ T7915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.426920][ T7915] usb 5-1: Product: syz [ 2327.431245][ T7915] usb 5-1: Manufacturer: syz [ 2327.436592][ T7915] usb 5-1: SerialNumber: syz [ 2327.453336][ T7915] usb 5-1: config 0 descriptor?? [ 2327.468271][ T7915] asix: probe of 5-1:0.188 failed with error -22 [ 2327.847875][T28126] (null): rxe_set_mtu: Set mtu to 1024 [ 2327.853640][T28126] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2328.144355][T28129] netlink: 'syz.3.6179': attribute type 1 has an invalid length. [ 2328.221475][T28129] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2328.230452][T28129] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2328.245788][T28129] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2328.257161][T28129] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2328.275166][T28129] bond1: (slave geneve2): making interface the new active one [ 2328.285374][T28129] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2329.754976][T28161] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.6183'. [ 2330.001224][T28164] (null): rxe_set_mtu: Set mtu to 1024 [ 2330.007037][T28164] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2330.156634][T13780] usb 5-1: USB disconnect, device number 84 [ 2331.382370][T13780] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2331.624204][T13780] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2331.644045][T13780] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2331.659011][T13780] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2331.674979][T13780] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2331.684181][T13780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.692922][T13780] usb 5-1: Product: syz [ 2331.697153][T13780] usb 5-1: Manufacturer: syz [ 2331.701806][T13780] usb 5-1: SerialNumber: syz [ 2332.397268][T28197] (null): rxe_set_mtu: Set mtu to 1024 [ 2332.403537][T28197] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2332.726712][T13780] cdc_ncm 5-1:1.0: bind() failure [ 2332.738697][T13780] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 2332.823161][T13780] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 2332.860902][T13780] usbtest: probe of 5-1:1.1 failed with error -71 [ 2332.890113][T13780] usb 5-1: USB disconnect, device number 85 [ 2332.927972][T28201] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6200'. [ 2334.968270][T28225] (null): rxe_set_mtu: Set mtu to 1024 [ 2335.004678][T28219] nvme_fabrics: missing parameter 'transport=%s' [ 2335.013255][T28219] nvme_fabrics: missing parameter 'nqn=%s' [ 2335.192436][T12791] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 2335.351883][T28225] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2336.142123][T24516] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2336.420119][T24516] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2336.456860][T24516] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2336.679062][T28256] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6215'. [ 2336.833203][T24516] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2336.854046][T24516] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2336.863459][T24516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.871594][T24516] usb 4-1: Product: syz [ 2336.875923][T24516] usb 4-1: Manufacturer: syz [ 2336.880655][T24516] usb 4-1: SerialNumber: syz [ 2337.764023][T14563] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2337.962495][T14563] usb 1-1: Using ep0 maxpacket: 32 [ 2337.978770][T14563] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 2337.992659][T14563] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2338.003184][T14563] usb 1-1: config 0 has no interface number 0 [ 2338.010420][T14563] usb 1-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2338.035972][T14563] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2338.045348][T14563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.053722][T14563] usb 1-1: Product: syz [ 2338.058030][T14563] usb 1-1: Manufacturer: syz [ 2338.062708][T14563] usb 1-1: SerialNumber: syz [ 2338.136839][T28263] nvme_fabrics: missing parameter 'transport=%s' [ 2338.148334][T28263] nvme_fabrics: missing parameter 'nqn=%s' [ 2338.156765][T14563] usb 1-1: config 0 descriptor?? [ 2338.207167][T14563] asix: probe of 1-1:0.188 failed with error -22 [ 2338.278201][T24516] cdc_ncm 4-1:1.0: bind() failure [ 2338.313964][T24516] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 2338.334777][T24516] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 2338.355489][T24516] usbtest: probe of 4-1:1.1 failed with error -71 [ 2338.393563][T24516] usb 4-1: USB disconnect, device number 81 [ 2339.067057][T12791] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 2340.566724][T14564] usb 1-1: USB disconnect, device number 72 [ 2341.052432][T14564] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2341.264668][T14564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2341.284674][T14564] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2341.304314][T14564] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2341.351766][T14564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2341.390599][T14564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2341.454966][T14564] usb 1-1: Product: syz [ 2341.462891][T14564] usb 1-1: Manufacturer: syz [ 2341.492185][T14564] usb 1-1: SerialNumber: syz [ 2342.537547][T14564] cdc_ncm 1-1:1.0: bind() failure [ 2342.572359][T14564] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 2342.599981][T14564] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 2342.620490][T14564] usbtest: probe of 1-1:1.1 failed with error -71 [ 2342.670419][T12791] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 2342.682463][T14564] usb 1-1: USB disconnect, device number 73 [ 2343.936153][T28336] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.6238'. [ 2344.212336][T24516] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2344.402075][T24516] usb 4-1: Using ep0 maxpacket: 32 [ 2344.416037][T24516] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 2344.439203][T24516] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2344.483148][T24516] usb 4-1: config 0 has no interface number 0 [ 2344.504014][T24516] usb 4-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2344.547451][T24516] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2344.562016][T24516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2344.584494][T24516] usb 4-1: Product: syz [ 2344.595498][T24516] usb 4-1: Manufacturer: syz [ 2344.606771][T24516] usb 4-1: SerialNumber: syz [ 2344.640992][T24516] usb 4-1: config 0 descriptor?? [ 2344.665900][T24516] asix: probe of 4-1:0.188 failed with error -22 [ 2344.751196][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.591309][T12791] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 2345.703885][T13780] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2345.909242][T13780] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2345.935986][T13780] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2345.957305][T13780] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2345.992714][T13780] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2346.012993][T13780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2346.026974][T13780] usb 5-1: Product: syz [ 2346.031212][T13780] usb 5-1: Manufacturer: syz [ 2346.036463][T13780] usb 5-1: SerialNumber: syz [ 2346.400749][T28377] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6250'. [ 2347.038369][T24516] usb 4-1: USB disconnect, device number 82 [ 2347.171875][T13780] cdc_ncm 5-1:1.0: bind() failure [ 2347.233787][T13780] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 2347.270382][T13780] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 2347.298222][T13780] usbtest: probe of 5-1:1.1 failed with error -71 [ 2347.358217][T13780] usb 5-1: USB disconnect, device number 86 [ 2347.469174][T28400] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6256'. [ 2349.177433][T12791] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 2349.481728][T28429] program syz.4.6264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2349.602134][T14564] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2349.832197][T14564] usb 1-1: Using ep0 maxpacket: 32 [ 2349.870412][T14564] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 2349.880606][T14564] usb 1-1: config 0 has no interface number 0 [ 2349.887992][T14564] usb 1-1: config 0 interface 188 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2349.946067][T14564] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2349.956422][T14564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2349.964537][T14564] usb 1-1: Product: syz [ 2349.969080][T14564] usb 1-1: Manufacturer: syz [ 2349.973952][T14564] usb 1-1: SerialNumber: syz [ 2350.059387][T14564] usb 1-1: config 0 descriptor?? [ 2350.101539][T14564] asix: probe of 1-1:0.188 failed with error -22 [ 2350.167479][T28432] nvme_fabrics: missing parameter 'transport=%s' [ 2350.178574][T28432] nvme_fabrics: missing parameter 'nqn=%s' [ 2351.202088][ T5809] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2351.669875][ T5809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2351.795260][ T5809] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2351.822600][ T5809] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2351.877471][ T5809] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2351.902124][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.911841][ T5809] usb 4-1: Product: syz [ 2351.923179][ T5809] usb 4-1: Manufacturer: syz [ 2351.927765][ T5809] usb 4-1: SerialNumber: syz [ 2352.419513][T14564] usb 1-1: USB disconnect, device number 74 [ 2352.999608][ T5809] cdc_ncm 4-1:1.0: bind() failure [ 2353.071147][ T5809] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 2353.101623][ T5809] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 2353.118020][T28465] nvme_fabrics: missing parameter 'transport=%s' [ 2353.124952][T28465] nvme_fabrics: missing parameter 'nqn=%s' [ 2353.143536][ T5809] usbtest: probe of 4-1:1.1 failed with error -71 [ 2353.186323][ T5809] usb 4-1: USB disconnect, device number 83 [ 2353.376772][T28469] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6272'. [ 2355.428566][T28498] (null): rxe_set_mtu: Set mtu to 1024 [ 2355.436044][T28498] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2356.762468][T14563] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2356.875194][T28524] (null): rxe_set_mtu: Set mtu to 1024 [ 2356.881213][T28524] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2357.196290][T14563] usb 4-1: Using ep0 maxpacket: 16 [ 2357.287330][T14563] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2357.475328][T14563] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 2357.742123][T14563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.755711][T14563] usb 4-1: Product: syz [ 2357.767499][T14563] usb 4-1: Manufacturer: syz [ 2357.779183][T14563] usb 4-1: SerialNumber: syz [ 2357.819034][T14563] usb 4-1: config 0 descriptor?? [ 2358.465996][T28541] (null): rxe_set_mtu: Set mtu to 1024 [ 2358.471747][T28541] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2358.736080][T14563] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 2358.770033][T14563] pegasus_notetaker: probe of 4-1:0.0 failed with error -22 [ 2358.818588][T14563] usb 4-1: USB disconnect, device number 84 [ 2360.002486][T28560] (null): rxe_set_mtu: Set mtu to 1024 [ 2360.008174][T28560] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2360.294042][T28564] syz1: rxe_newlink: already configured on syz_tun [ 2360.612391][T14563] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2360.925202][T14563] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2360.941292][T14563] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2360.951471][T14563] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2360.993757][T14563] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2361.005035][T14563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.013144][T14563] usb 1-1: Product: syz [ 2361.017382][T14563] usb 1-1: Manufacturer: syz [ 2361.022210][T14563] usb 1-1: SerialNumber: syz [ 2362.108456][T14563] cdc_ncm 1-1:1.0: bind() failure [ 2362.126802][T14563] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 2362.134157][T14563] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 2362.143793][T14563] usbtest: probe of 1-1:1.1 failed with error -71 [ 2362.170929][T14563] usb 1-1: USB disconnect, device number 75 [ 2362.356739][T28595] (null): rxe_set_mtu: Set mtu to 1024 [ 2362.363136][T28595] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2362.370097][T28593] (null): rxe_set_mtu: Set mtu to 1024 [ 2362.376188][T28593] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2364.141366][T28622] (null): rxe_set_mtu: Set mtu to 1024 [ 2364.148023][T28622] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2364.285286][T28619] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2364.593201][T28635] (null): rxe_set_mtu: Set mtu to 1024 [ 2364.598900][T28635] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2364.992210][T12791] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 2365.565092][T28649] geneve1: entered promiscuous mode [ 2365.591227][T28649] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 2366.254435][T28662] syz1: rxe_newlink: already configured on syz_tun [ 2366.445072][T28666] (null): rxe_set_mtu: Set mtu to 1024 [ 2366.450750][T28666] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2367.567334][T12791] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 2368.254289][T28698] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.6346'. [ 2368.553273][T28707] (null): rxe_set_mtu: Set mtu to 1024 [ 2368.559172][T28707] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2368.622048][T24516] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2368.822235][T24516] usb 1-1: Using ep0 maxpacket: 32 [ 2368.858268][T24516] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2368.900259][T24516] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2368.932358][T24516] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2368.968815][T24516] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 2368.987705][T24516] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 2368.999834][T24516] usb 1-1: Product: syz [ 2369.007407][T24516] usb 1-1: Manufacturer: syz [ 2369.015194][T24516] usb 1-1: SerialNumber: syz [ 2369.036298][T24516] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input59 [ 2369.201511][T28710] (null): rxe_set_mtu: Set mtu to 1024 [ 2369.207491][T28710] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2369.272542][T24516] usb 1-1: USB disconnect, device number 76 [ 2369.314129][T24516] appletouch 1-1:1.0: input: appletouch disconnected [ 2370.377292][T28736] (null): rxe_set_mtu: Set mtu to 1024 [ 2370.383987][T28736] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2370.394561][T28728] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2370.532409][T28728] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2370.738750][T28728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2370.756715][T28728] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2370.828780][T28728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2370.836560][T28728] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2371.132483][T28728] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2371.139922][T28728] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2371.218307][T28745] fuse: Bad value for 'fd' [ 2371.325019][T12791] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 2371.352186][T28747] (null): rxe_set_mtu: Set mtu to 1024 [ 2371.579719][T28747] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2372.452304][T12791] Bluetooth: hci0: command 0x0406 tx timeout [ 2372.551210][T28757] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.6364'. [ 2372.822179][T12791] Bluetooth: hci3: command 0x0406 tx timeout [ 2372.902200][T12791] Bluetooth: hci2: command 0x0406 tx timeout [ 2373.142051][T12791] Bluetooth: hci4: command 0x0406 tx timeout [ 2374.005156][T28773] syz1: rxe_newlink: already configured on syz_tun [ 2374.484853][T28784] fuse: Bad value for 'fd' [ 2374.502093][T12791] Bluetooth: hci0: command 0x0406 tx timeout [ 2374.708158][T28790] (null): rxe_set_mtu: Set mtu to 1024 [ 2374.714007][T28790] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2374.902290][T12791] Bluetooth: hci3: command 0x0406 tx timeout [ 2374.982064][T12791] Bluetooth: hci2: command 0x0406 tx timeout [ 2375.222135][T12791] Bluetooth: hci4: command 0x0406 tx timeout [ 2376.404464][T28803] (null): rxe_set_mtu: Set mtu to 1024 [ 2376.410163][T28803] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2376.654837][T28807] netlink: 65536 bytes leftover after parsing attributes in process `syz.5.6382'. [ 2376.817731][T28811] fuse: Bad value for 'fd' [ 2376.822896][T12791] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 2376.978695][T28815] (null): rxe_set_mtu: Set mtu to 1024 [ 2376.985821][T28815] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2377.252237][T13780] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2377.452070][T13780] usb 4-1: Using ep0 maxpacket: 32 [ 2377.495171][T13780] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 2377.614434][T13780] usb 4-1: config 0 has no interface number 0 [ 2377.636150][T13780] usb 4-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2377.682570][T13780] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2377.703653][T13780] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2378.280911][T13780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.289402][T13780] usb 4-1: Product: syz [ 2378.366776][T13780] usb 4-1: Manufacturer: syz [ 2378.422392][T13780] usb 4-1: SerialNumber: syz [ 2378.477002][T13780] usb 4-1: config 0 descriptor?? [ 2378.506507][T13780] asix: probe of 4-1:0.188 failed with error -22 [ 2379.235704][T28844] (null): rxe_set_mtu: Set mtu to 1024 [ 2379.241482][T28844] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2379.454464][T28849] netlink: 65536 bytes leftover after parsing attributes in process `syz.5.6394'. [ 2379.941081][T28858] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6396'. [ 2380.155615][T14564] usb 4-1: USB disconnect, device number 85 [ 2380.439850][T28860] syz1: rxe_newlink: already configured on syz_tun [ 2381.712099][ T5809] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2381.892066][ T5809] usb 5-1: Using ep0 maxpacket: 16 [ 2381.899275][ T5809] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2381.910335][T28883] syz1: rxe_newlink: already configured on syz_tun [ 2382.137264][ T5809] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 2382.156705][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.220818][ T5809] usb 5-1: Product: syz [ 2382.230393][ T5809] usb 5-1: Manufacturer: syz [ 2382.262578][ T5809] usb 5-1: SerialNumber: syz [ 2382.297641][ T5809] usb 5-1: config 0 descriptor?? [ 2382.996592][ T5809] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 2383.142337][ T5809] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 2383.182422][ T5809] usb 5-1: USB disconnect, device number 87 [ 2383.182772][T28890] syz.3.6405 (28890): drop_caches: 3 [ 2383.413400][T28893] syz1: rxe_newlink: already configured on syz_tun [ 2385.257609][T28915] (null): rxe_set_mtu: Set mtu to 1024 [ 2385.400645][T28915] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2385.502268][T28923] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6410'. [ 2386.003050][T28931] (null): rxe_set_mtu: Set mtu to 1024 [ 2386.008727][T28931] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2387.532283][ T5809] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2387.546961][T14563] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2387.689114][T28953] vivid-007: disconnect [ 2387.732118][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 2387.739094][T14563] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2387.751660][ T5809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2387.768660][ T5809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2387.778746][ T5809] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2387.802594][ T5809] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 2387.816098][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 2387.824883][ T5809] usb 4-1: Product: syz [ 2387.829138][ T5809] usb 4-1: Manufacturer: syz [ 2387.837548][ T5809] usb 4-1: SerialNumber: syz [ 2387.850606][ T5809] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input60 [ 2387.918207][T14563] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2387.974327][T14563] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2388.045492][T14563] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2388.095935][T14563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.110528][T14563] usb 1-1: Product: syz [ 2388.138952][ T5809] usb 4-1: USB disconnect, device number 86 [ 2388.155588][T14563] usb 1-1: Manufacturer: syz [ 2388.173408][ T5809] appletouch 4-1:1.0: input: appletouch disconnected [ 2388.208882][T14563] usb 1-1: SerialNumber: syz [ 2388.426405][T28948] vivid-007: reconnect [ 2389.059843][T28957] (null): rxe_set_mtu: Set mtu to 1024 [ 2389.065716][T28957] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2389.274478][T14563] cdc_ncm 1-1:1.0: bind() failure [ 2389.310918][T14563] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 2389.376741][T14563] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 2389.398917][T14563] usbtest: probe of 1-1:1.1 failed with error -71 [ 2389.426626][T14563] usb 1-1: USB disconnect, device number 77 [ 2389.515228][T28965] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.6422'. [ 2389.673161][T28964] syz.4.6426 (28964): drop_caches: 3 [ 2391.808728][T28995] syzkaller0: entered promiscuous mode [ 2391.821695][T28995] syzkaller0: entered allmulticast mode [ 2392.341836][T29002] (null): rxe_set_mtu: Set mtu to 1024 [ 2392.347583][T29002] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2392.951405][T29006] syz.5.6436 (29006): drop_caches: 3 [ 2393.718328][T29020] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6438'. [ 2395.258612][T29023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2399.796340][T29067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2400.939749][T29105] syz.4.6462 (29105): drop_caches: 3 [ 2401.025541][T29109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6463'. [ 2401.283705][T29115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6464'. [ 2401.742129][T22648] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2401.991158][T22648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2402.100655][T22648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2402.246819][T22648] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2402.282009][T22648] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2402.290427][T22648] usb 5-1: Manufacturer: syz [ 2402.433508][T22648] usb 5-1: config 0 descriptor?? [ 2402.890392][T22648] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 2403.000965][T22648] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 2403.035837][T22648] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 2403.097412][T22648] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 2403.135519][T22648] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 2403.188413][T22648] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 2403.331020][T22648] pyra 0003:1E7D:2CF6.001E: unknown main item tag 0x0 [ 2403.435830][T22648] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 2405.020310][T29174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2405.758683][T22648] pyra 0003:1E7D:2CF6.001E: couldn't init struct pyra_device [ 2405.766751][T22648] pyra 0003:1E7D:2CF6.001E: couldn't install mouse [ 2405.803970][T22648] pyra: probe of 0003:1E7D:2CF6.001E failed with error -71 [ 2405.832292][T22648] usb 5-1: USB disconnect, device number 88 [ 2406.134581][T29192] fido_id[29192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2406.197104][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.490503][T29207] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2406.816398][T29217] netlink: 'syz.5.6496': attribute type 11 has an invalid length. [ 2408.042176][ T7915] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2408.241304][ T7915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2408.263628][ T7915] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2408.305491][ T7915] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2408.343620][ T7915] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2408.362425][ T7915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.370517][ T5809] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2408.397680][ T7915] usb 4-1: Product: syz [ 2408.414098][ T7915] usb 4-1: Manufacturer: syz [ 2408.418688][ T7915] usb 4-1: SerialNumber: syz [ 2408.451630][T13780] IPVS: starting estimator thread 0... [ 2408.542760][T29251] IPVS: using max 36 ests per chain, 86400 per kthread [ 2408.722056][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 2408.732277][ T5809] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.745129][ T5809] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 2408.756236][ T5809] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2408.772785][ T5809] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2408.781885][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.790160][ T5809] usb 5-1: Product: syz [ 2408.795943][ T5809] usb 5-1: Manufacturer: syz [ 2408.800625][ T5809] usb 5-1: SerialNumber: syz [ 2408.826340][ T5809] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2408.837589][ T5809] imon 5-1:155.0: unable to initialize intf0, err -19 [ 2408.844690][ T5809] imon:imon_probe: failed to initialize context! [ 2408.851097][ T5809] imon 5-1:155.0: unable to register, err -19 [ 2409.219729][T29261] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6509'. [ 2409.508774][ T7915] cdc_ncm 4-1:1.0: bind() failure [ 2409.520307][ T7915] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 2409.546132][ T7915] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 2409.558468][ T7915] usbtest: probe of 4-1:1.1 failed with error -71 [ 2409.573451][ T7915] usb 4-1: USB disconnect, device number 87 [ 2410.999684][T13780] usb 5-1: USB disconnect, device number 89 [ 2412.138490][T29301] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6517'. [ 2412.465338][T29311] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2412.537497][T29314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2412.553704][T29314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2412.560934][T29314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2414.260722][ T27] audit: type=1326 audit(1765110762.321:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.4.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fd78f749 code=0x7ffc0000 [ 2414.298548][T29353] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2414.361144][ T27] audit: type=1326 audit(1765110762.321:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.4.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fd78f749 code=0x7ffc0000 [ 2414.583078][ T27] audit: type=1326 audit(1765110762.321:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.4.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd4fd78f749 code=0x7ffc0000 [ 2414.645905][ T27] audit: type=1326 audit(1765110762.321:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.4.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fd78f749 code=0x7ffc0000 [ 2414.756885][ T27] audit: type=1326 audit(1765110762.321:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.4.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fd78f749 code=0x7ffc0000 [ 2414.779109][ C1] vkms_vblank_simulate: vblank timer overrun [ 2414.823405][T29363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6533'. [ 2414.836959][T29363] netlink: 'syz.4.6533': attribute type 7 has an invalid length. [ 2414.845422][T29363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6533'. [ 2414.857462][ T27] audit: type=1326 audit(1765110762.321:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.4.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd4fd78f749 code=0x7ffc0000 [ 2414.879687][ C1] vkms_vblank_simulate: vblank timer overrun [ 2414.967972][ T27] audit: type=1326 audit(1765110762.321:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.4.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fd78f749 code=0x7ffc0000 [ 2415.081491][ T27] audit: type=1326 audit(1765110762.321:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.4.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fd78f749 code=0x7ffc0000 [ 2415.114940][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6538'. [ 2415.140331][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6538'. [ 2415.246331][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6538'. [ 2415.262160][ T27] audit: type=1326 audit(1765110762.321:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.4.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd4fd78f749 code=0x7ffc0000 [ 2415.297560][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6538'. [ 2415.311932][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6538'. [ 2415.341187][ T27] audit: type=1326 audit(1765110762.321:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29349 comm="syz.4.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4fd78f749 code=0x7ffc0000 [ 2415.368985][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6538'. [ 2415.432254][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6538'. [ 2415.479643][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6538'. [ 2415.497374][T29356] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 2415.506504][T29356] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 2415.515832][T29356] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2417.442101][T14563] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2417.482257][ T7915] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2417.627336][T14563] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2417.638332][T14563] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2417.648300][T14563] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2417.660340][T14563] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2417.669631][T14563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.677687][T14563] usb 5-1: Product: syz [ 2417.681852][T14563] usb 5-1: Manufacturer: syz [ 2417.686529][ T7915] usb 1-1: Using ep0 maxpacket: 32 [ 2417.691740][T14563] usb 5-1: SerialNumber: syz [ 2417.701704][ T7915] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 2417.710266][ T7915] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2417.720860][ T7915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2417.730107][ T7915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2417.739890][ T7915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2417.749592][ T7915] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2417.762851][ T7915] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2417.771882][ T7915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2417.791228][ T7915] usb 1-1: config 0 descriptor?? [ 2418.006330][ T7915] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 78 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2418.722616][T14563] cdc_ncm 5-1:1.0: bind() failure [ 2418.745922][T14563] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 2418.759373][T14563] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 2418.767741][T14563] usbtest: probe of 5-1:1.1 failed with error -71 [ 2418.781440][T14563] usb 5-1: USB disconnect, device number 90 [ 2420.407290][T13780] usb 1-1: USB disconnect, device number 78 [ 2420.443315][T13780] usblp0: removed [ 2421.024764][T29436] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 2421.362079][ T7915] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2421.564809][ T7915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2421.595177][ T7915] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2421.623819][ T7915] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2421.667202][ T7915] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2421.688382][ T7915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2421.711810][ T7915] usb 4-1: Product: syz [ 2421.722048][ T7915] usb 4-1: Manufacturer: syz [ 2421.726669][ T7915] usb 4-1: SerialNumber: syz [ 2422.450068][T29477] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 2422.507757][T29477] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2422.523068][T29478] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2422.784801][ T7915] cdc_ncm 4-1:1.0: bind() failure [ 2422.804434][ T7915] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 2422.842841][ T7915] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 2422.869813][ T7915] usbtest: probe of 4-1:1.1 failed with error -71 [ 2422.911726][ T7915] usb 4-1: USB disconnect, device number 88 [ 2423.567410][T12791] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 2424.367255][T29513] __nla_validate_parse: 30 callbacks suppressed [ 2424.367272][T29513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6588'. [ 2425.127761][T29529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6596'. [ 2425.188403][T29529] syz_tun: entered promiscuous mode [ 2425.225192][T29529] syz_tun: left promiscuous mode [ 2426.502531][T13780] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2426.832114][T13780] usb 5-1: Using ep0 maxpacket: 32 [ 2426.839199][T13780] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 2426.847863][T13780] usb 5-1: config 0 has no interface number 0 [ 2427.504263][T13780] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2427.638762][T13780] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2427.652920][T13780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.662107][T13780] usb 5-1: Product: syz [ 2427.666370][T13780] usb 5-1: Manufacturer: syz [ 2427.670999][T13780] usb 5-1: SerialNumber: syz [ 2427.682646][T13780] usb 5-1: config 0 descriptor?? [ 2427.688331][T29537] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2427.752281][T29568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6609'. [ 2427.968456][T29537] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2428.232715][T13780] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2428.292162][T13780] asix: probe of 5-1:0.188 failed with error -61 [ 2429.078206][T12791] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 2429.223383][T13780] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2429.413870][T13780] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2429.432076][T13780] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2429.446642][T13780] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2429.461640][T13780] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2429.482421][T13780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2429.497252][T13780] usb 4-1: Product: syz [ 2429.501910][T13780] usb 4-1: Manufacturer: syz [ 2429.508256][T13780] usb 4-1: SerialNumber: syz [ 2429.520652][T14563] usb 5-1: USB disconnect, device number 91 [ 2430.758741][T13780] cdc_ncm 4-1:1.0: bind() failure [ 2430.788038][T13780] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 2430.796913][T13780] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 2430.845859][T13780] usbtest: probe of 4-1:1.1 failed with error -71 [ 2431.048736][T13780] usb 4-1: USB disconnect, device number 89 [ 2431.315569][T29616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6626'. [ 2431.850778][T29628] (null): rxe_set_mtu: Set mtu to 1024 [ 2431.856496][T29628] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2432.936260][T29647] syz1: rxe_newlink: already configured on syz_tun [ 2433.705862][T29651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6640'. [ 2434.965855][T29669] (null): rxe_set_mtu: Set mtu to 1024 [ 2434.971536][T29669] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2435.382441][T13144] IPVS: starting estimator thread 0... [ 2435.472479][T29678] IPVS: using max 36 ests per chain, 86400 per kthread [ 2436.042371][T13144] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2436.255088][T13144] usb 1-1: config 0 has no interfaces? [ 2436.276992][T13144] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2436.288118][T29692] netlink: 65536 bytes leftover after parsing attributes in process `syz.5.6656'. [ 2436.302191][T13144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2436.358400][T13144] usb 1-1: config 0 descriptor?? [ 2437.037697][ T5851] usb 1-1: USB disconnect, device number 79 [ 2437.104144][T29700] (null): rxe_set_mtu: Set mtu to 1024 [ 2437.109822][T29700] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2437.858951][T29711] syz.5.6664 (29711): drop_caches: 3 [ 2437.972058][ T5851] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2438.179328][ T5851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2438.211310][ T5851] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2438.231612][ T5851] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2438.254566][ T5851] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2438.273592][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2438.292182][ T5851] usb 5-1: Product: syz [ 2438.296422][ T5851] usb 5-1: Manufacturer: syz [ 2438.301027][ T5851] usb 5-1: SerialNumber: syz [ 2438.393272][T12791] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 2438.797769][T29728] syzkaller0: entered promiscuous mode [ 2438.806563][T29728] syzkaller0: entered allmulticast mode [ 2438.923862][T29730] syz1: rxe_newlink: already configured on syz_tun [ 2439.364908][ T5851] cdc_ncm 5-1:1.0: bind() failure [ 2439.379784][ T5851] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 2439.397535][ T5851] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 2439.414824][ T5851] usbtest: probe of 5-1:1.1 failed with error -71 [ 2439.468607][ T5851] usb 5-1: USB disconnect, device number 92 [ 2440.304146][T29748] fuse: Bad value for 'fd' [ 2440.488916][T29752] syzkaller0: entered promiscuous mode [ 2440.495054][T29752] syzkaller0: entered allmulticast mode [ 2440.629610][T29754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6678'. [ 2440.750820][T29763] (null): rxe_set_mtu: Set mtu to 1024 [ 2440.848327][T29763] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2440.890760][T12791] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 2442.721096][T29785] syz.4.6688 (29785): drop_caches: 3 [ 2442.746739][T29787] syzkaller0: entered promiscuous mode [ 2442.756662][T29787] syzkaller0: entered allmulticast mode [ 2442.764835][T13144] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2442.976215][T29792] (null): rxe_set_mtu: Set mtu to 1024 [ 2442.979629][T13144] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2442.982069][T29792] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2443.135592][T13144] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2443.162089][T13144] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2443.257844][T13144] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2443.336515][T13144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2443.406168][T13144] usb 1-1: Product: syz [ 2443.424470][T13144] usb 1-1: Manufacturer: syz [ 2443.429312][T13144] usb 1-1: SerialNumber: syz [ 2444.942218][T24516] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2445.108096][T29817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6699'. [ 2445.137248][T24516] usb 4-1: config 0 has no interfaces? [ 2445.183669][T24516] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2445.203532][T13144] cdc_ncm 1-1:1.0: bind() failure [ 2445.223250][T13144] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 2445.236420][T13144] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 2445.253669][T13144] usbtest: probe of 1-1:1.1 failed with error -71 [ 2445.276576][T24516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2445.290587][T13144] usb 1-1: USB disconnect, device number 80 [ 2445.324121][T29804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6695'. [ 2445.355201][T24516] usb 4-1: config 0 descriptor?? [ 2446.073482][T13144] usb 4-1: USB disconnect, device number 90 [ 2446.332309][T29821] syzkaller0: entered promiscuous mode [ 2446.340220][T29821] syzkaller0: entered allmulticast mode [ 2447.072377][T29837] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6704'. [ 2447.492224][T13144] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2447.972288][T13144] usb 5-1: Using ep0 maxpacket: 32 [ 2447.995020][T13144] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2448.012794][T13144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2448.062009][T29852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6711'. [ 2448.113149][T13144] usb 5-1: config 0 descriptor?? [ 2448.370077][T13144] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2448.395083][T13144] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2448.432822][T13144] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2448.451920][T13144] usb 5-1: media controller created [ 2448.494588][T13144] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2448.688803][T29860] syzkaller0: entered promiscuous mode [ 2448.694717][T29860] syzkaller0: entered allmulticast mode [ 2448.930150][T29862] syzkaller0: entered promiscuous mode [ 2448.939438][T29862] syzkaller0: entered allmulticast mode [ 2449.432340][T13144] stb0899_attach: Driver disabled by Kconfig [ 2449.465403][T13144] az6027: no front-end attached [ 2449.465403][T13144] [ 2449.489988][T13144] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2449.502079][T24516] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2449.519578][T13144] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input61 [ 2449.570395][T13144] dvb-usb: schedule remote query interval to 400 msecs. [ 2449.593756][T13144] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2449.991213][T29882] netlink: 65536 bytes leftover after parsing attributes in process `syz.0.6721'. [ 2450.035153][T24516] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2450.057448][T24516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2450.102897][T24516] usb 4-1: config 0 descriptor?? [ 2450.160712][T13780] usb 5-1: USB disconnect, device number 93 [ 2450.242291][T13780] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2450.284782][T29886] fuse: Unknown parameter 'grou00000000000000000000' [ 2450.287282][T29887] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6722'. [ 2450.476311][T24516] [drm] vendor descriptor length:a data:02 5f 00 00 00 00 00 00 00 00 00 [ 2450.492047][T24516] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2450.789992][T29892] syzkaller0: entered promiscuous mode [ 2450.874636][T29892] syzkaller0: entered allmulticast mode [ 2451.129170][T29897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6727'. [ 2454.221480][T24516] [drm:udl_init] *ERROR* Selecting channel failed [ 2454.290289][T24516] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 2454.350579][T24516] [drm] Initialized udl on minor 2 [ 2454.388156][T24516] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2454.425781][T24516] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2454.453648][T13780] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2454.464239][T24516] usb 4-1: USB disconnect, device number 91 [ 2454.493152][T13780] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2454.500253][T29925] fuse: Unknown parameter 'grou00000000000000000000' [ 2454.681203][T29931] syzkaller0: entered promiscuous mode [ 2454.692200][T29931] syzkaller0: entered allmulticast mode [ 2455.888027][T29953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6742'. [ 2457.166723][T29973] fuse: Bad value for 'fd' [ 2457.833136][T29981] syzkaller0: entered promiscuous mode [ 2457.838611][T29981] syzkaller0: entered allmulticast mode [ 2458.223302][T29987] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2459.108045][T29999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6753'. [ 2459.757371][T30006] fuse: Bad value for 'fd' [ 2459.848418][T30008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6755'. [ 2460.472364][T14563] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2460.684691][T14563] usb 5-1: Using ep0 maxpacket: 32 [ 2460.708418][T14563] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2460.721068][T14563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2460.755511][T14563] usb 5-1: config 0 descriptor?? [ 2460.975617][T14563] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2460.984447][T14563] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2461.012886][T14563] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2461.024253][T14563] usb 5-1: media controller created [ 2461.046835][T14563] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2461.162070][T29114] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2461.181072][T14563] az6027: usb out operation failed. (-71) [ 2461.191779][T14563] az6027: usb out operation failed. (-71) [ 2461.201568][T14563] stb0899_attach: Driver disabled by Kconfig [ 2461.211686][T14563] az6027: no front-end attached [ 2461.211686][T14563] [ 2461.219966][T14563] az6027: usb out operation failed. (-71) [ 2461.229628][T14563] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2461.240463][T14563] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input62 [ 2461.273077][T14563] dvb-usb: schedule remote query interval to 400 msecs. [ 2461.280053][T14563] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2461.315407][T14563] usb 5-1: USB disconnect, device number 94 [ 2461.376384][T14563] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2461.380433][T29114] usb 1-1: config 0 has no interfaces? [ 2461.398761][T29114] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2461.427039][T29114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2461.452986][T29114] usb 1-1: config 0 descriptor?? [ 2462.128736][T13144] usb 1-1: USB disconnect, device number 81 [ 2462.535743][T30046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6769'. [ 2462.564292][T30046] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2463.185627][T30061] erspan0: entered promiscuous mode [ 2463.617905][T30071] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2464.282117][T24516] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2464.958495][T24516] usb 1-1: config 0 has no interfaces? [ 2464.964095][T24516] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2464.973685][T24516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2464.983932][T24516] usb 1-1: config 0 descriptor?? [ 2465.678941][T24516] usb 1-1: USB disconnect, device number 82 [ 2466.070818][T30106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6792'. [ 2466.154154][T30110] netlink: 'syz.5.6796': attribute type 29 has an invalid length. [ 2466.172470][T30110] netlink: 'syz.5.6796': attribute type 29 has an invalid length. [ 2466.683807][T30127] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 2467.626222][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.849280][T30141] use of bytesused == 0 is deprecated and will be removed in the future, [ 2467.865741][T30141] use the actual size instead. [ 2468.022089][T13144] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2468.221706][T13144] usb 5-1: config 0 has no interfaces? [ 2468.241405][T13144] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2468.275798][T13144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2468.317627][T13144] usb 5-1: config 0 descriptor?? [ 2468.997909][T13780] usb 5-1: USB disconnect, device number 95 [ 2470.732059][T13780] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2470.928140][T13780] usb 5-1: config 0 has no interfaces? [ 2470.939319][T13780] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2470.961898][T13780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2470.988462][T13780] usb 5-1: config 0 descriptor?? [ 2471.668488][T13144] usb 5-1: USB disconnect, device number 96 [ 2472.225773][T30209] binder: 30202:30209 ioctl 4018620d 0 returned -22 [ 2472.248214][T30209] binder: 30202:30209 ioctl c018620c 200000000380 returned -1 [ 2472.642258][T13780] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2472.804631][T30223] fuse: Bad value for 'user_id' [ 2472.842243][T13780] usb 5-1: Using ep0 maxpacket: 16 [ 2472.855274][T13780] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2472.872980][T13780] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2472.881068][T13780] usb 5-1: can't read configurations, error -71 [ 2472.963755][T30229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6839'. [ 2473.108763][T30235] program syz.0.6843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2473.532692][T30244] binder: 30240:30244 ioctl 4018620d 0 returned -22 [ 2473.580577][T30249] fuse: Bad value for 'user_id' [ 2473.598492][T30244] binder: 30240:30244 ioctl c018620c 200000000380 returned -1 [ 2475.339871][T30276] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.6858'. [ 2475.982041][T13780] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2476.217463][T13780] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2476.244224][T13780] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2476.258477][T13780] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2476.278875][T13780] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2476.294770][T13780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2476.349846][T13780] usb 5-1: Product: syz [ 2476.363196][T13780] usb 5-1: Manufacturer: syz [ 2476.372075][T29114] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2476.404102][T13780] usb 5-1: SerialNumber: syz [ 2476.600442][T29114] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 2476.611916][T29114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2476.626430][T29114] usb 4-1: Product: syz [ 2476.630745][T29114] usb 4-1: Manufacturer: syz [ 2476.638594][T29114] usb 4-1: SerialNumber: syz [ 2476.652012][T29114] usb 4-1: config 0 descriptor?? [ 2476.694045][T12791] Bluetooth: hci1: urb ffff8880645f9d00 submission failed (2) [ 2476.842087][T24516] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2476.916610][T30296] binder: 30284:30296 ioctl 4018620d 0 returned -22 [ 2476.924873][T30294] binder: 30284:30294 ioctl c018620c 200000000380 returned -1 [ 2477.010379][T30296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6862'. [ 2477.024172][T24516] usb 1-1: Using ep0 maxpacket: 32 [ 2477.099435][T24516] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2477.120190][T24516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2477.148129][T24516] usb 1-1: config 0 descriptor?? [ 2477.406176][T24516] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2477.441376][T24516] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2477.453605][T24516] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2477.463325][T24516] usb 1-1: media controller created [ 2477.494427][T24516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2477.504932][T13780] cdc_ncm 5-1:1.0: bind() failure [ 2477.520663][T13780] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 2477.527749][T13780] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 2477.552521][T13780] usbtest: probe of 5-1:1.1 failed with error -71 [ 2477.580797][T13780] usb 5-1: USB disconnect, device number 99 [ 2478.362239][T30307] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.6867'. [ 2479.070367][T24516] stb0899_attach: Driver disabled by Kconfig [ 2479.085642][T24516] az6027: no front-end attached [ 2479.085642][T24516] [ 2479.093992][T24516] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2479.114210][T24516] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input63 [ 2479.151577][T24516] dvb-usb: schedule remote query interval to 400 msecs. [ 2479.193052][T24516] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2479.204710][T14563] usb 4-1: USB disconnect, device number 92 [ 2479.353648][ T7915] usb 1-1: USB disconnect, device number 83 [ 2479.476634][ T7915] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2479.701692][T30322] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2479.727472][T30322] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2479.842906][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 2479.842919][ T27] audit: type=1326 audit(1765110827.901:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30328 comm="syz.5.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9138f749 code=0x7ffc0000 [ 2479.876778][ T27] audit: type=1326 audit(1765110827.911:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30328 comm="syz.5.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9138f749 code=0x7ffc0000 [ 2479.899458][ T27] audit: type=1326 audit(1765110827.911:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30328 comm="syz.5.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d9138f749 code=0x7ffc0000 [ 2479.943415][ T27] audit: type=1326 audit(1765110827.911:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30328 comm="syz.5.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9138f749 code=0x7ffc0000 [ 2479.968658][ T27] audit: type=1326 audit(1765110827.911:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30328 comm="syz.5.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9138f749 code=0x7ffc0000 [ 2479.996363][ T27] audit: type=1326 audit(1765110827.911:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30328 comm="syz.5.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7d9138f749 code=0x7ffc0000 [ 2480.019428][ T27] audit: type=1326 audit(1765110827.941:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30328 comm="syz.5.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9138f749 code=0x7ffc0000 [ 2480.053559][ T27] audit: type=1326 audit(1765110827.941:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30328 comm="syz.5.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9138f749 code=0x7ffc0000 [ 2480.122124][ T7915] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2480.127434][ T27] audit: type=1326 audit(1765110827.941:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30328 comm="syz.5.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7d9138f749 code=0x7ffc0000 [ 2480.153356][ T27] audit: type=1326 audit(1765110827.941:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30328 comm="syz.5.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d9138f749 code=0x7ffc0000 [ 2480.200357][T30334] binder: 30323:30334 ioctl 4018620d 0 returned -22 [ 2480.212186][T30334] binder: 30323:30334 ioctl c018620c 200000000380 returned -1 [ 2480.300782][T30339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6874'. [ 2480.423566][ T7915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2480.434820][ T7915] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2480.465842][ T7915] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2480.502498][ T7915] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2480.527209][ T7915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.535738][ T7915] usb 4-1: Product: syz [ 2480.539984][ T7915] usb 4-1: Manufacturer: syz [ 2480.560206][ T7915] usb 4-1: SerialNumber: syz [ 2481.606389][ T7915] cdc_ncm 4-1:1.0: bind() failure [ 2481.616685][ T7915] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 2481.624515][ T7915] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 2481.632442][ T7915] usbtest: probe of 4-1:1.1 failed with error -71 [ 2481.650506][ T7915] usb 4-1: USB disconnect, device number 93 [ 2481.921701][T30356] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2482.932067][ T7915] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2483.082130][T13144] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2483.237578][ T7915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2483.272418][ T7915] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2483.289378][T13144] usb 4-1: Using ep0 maxpacket: 32 [ 2483.295202][ T7915] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2483.325629][ T7915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2483.337291][ T7915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2483.349056][ T7915] usb 5-1: Product: syz [ 2483.358643][ T7915] usb 5-1: Manufacturer: syz [ 2483.367149][ T7915] usb 5-1: SerialNumber: syz [ 2483.458929][T30391] Cannot find map_set index 0 as target [ 2483.519162][T30391] QAT: Device 128 not found [ 2483.726872][T30403] fuse: Bad value for 'fd' [ 2484.119840][T30409] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.6904'. [ 2484.460460][ T7915] cdc_ncm 5-1:1.0: bind() failure [ 2484.679478][ T7915] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 2484.694794][ T7915] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 2484.726903][ T7915] usbtest: probe of 5-1:1.1 failed with error -71 [ 2484.737792][ T7915] usb 5-1: USB disconnect, device number 100 [ 2485.966843][T30425] fuse: Bad value for 'fd' [ 2486.141724][T13144] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2486.272973][T13144] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2486.281014][T13144] usb 4-1: can't read configurations, error -71 [ 2486.402726][T30438] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.6913'. [ 2487.234028][T30457] lo: Caught tx_queue_len zero misconfig [ 2487.523625][T30464] fuse: Bad value for 'fd' [ 2488.485365][T30481] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.6927'. [ 2489.411166][T30490] fuse: Invalid rootmode [ 2489.712215][T24516] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2489.932104][T24516] usb 5-1: Using ep0 maxpacket: 32 [ 2489.972995][T24516] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2490.002284][T24516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2490.031391][T24516] usb 5-1: config 0 descriptor?? [ 2490.602775][T24516] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2490.644228][T24516] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2490.668268][T24516] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2490.708440][T24516] usb 5-1: media controller created [ 2490.797693][T24516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2491.762124][T24516] stb0899_attach: Driver disabled by Kconfig [ 2491.776206][T24516] az6027: no front-end attached [ 2491.776206][T24516] [ 2491.793596][T24516] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2491.813177][T24516] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input64 [ 2491.886657][T24516] dvb-usb: schedule remote query interval to 400 msecs. [ 2491.905007][T24516] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2492.047810][T24516] usb 5-1: USB disconnect, device number 101 [ 2492.165770][T24516] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2492.338963][T30527] fuse: Invalid rootmode [ 2492.702259][T13780] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2492.884290][T13780] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2492.892466][T13780] usb 4-1: config 0 has no interface number 0 [ 2492.900414][T13780] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2492.909823][T13780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2492.917868][T13780] usb 4-1: Product: syz [ 2492.924239][T13780] usb 4-1: Manufacturer: syz [ 2492.928848][T13780] usb 4-1: SerialNumber: syz [ 2492.935360][T13780] usb 4-1: config 0 descriptor?? [ 2492.942116][T24516] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2493.092149][T24516] usb 5-1: device descriptor read/64, error -71 [ 2493.158342][T13780] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2493.187741][T13780] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2493.200092][T13780] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2493.214146][T13780] usb 4-1: media controller created [ 2493.247337][T13780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2493.362194][T24516] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2493.522114][T24516] usb 5-1: device descriptor read/64, error -71 [ 2493.653704][T24516] usb usb5-port1: attempt power cycle [ 2494.062668][T24516] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2494.122719][T24516] usb 5-1: device descriptor read/8, error -71 [ 2494.350940][T13780] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 2494.412519][T24516] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2494.461174][T24516] usb 5-1: device descriptor read/8, error -71 [ 2494.481163][T13780] usb 4-1: USB disconnect, device number 96 [ 2494.592677][T24516] usb usb5-port1: unable to enumerate USB device [ 2494.864462][T30561] fuse: Invalid rootmode [ 2495.242054][T24516] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2495.442050][T24516] usb 4-1: Using ep0 maxpacket: 32 [ 2495.479841][T24516] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2495.559033][T24516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.575523][T24516] usb 4-1: config 0 descriptor?? [ 2495.800173][T24516] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2495.809269][T24516] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2495.825490][T24516] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2495.833388][T24516] usb 4-1: media controller created [ 2495.853061][T24516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2496.584424][T13780] IPVS: starting estimator thread 0... [ 2496.672127][T30601] IPVS: using max 36 ests per chain, 86400 per kthread [ 2496.862029][T24516] stb0899_attach: Driver disabled by Kconfig [ 2496.876093][T24516] az6027: no front-end attached [ 2496.876093][T24516] [ 2496.929600][T24516] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2496.969544][T24516] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input65 [ 2497.024990][T24516] dvb-usb: schedule remote query interval to 400 msecs. [ 2497.045109][T24516] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2497.102263][T29114] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2497.178700][T24516] usb 4-1: USB disconnect, device number 97 [ 2497.254744][T24516] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2497.263353][T29114] usb 5-1: device descriptor read/64, error -71 [ 2497.532072][T29114] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2497.722388][T29114] usb 5-1: device descriptor read/64, error -71 [ 2497.853038][T29114] usb usb5-port1: attempt power cycle [ 2498.284027][T29114] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2498.416798][T29114] usb 5-1: device descriptor read/8, error -71 [ 2498.722085][T29114] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2498.837894][T29114] usb 5-1: device descriptor read/8, error -71 [ 2498.972188][T29114] usb usb5-port1: unable to enumerate USB device [ 2499.582554][T13144] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2499.787248][T13144] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2499.810236][T13144] usb 1-1: config 0 has no interface number 0 [ 2499.851289][T13144] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2499.861416][T13144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2499.869868][T13144] usb 1-1: Product: syz [ 2499.878644][T13144] usb 1-1: Manufacturer: syz [ 2499.885036][T13144] usb 1-1: SerialNumber: syz [ 2499.896576][T13144] usb 1-1: config 0 descriptor?? [ 2500.118868][T13144] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2500.140072][T13144] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2500.151460][T13144] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2500.159913][T13144] usb 1-1: media controller created [ 2500.182598][T13144] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2500.242210][T29114] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2500.442163][T29114] usb 5-1: Using ep0 maxpacket: 32 [ 2500.459885][T29114] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2500.480308][T29114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2500.503732][T29114] usb 5-1: config 0 descriptor?? [ 2500.730861][T29114] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2500.757480][T29114] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2500.770769][T29114] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2500.787216][T29114] usb 5-1: media controller created [ 2500.813706][T29114] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2501.310214][T13144] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 2501.380153][T13144] usb 1-1: USB disconnect, device number 84 [ 2501.812257][T29114] stb0899_attach: Driver disabled by Kconfig [ 2501.818353][T29114] az6027: no front-end attached [ 2501.818353][T29114] [ 2501.826622][T29114] az6027: usb out operation failed. (-71) [ 2501.832531][T29114] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2501.840675][T29114] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input66 [ 2501.858720][T29114] dvb-usb: schedule remote query interval to 400 msecs. [ 2501.865834][T29114] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2501.880006][T29114] usb 5-1: USB disconnect, device number 110 [ 2501.954043][T29114] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2502.076918][T30659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6987'. [ 2502.401585][T29114] IPVS: starting estimator thread 0... [ 2502.522090][T30665] IPVS: using max 36 ests per chain, 86400 per kthread [ 2502.820130][T30670] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.6990'. [ 2503.952127][T24516] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2504.060559][ T27] kauditd_printk_skb: 192 callbacks suppressed [ 2504.060573][ T27] audit: type=1326 audit(1765110852.121:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30677 comm="syz.3.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88daf8f749 code=0x7ffc0000 [ 2504.090417][ T27] audit: type=1326 audit(1765110852.121:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30677 comm="syz.3.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88daf8f749 code=0x7ffc0000 [ 2504.128973][ T27] audit: type=1326 audit(1765110852.121:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30677 comm="syz.3.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f88daf8f749 code=0x7ffc0000 [ 2504.151794][ T27] audit: type=1326 audit(1765110852.121:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30677 comm="syz.3.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88daf8f749 code=0x7ffc0000 [ 2504.175266][ T27] audit: type=1326 audit(1765110852.121:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30677 comm="syz.3.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88daf8f749 code=0x7ffc0000 [ 2504.198866][T24516] usb 5-1: Using ep0 maxpacket: 16 [ 2504.204309][ T27] audit: type=1326 audit(1765110852.121:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30677 comm="syz.3.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f88daf8f749 code=0x7ffc0000 [ 2504.237553][ T27] audit: type=1326 audit(1765110852.121:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30677 comm="syz.3.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88daf8f749 code=0x7ffc0000 [ 2504.277551][T24516] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2504.289477][T24516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2504.302722][T24516] usb 5-1: Product: syz [ 2504.307779][T24516] usb 5-1: Manufacturer: syz [ 2504.336179][T24516] usb 5-1: SerialNumber: syz [ 2504.357134][T30681] program syz.3.6993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2504.368711][T24516] r8152-cfgselector 5-1: config 0 descriptor?? [ 2504.377206][ T27] audit: type=1326 audit(1765110852.121:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30677 comm="syz.3.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88daf8f749 code=0x7ffc0000 [ 2504.444734][ T27] audit: type=1326 audit(1765110852.181:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30677 comm="syz.3.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88daf8f749 code=0x7ffc0000 [ 2504.476501][ T27] audit: type=1326 audit(1765110852.181:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30677 comm="syz.3.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88daf8f749 code=0x7ffc0000 [ 2505.562968][T24516] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2505.569420][T24516] r8152-cfgselector 5-1: bad CDC descriptors [ 2505.597163][T24516] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2505.618917][T24516] r8152-cfgselector 5-1: USB disconnect, device number 111 [ 2505.812620][T13780] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2506.042075][T13780] usb 1-1: Using ep0 maxpacket: 32 [ 2506.055574][T13780] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2506.077464][T13780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.105361][T13780] usb 1-1: config 0 descriptor?? [ 2506.358176][T13780] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2506.381525][T13780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2506.446080][T13780] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2506.485509][T13780] usb 1-1: media controller created [ 2506.585331][T13780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2507.300506][T30719] binder: 30715:30719 ioctl 4018620d 0 returned -22 [ 2507.413260][T30722] binder: 30715:30722 ioctl c018620c 200000000380 returned -1 [ 2507.643958][T13780] stb0899_attach: Driver disabled by Kconfig [ 2507.684668][T13780] az6027: no front-end attached [ 2507.684668][T13780] [ 2507.700663][T13780] az6027: usb out operation failed. (-71) [ 2507.713928][T13780] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2507.733107][T13780] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input67 [ 2507.772861][T13780] dvb-usb: schedule remote query interval to 400 msecs. [ 2507.792298][T13780] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2507.831862][T13780] usb 1-1: USB disconnect, device number 85 [ 2507.913807][T13780] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2511.381293][T30743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7007'. [ 2511.492490][ T7915] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2511.648814][T30758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7012'. [ 2511.702703][ T7915] usb 5-1: Using ep0 maxpacket: 32 [ 2511.743678][ T7915] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2511.832295][ T7915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2511.874275][ T7915] usb 5-1: config 0 descriptor?? [ 2512.093396][ T7915] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2512.130360][ T7915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2512.181131][ T7915] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2512.190096][ T7915] usb 5-1: media controller created [ 2512.213615][ T7915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2512.376912][T30763] binder: 30759:30763 ioctl 4018620d 0 returned -22 [ 2512.398726][T30763] binder: 30759:30763 ioctl c018620c 200000000380 returned -1 [ 2513.748468][ T7915] stb0899_attach: Driver disabled by Kconfig [ 2513.757664][ T7915] az6027: no front-end attached [ 2513.757664][ T7915] [ 2513.772325][ T7915] az6027: usb out operation failed. (-71) [ 2513.779048][ T7915] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2513.794052][ T7915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input68 [ 2513.808946][ T7915] dvb-usb: schedule remote query interval to 400 msecs. [ 2513.852096][ T7915] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2513.924362][ T7915] usb 5-1: USB disconnect, device number 112 [ 2514.103725][ T7915] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2514.696069][T30796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7023'. [ 2518.844825][T30832] binder: 30823:30832 ioctl 4018620d 0 returned -22 [ 2518.932729][T30838] binder: 30823:30838 ioctl c018620c 200000000380 returned -1 [ 2520.252106][ T5809] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2521.172392][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 2521.230316][T30868] veth0_to_team: entered promiscuous mode [ 2521.300657][T30854] SET target dimension over the limit! [ 2521.342185][ T7915] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2521.671689][ T7915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2521.684038][ T7915] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2521.705116][ T7915] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2522.302474][ T7915] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2522.469639][ T7915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2522.603368][ T7915] usb 4-1: Product: syz [ 2522.660752][ T7915] usb 4-1: Manufacturer: syz [ 2522.704336][ T7915] usb 4-1: SerialNumber: syz [ 2523.502757][ T5809] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2523.523919][ T5809] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2523.549116][ T5809] usb 5-1: can't read configurations, error -71 [ 2523.744042][ T7915] cdc_ncm 4-1:1.0: bind() failure [ 2523.765019][ T7915] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 2523.785188][ T7915] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 2523.816324][ T7915] usbtest: probe of 4-1:1.1 failed with error -71 [ 2523.827845][ T7915] usb 4-1: USB disconnect, device number 98 [ 2524.943693][T12791] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 2527.152502][ T5809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2529.163057][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.812283][ T5809] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2530.152258][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 2530.184270][ T5809] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2530.376539][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2530.412681][ T5809] usb 4-1: config 0 descriptor?? [ 2530.785119][ T5809] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2530.880497][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2531.295233][ T5809] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2531.391494][ T5809] usb 4-1: media controller created [ 2531.513280][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2532.297491][ T5809] stb0899_attach: Driver disabled by Kconfig [ 2532.304282][ T5809] az6027: no front-end attached [ 2532.304282][ T5809] [ 2532.311688][ T5809] az6027: usb out operation failed. (-71) [ 2532.318583][ T5809] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2532.327865][ T5809] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input69 [ 2532.349045][ T5809] dvb-usb: schedule remote query interval to 400 msecs. [ 2532.358987][ T5809] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2532.374193][ T5809] usb 4-1: USB disconnect, device number 99 [ 2532.465659][ T5809] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2533.221735][T12791] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 2533.820100][T30981] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7071'. [ 2534.663913][T30998] SET target dimension over the limit! [ 2537.046830][T31024] fuse: Unknown parameter '0x0000000000000003' [ 2540.725761][T31057] fuse: Unknown parameter '0x0000000000000003' [ 2541.048879][T31070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7099'. [ 2541.114795][T31073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7099'. [ 2541.745961][T31083] fuse: Unknown parameter '0x0000000000000003' [ 2542.613682][T31107] binder: 31095:31107 ioctl 4018620d 0 returned -22 [ 2542.625571][T31107] binder: 31095:31107 ioctl c018620c 200000000380 returned -1 [ 2542.727764][T12791] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 2543.045951][T31115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7114'. [ 2543.205796][T31115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7114'. [ 2544.407125][T29114] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2544.592334][T29114] usb 4-1: Using ep0 maxpacket: 32 [ 2544.610170][T29114] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2544.623268][T29114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.653349][T29114] usb 4-1: config 0 descriptor?? [ 2544.887015][T29114] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2544.908214][T29114] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2544.933176][T29114] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2544.959706][T29114] usb 4-1: media controller created [ 2545.017801][T29114] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2545.446468][T31162] binder: 31156:31162 ioctl 4018620d 0 returned -22 [ 2545.458913][T31162] binder: 31156:31162 ioctl c018620c 200000000380 returned -1 [ 2545.534275][T31160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7128'. [ 2545.962119][T29114] stb0899_attach: Driver disabled by Kconfig [ 2545.993576][T29114] az6027: no front-end attached [ 2545.993576][T29114] [ 2546.003966][T29114] az6027: usb out operation failed. (-71) [ 2546.010855][T29114] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2546.050079][T29114] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input70 [ 2546.127099][T29114] dvb-usb: schedule remote query interval to 400 msecs. [ 2546.156406][T29114] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2546.202790][T29114] usb 4-1: USB disconnect, device number 100 [ 2546.278114][T31172] netlink: 65536 bytes leftover after parsing attributes in process `syz.0.7130'. [ 2546.295262][T29114] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2549.748163][T31188] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7135'. [ 2549.912190][T24516] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2550.132232][T24516] usb 4-1: Using ep0 maxpacket: 32 [ 2550.141696][T24516] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2550.169332][T24516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2550.201889][T24516] usb 4-1: config 0 descriptor?? [ 2550.432354][ T7915] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2550.446446][T24516] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2550.456357][T24516] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2550.467728][T24516] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2550.474985][T24516] usb 4-1: media controller created [ 2550.492264][T24516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2550.585422][T31225] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.7148'. [ 2551.161409][ T7915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2551.188631][ T7915] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2551.216631][ T7915] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2551.248647][ T7915] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2551.271128][ T7915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2551.280923][ T7915] usb 1-1: Product: syz [ 2551.290408][ T7915] usb 1-1: Manufacturer: syz [ 2551.296395][ T7915] usb 1-1: SerialNumber: syz [ 2551.680730][T24516] stb0899_attach: Driver disabled by Kconfig [ 2551.687607][T24516] az6027: no front-end attached [ 2551.687607][T24516] [ 2551.699989][T24516] az6027: usb out operation failed. (-71) [ 2551.706176][T24516] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2551.724434][T24516] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input71 [ 2551.781579][T24516] dvb-usb: schedule remote query interval to 400 msecs. [ 2551.797295][T24516] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2551.820891][T24516] usb 4-1: USB disconnect, device number 101 [ 2551.962971][T24516] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2552.349754][ T7915] cdc_ncm 1-1:1.0: bind() failure [ 2552.424012][ T7915] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 2552.442107][ T7915] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 2552.474751][ T7915] usbtest: probe of 1-1:1.1 failed with error -71 [ 2552.515017][ T7915] usb 1-1: USB disconnect, device number 86 [ 2553.342417][T12791] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 2553.606145][T31251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7158'. [ 2553.718825][T31253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7158'. [ 2554.614580][T31231] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7149'. [ 2555.099209][T31268] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7161'. [ 2555.371210][T31269] fuse: Bad value for 'fd' [ 2556.402299][T31294] binder: 31279:31294 ioctl 4018620d 0 returned -22 [ 2556.823996][T31303] binder: 31279:31303 ioctl c018620c 200000000380 returned -1 [ 2556.878983][T31294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7167'. [ 2556.933638][T12791] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 2557.613889][T31311] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7175'. [ 2559.662105][ T5851] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2559.882388][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 2559.896774][ T5851] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2559.908674][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2559.925023][ T5851] usb 4-1: config 0 descriptor?? [ 2559.956832][T31351] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7187'. [ 2560.164238][ T5851] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2560.201281][ T5851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2560.236072][ T5851] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2560.271253][ T5851] usb 4-1: media controller created [ 2560.368602][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2560.886593][T31363] binder: 31355:31363 ioctl 4018620d 0 returned -22 [ 2560.912287][T31363] binder: 31355:31363 ioctl c018620c 200000000380 returned -1 [ 2560.934342][T31363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7190'. [ 2561.647505][ T5851] stb0899_attach: Driver disabled by Kconfig [ 2561.678338][ T5851] az6027: no front-end attached [ 2561.678338][ T5851] [ 2561.996074][ T5851] az6027: usb out operation failed. (-71) [ 2562.001841][ T5851] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2562.020004][ T5851] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input72 [ 2562.114982][ T5851] dvb-usb: schedule remote query interval to 400 msecs. [ 2562.133566][ T5851] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2562.157474][ T5851] usb 4-1: USB disconnect, device number 102 [ 2562.268753][ T5851] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2562.654076][T31380] netlink: 65536 bytes leftover after parsing attributes in process `syz.4.7197'. [ 2563.643841][T31409] binder: 31403:31409 ioctl 4018620d 0 returned -22 [ 2563.823687][T31413] netlink: 65536 bytes leftover after parsing attributes in process `syz.0.7210'. [ 2564.662714][T14564] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2564.733272][ T7915] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2564.853012][T14564] usb 1-1: Using ep0 maxpacket: 32 [ 2564.889821][T31421] SET target dimension over the limit! [ 2564.899578][T31421] QAT: Device 128 not found [ 2564.926928][ T7915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2564.940079][ T7915] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2564.981607][ T7915] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2565.078873][ T7915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2565.126943][ T7915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.156059][ T7915] usb 5-1: Product: syz [ 2565.173773][ T7915] usb 5-1: Manufacturer: syz [ 2565.187565][ T7915] usb 5-1: SerialNumber: syz [ 2566.263132][ T7915] cdc_ncm 5-1:1.0: bind() failure [ 2566.363122][ T7915] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 2566.408289][ T7915] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 2566.496173][ T7915] usbtest: probe of 5-1:1.1 failed with error -71 [ 2566.558206][ T7915] usb 5-1: USB disconnect, device number 115 [ 2566.717665][T31451] binder: 31444:31451 ioctl 4018620d 0 returned -22 [ 2566.731310][T31451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7222'. [ 2567.556741][T31462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7228'. [ 2567.631628][T31466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7228'. [ 2567.917815][T14564] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2567.943996][T14564] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2567.956079][T14564] usb 1-1: can't read configurations, error -71 [ 2569.004321][T31496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7240'. [ 2569.032285][T29114] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2569.231107][T29114] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2569.238785][T29114] usb 5-1: can't read configurations, error -61 [ 2569.244922][T12791] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 2569.393438][T29114] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2569.585295][T29114] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2569.593001][T29114] usb 5-1: can't read configurations, error -61 [ 2569.599650][T29114] usb usb5-port1: attempt power cycle [ 2570.052817][T29114] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2570.116112][T29114] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2570.133693][T29114] usb 5-1: can't read configurations, error -61 [ 2570.212861][T24516] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2570.292272][T29114] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2570.438069][T29114] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2570.452032][T24516] usb 4-1: Using ep0 maxpacket: 32 [ 2570.545851][T29114] usb 5-1: can't read configurations, error -61 [ 2570.567177][T29114] usb usb5-port1: unable to enumerate USB device [ 2570.615645][T31504] SET target dimension over the limit! [ 2571.169459][T31524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2571.192980][T31524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2571.207102][T31524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2571.221277][T31524] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2571.230723][T31524] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2571.238062][T31524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2572.548423][ T9359] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2572.722243][ T9359] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2572.872280][ T9359] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2572.996054][ T9359] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2573.043964][T31522] chnl_net:caif_netlink_parms(): no params data found [ 2573.069950][T31549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7251'. [ 2573.147680][T24516] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2573.156585][T24516] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2573.166716][T24516] usb 4-1: can't read configurations, error -71 [ 2573.244802][T31522] bridge0: port 1(bridge_slave_0) entered blocking state [ 2573.261398][T31522] bridge0: port 1(bridge_slave_0) entered disabled state [ 2573.278147][T31522] bridge_slave_0: entered allmulticast mode [ 2573.288219][T31522] bridge_slave_0: entered promiscuous mode [ 2573.340546][T31522] bridge0: port 2(bridge_slave_1) entered blocking state [ 2573.350601][T31522] bridge0: port 2(bridge_slave_1) entered disabled state [ 2573.358066][T31522] bridge_slave_1: entered allmulticast mode [ 2573.365696][T31522] bridge_slave_1: entered promiscuous mode [ 2573.382406][T12791] Bluetooth: hci1: command tx timeout [ 2573.417936][T31522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2573.433462][T31522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2573.520190][T31522] team0: Port device team_slave_0 added [ 2573.599734][T31522] team0: Port device team_slave_1 added [ 2573.701638][T31522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2573.736548][T31522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2573.772648][T31522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2573.795834][T31522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2573.804863][T31522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2573.830801][ C1] vkms_vblank_simulate: vblank timer overrun [ 2573.837991][T31522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2573.932458][T22648] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2574.146887][T22648] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2574.188250][T22648] usb 5-1: can't read configurations, error -61 [ 2574.278312][T31522] hsr_slave_0: entered promiscuous mode [ 2574.289327][T31522] hsr_slave_1: entered promiscuous mode [ 2574.297501][T31522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2574.306395][T31522] Cannot create hsr debugfs directory [ 2574.542451][T22648] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2574.692375][T31594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7258'. [ 2574.789221][T22648] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2574.858006][T22648] usb 5-1: can't read configurations, error -61 [ 2574.923894][T22648] usb usb5-port1: attempt power cycle [ 2575.233068][T31522] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2575.300321][T31522] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2575.336312][T31522] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2575.352474][T22648] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2575.385312][T31522] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2575.417123][T22648] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2575.465719][T22648] usb 5-1: can't read configurations, error -61 [ 2575.472314][T12791] Bluetooth: hci1: command tx timeout [ 2575.633477][T22648] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2575.758485][T22648] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2575.778041][T22648] usb 5-1: can't read configurations, error -61 [ 2575.816125][T22648] usb usb5-port1: unable to enumerate USB device [ 2575.870575][ T9359] hsr_slave_0: left promiscuous mode [ 2575.922214][ T9359] hsr_slave_1: left promiscuous mode [ 2575.959496][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2575.977328][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2576.002067][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2576.032064][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2576.069842][ T9359] veth1_macvtap: left promiscuous mode [ 2576.092359][ T9359] veth0_macvtap: left promiscuous mode [ 2576.102419][ T9359] veth1_vlan: left promiscuous mode [ 2576.107888][ T9359] veth0_vlan: left promiscuous mode [ 2576.733568][T24516] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2576.932131][T24516] usb 4-1: Using ep0 maxpacket: 32 [ 2576.965873][T31627] SET target dimension over the limit! [ 2577.553572][T12791] Bluetooth: hci1: command tx timeout [ 2577.843744][ T9359] team0 (unregistering): Port device team_slave_1 removed [ 2577.910774][ T9359] team0 (unregistering): Port device team_slave_0 removed [ 2577.982789][ T9359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2578.047480][ T9359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2578.807123][ T9359] bond0 (unregistering): Released all slaves [ 2578.896405][T31522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2579.073730][T31522] 8021q: adding VLAN 0 to HW filter on device team0 [ 2579.115464][T25699] bridge0: port 1(bridge_slave_0) entered blocking state [ 2579.122604][T25699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2579.172972][T24476] bridge0: port 2(bridge_slave_1) entered blocking state [ 2579.180116][T24476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2579.606040][ T9359] IPVS: stop unused estimator thread 0... [ 2579.632599][T12791] Bluetooth: hci1: command tx timeout [ 2579.850613][T31522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2579.939303][T31522] veth0_vlan: entered promiscuous mode [ 2579.961823][T31522] veth1_vlan: entered promiscuous mode [ 2579.988938][T31522] veth0_macvtap: entered promiscuous mode [ 2580.000742][T31522] veth1_macvtap: entered promiscuous mode [ 2580.019926][T31522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2580.036814][T31522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2580.049813][T31522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2580.069163][T31522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2580.081377][T31522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2580.094762][T31522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2580.109005][T31522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2580.122465][T31522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2580.136950][T31522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2580.151073][T31522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2580.167196][T31522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2580.178539][T31522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2580.194163][T31522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2580.205556][T31522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2580.219471][T31522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2580.231080][T31522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2580.249192][T31522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2580.261630][T31522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2580.279172][T31522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2580.293616][T31522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2580.305483][T31522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2580.316967][T31522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2580.465632][T12813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2580.485045][T12813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2580.528248][T25024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2580.538974][T25024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2580.687277][T24516] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2580.695992][T24516] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2580.706970][T24516] usb 4-1: can't read configurations, error -71 [ 2582.363389][T31706] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7277'. [ 2582.902175][T24516] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2583.232275][T24516] usb 4-1: Using ep0 maxpacket: 32 [ 2583.299140][T31713] SET target dimension over the limit! [ 2584.133322][T31735] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.7285'. [ 2586.748280][T24516] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2586.782648][T24516] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2586.842471][T24516] usb 4-1: can't read configurations, error -71 [ 2587.359663][T31777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7293'. [ 2587.931438][T31786] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.7295'. [ 2590.372152][T24516] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2590.507207][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.642622][T24516] usb 5-1: Using ep0 maxpacket: 32 [ 2590.726635][T31807] SET target dimension over the limit! [ 2590.982233][ T5809] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2591.144820][T31822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7302'. [ 2591.254287][ T5809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2591.298601][ T5809] usb 1-1: can't read configurations, error -61 [ 2591.463155][T31524] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2591.475236][T31524] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2591.483182][ T5809] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2591.502900][T31524] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2591.543381][T31524] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2591.552401][T31524] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2591.559876][T31524] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2591.675085][ T5809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2591.705169][ T5809] usb 1-1: can't read configurations, error -61 [ 2591.732388][ T5809] usb usb1-port1: attempt power cycle [ 2591.897039][T22976] infiniband syz1: set down [ 2592.078252][T13780] infiniband syz1: ib_query_port failed (-19) [ 2592.122346][ T9359] smc: removing ib device syz1 [ 2592.152088][ T5809] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2592.326295][ T5809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2592.382378][ T5809] usb 1-1: can't read configurations, error -61 [ 2592.558762][ T5809] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2592.721172][ T5809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2592.757471][ T5809] usb 1-1: can't read configurations, error -61 [ 2592.776609][ T5809] usb usb1-port1: unable to enumerate USB device [ 2593.427975][T31824] chnl_net:caif_netlink_parms(): no params data found [ 2593.622492][T12791] Bluetooth: hci3: command tx timeout [ 2593.648709][T24516] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2594.346250][T24516] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2594.362699][T24516] usb 5-1: can't read configurations, error -71 [ 2594.579138][T31842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7308'. [ 2594.732222][ T9359] ------------[ cut here ]------------ [ 2594.738051][ T9359] GID entry ref leak for dev syz1 index 2 ref=9 [ 2594.746768][ T9359] WARNING: CPU: 1 PID: 9359 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x30f/0x490 [ 2594.758342][ T9359] Modules linked in: [ 2594.762385][ T9359] CPU: 1 PID: 9359 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 2594.769942][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2594.780372][ T9359] Workqueue: ib-unreg-wq ib_unregister_work [ 2594.786702][ T9359] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 2594.792897][ T9359] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 20 11 86 8b 48 8b 74 24 20 44 89 fa e8 91 b5 af f9 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 2594.812489][ C1] vkms_vblank_simulate: vblank timer overrun [ 2594.818711][ T9359] RSP: 0018:ffffc90004defa68 EFLAGS: 00010246 [ 2594.824784][ T9359] RAX: 73db9c7a331a0200 RBX: ffff888076af34d8 RCX: ffff88802b968000 [ 2594.832808][ T9359] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2594.840778][ T9359] RBP: 1ffff1100ed5e680 R08: ffffc90004def667 R09: 1ffff920009bdecc [ 2594.849027][ T9359] R10: dffffc0000000000 R11: fffff520009bdecd R12: 1ffff1100ed5e69b [ 2594.857209][ T9359] R13: ffff888076af3400 R14: ffff88805cf3da00 R15: 0000000000000002 [ 2594.865236][ T9359] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2594.874469][ T9359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2594.881093][ T9359] CR2: 0000200000063030 CR3: 000000002458d000 CR4: 00000000003526e0 [ 2594.889128][ T9359] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2594.897324][ T9359] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2594.905801][ T9359] Call Trace: [ 2594.909095][ T9359] [ 2594.912119][ T9359] ib_device_release+0xd2/0x1b0 [ 2594.916990][ T9359] ? ib_device_uevent+0xa0/0xa0 [ 2594.921865][ T9359] device_release+0x96/0x1c0 [ 2594.926974][ T9359] kobject_put+0x221/0x470 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2594.931449][ T9359] ? process_scheduled_works+0x957/0x15b0 [ 2594.937479][ T9359] process_scheduled_works+0xa45/0x15b0 [ 2594.943117][ T9359] ? assign_work+0x400/0x400 [ 2594.947752][ T9359] ? assign_work+0x39e/0x400 [ 2594.952382][ T9359] worker_thread+0xa55/0xfc0 [ 2594.957170][ T9359] kthread+0x2fa/0x390 [ 2594.961281][ T9359] ? pr_cont_work+0x560/0x560 [ 2594.966228][ T9359] ? kthread_blkcg+0xd0/0xd0 [ 2594.971445][ T9359] ret_from_fork+0x48/0x80 [ 2594.975952][ T9359] ? kthread_blkcg+0xd0/0xd0 [ 2594.980585][ T9359] ret_from_fork_asm+0x11/0x20 [ 2594.986438][ T9359] [ 2594.989471][ T9359] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2594.996760][ T9359] CPU: 1 PID: 9359 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 2595.004303][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2595.014363][ T9359] Workqueue: ib-unreg-wq ib_unregister_work [ 2595.020269][ T9359] Call Trace: [ 2595.023551][ T9359] [ 2595.026483][ T9359] dump_stack_lvl+0x16c/0x230 [ 2595.031169][ T9359] ? show_regs_print_info+0x20/0x20 [ 2595.036358][ T9359] ? load_image+0x3b0/0x3b0 [ 2595.040851][ T9359] panic+0x2c0/0x710 [ 2595.044733][ T9359] ? bpf_jit_dump+0xd0/0xd0 [ 2595.049223][ T9359] ? ret_from_fork_asm+0x11/0x20 [ 2595.054151][ T9359] __warn+0x2e0/0x470 [ 2595.058122][ T9359] ? gid_table_release_one+0x30f/0x490 [ 2595.063586][ T9359] ? gid_table_release_one+0x30f/0x490 [ 2595.069030][ T9359] report_bug+0x2be/0x4f0 [ 2595.073345][ T9359] ? gid_table_release_one+0x30f/0x490 [ 2595.078792][ T9359] ? gid_table_release_one+0x30f/0x490 [ 2595.084242][ T9359] ? gid_table_release_one+0x311/0x490 [ 2595.089688][ T9359] handle_bug+0xcf/0x120 [ 2595.093915][ T9359] exc_invalid_op+0x1a/0x50 [ 2595.098402][ T9359] asm_exc_invalid_op+0x1a/0x20 [ 2595.103237][ T9359] RIP: 0010:gid_table_release_one+0x30f/0x490 [ 2595.109292][ T9359] Code: 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 3c 41 8b 0e 48 c7 c7 20 11 86 8b 48 8b 74 24 20 44 89 fa e8 91 b5 af f9 <0f> 0b e9 14 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 2595.128883][ T9359] RSP: 0018:ffffc90004defa68 EFLAGS: 00010246 [ 2595.134935][ T9359] RAX: 73db9c7a331a0200 RBX: ffff888076af34d8 RCX: ffff88802b968000 [ 2595.142892][ T9359] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2595.150844][ T9359] RBP: 1ffff1100ed5e680 R08: ffffc90004def667 R09: 1ffff920009bdecc [ 2595.158798][ T9359] R10: dffffc0000000000 R11: fffff520009bdecd R12: 1ffff1100ed5e69b [ 2595.166755][ T9359] R13: ffff888076af3400 R14: ffff88805cf3da00 R15: 0000000000000002 [ 2595.174742][ T9359] ? gid_table_release_one+0x30f/0x490 [ 2595.180216][ T9359] ib_device_release+0xd2/0x1b0 [ 2595.185067][ T9359] ? ib_device_uevent+0xa0/0xa0 [ 2595.189904][ T9359] device_release+0x96/0x1c0 [ 2595.194480][ T9359] kobject_put+0x221/0x470 [ 2595.198896][ T9359] ? process_scheduled_works+0x957/0x15b0 [ 2595.204603][ T9359] process_scheduled_works+0xa45/0x15b0 [ 2595.210153][ T9359] ? assign_work+0x400/0x400 [ 2595.214735][ T9359] ? assign_work+0x39e/0x400 [ 2595.219315][ T9359] worker_thread+0xa55/0xfc0 [ 2595.223909][ T9359] kthread+0x2fa/0x390 [ 2595.227970][ T9359] ? pr_cont_work+0x560/0x560 [ 2595.232635][ T9359] ? kthread_blkcg+0xd0/0xd0 [ 2595.237210][ T9359] ret_from_fork+0x48/0x80 [ 2595.241611][ T9359] ? kthread_blkcg+0xd0/0xd0 [ 2595.246186][ T9359] ret_from_fork_asm+0x11/0x20 [ 2595.250946][ T9359] [ 2595.254200][ T9359] Kernel Offset: disabled [ 2595.258605][ T9359] Rebooting in 86400 seconds..