last executing test programs: 12m40.640135826s ago: executing program 4 (id=738): socket$packet(0x11, 0x2, 0x300) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528"], 0x200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0xe8}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e", 0x75}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc41879", 0x2c}, {&(0x7f0000000a80)}], 0x5, 0x4d9e, 0x8) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0xaaaaaaaaaaaab0d, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 12m39.900242481s ago: executing program 4 (id=741): syz_usb_connect$uac3(0x3, 0x98, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) tkill(0x0, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x80140, 0xea757e1739bf98c7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000500)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @broadcast, @void, {@generic={0x892f}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) 12m39.387718543s ago: executing program 4 (id=744): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0x2f, [0x7fefffff, 0xffffffff, 0x3, 0x1, 0x3, 0x5, 0x7, 0x0, 0xa4d, 0x0, 0x7, 0x4, 0xe, 0x4, 0x5, 0x2, 0xa0, 0x10001, 0xb, 0xc2, 0x0, 0x6, 0x7, 0xa4, 0xffff, 0x2a, 0x4, 0x5, 0x5, 0x6, 0x0, 0x0, 0xfffffffd, 0x3, 0x4, 0xcb, 0x401, 0x8000, 0x7fff, 0x9, 0x80000001, 0xd, 0x4, 0xffffffff, 0x28b5, 0xfffffffa, 0x2, 0xfffffffe, 0x6, 0x7, 0xff, 0x3, 0x8, 0x1, 0x100, 0x8, 0x4, 0xa0, 0x3335a578, 0x800, 0x6, 0x0, 0xff, 0x4, 0x400, 0x3, 0x5, 0x10, 0x90, 0x7, 0x38, 0xffff0000, 0xfffffffe, 0x6, 0x8, 0x2, 0x3, 0xfff, 0x2, 0x4, 0x2, 0x3, 0x9, 0x5, 0x2, 0xc55b, 0xc, 0x62, 0x8, 0xfffffff8, 0x3, 0x4, 0x4, 0x583, 0xef5, 0x0, 0x0, 0x1, 0x8, 0x0, 0xfffffffc, 0x1000, 0x3, 0xfff, 0x7, 0x3, 0x9, 0x9, 0x8, 0x1, 0x2, 0x7, 0xd, 0x7ff, 0x0, 0x0, 0x0, 0xb53, 0x7fffffff, 0x1, 0x5, 0x3, 0x101, 0x2, 0xe17, 0x5]}}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12m39.08398275s ago: executing program 4 (id=746): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 12m37.839601541s ago: executing program 4 (id=751): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = dup(r2) read(r3, &(0x7f0000000140)=""/113, 0x71) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATFS(r3, &(0x7f00000001c0)={0x43, 0x9, 0x1, {0x4b0, 0xa3, 0x4, 0x8000000000000001, 0xb6, 0x0, 0x1, 0x401, 0x7fff}}, 0x43) 12m37.438417427s ago: executing program 4 (id=753): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0aca6020"], 0xd) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r1 = socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000008c0)='\x00', 0x89901) fchdir(r3) close(r3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x4001, 0x0, 0x13}, 0x18) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x4f}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1000}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030f0000000000000000070000000400028026cfe65f2a8b22caa086444058ce969fa12535594dcbdd178f77bb1377ed7ec385ca18e8ae0a10b5e7bc193366b77a0ef6d8c6aadc0f26d373c85868324e4eb40cc1e3672e7296ccaaef1523205f2f2a86be0bc94901789f4a568a298a051998640f"], 0x18}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000540)={0x0, 0xffffffffffffff79, &(0x7f0000000000)={&(0x7f00000025c0)={0x14, r8, 0x301, 0x70bd29, 0x25dfdbff, {0x24}}, 0x6a}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES64=r0], 0x927560ec6e4b44f0) 12m36.450845337s ago: executing program 32 (id=753): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0aca6020"], 0xd) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r1 = socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000008c0)='\x00', 0x89901) fchdir(r3) close(r3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x4001, 0x0, 0x13}, 0x18) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x4f}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1000}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030f0000000000000000070000000400028026cfe65f2a8b22caa086444058ce969fa12535594dcbdd178f77bb1377ed7ec385ca18e8ae0a10b5e7bc193366b77a0ef6d8c6aadc0f26d373c85868324e4eb40cc1e3672e7296ccaaef1523205f2f2a86be0bc94901789f4a568a298a051998640f"], 0x18}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000540)={0x0, 0xffffffffffffff79, &(0x7f0000000000)={&(0x7f00000025c0)={0x14, r8, 0x301, 0x70bd29, 0x25dfdbff, {0x24}}, 0x6a}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES64=r0], 0x927560ec6e4b44f0) 12.69397226s ago: executing program 1 (id=3026): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "2ffc721bedcf4bf0786d492afeb1d73d8cc3698bdf353cf7ab8e19a994f1a8577bdfd0b0cdc22981e5a757496da21cda509c162b7fa8b63bc4046fcd5662210b49478ff1a4588f3ec2941a5c8cbdbb98bfa733512cb0b8c2e49d68d90b7d9431f6e3e046810dc37a686b3aff563ef79a8feadea09407ecfb126830d25f4f7c5fd2113c21b735d14e9dbba547471f48886a0edafe97162e2ef560e24ab9f1032a05c7b2454c01f3c23951d73c10b7088c2cd74644a2b9d5cb9e8b1166e3bcc8bbeca99e73a0be0b9dd8b42dd6fb2fe523331cd313e116b40fa310e055644faaf856172f42ad46fef4838bba4cbf8a3ce142184a0ab21970dd9629aeec5706a52b"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfff, 0x3ff, 0x3, 0x19, 0x6, 0x1f, 0x2}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 9.859301919s ago: executing program 3 (id=3034): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = io_uring_setup(0x25e, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x1b, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7d2ccc1a8cedb015}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9.796570345s ago: executing program 1 (id=3035): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r2, 0x2141}, {r2, 0x1}], 0x2, 0x8000004) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c000380040005"], 0x20}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004400090000000000000000000500000008000200", @ANYRES32=r1, @ANYBLOB="ca20419e9287a26425a3486c7d5c56d9a49e036c611573cbe4ed30384af023a533c889458b311204cd89dc21eae6569404bcfb2a41a5983f487cbbf5aea686925bd96a79d6211f51a403f7aaed329bb6591f038bc33b6279270e1228dd070a9e5b4bebfce822a49c1fe3302c59bb1c88306052d48f3a5617e33c0dd5e71e805973bc70e0b896a6484ddae36ba04b3f176bacace18938310680947990d515cb164bff4e2667e5f1854b99c90ac73805e140b441"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) socket$nl_audit(0x10, 0x3, 0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000004c0)=[{&(0x7f0000000340)="a0", 0x1}], 0x2be, 0x4) 8.955809147s ago: executing program 5 (id=3037): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0aca6020"], 0xd) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r1 = socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000008c0)='\x00', 0x89901) fchdir(r3) close(r3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x4001, 0x0, 0x13}, 0x18) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x4f}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1000}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030f0000000000000000070000000400028026cfe65f2a8b22caa086444058ce969fa12535594dcbdd178f77bb1377ed7ec385ca18e8ae0a10b5e7bc193366b77a0ef6d8c6aadc0f26d373c85868324e4eb40cc1e3672e7296ccaaef1523205f2f2a86be0bc94901789f4a568a298a051998640f"], 0x18}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.717603062s ago: executing program 2 (id=3038): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) socket(0x2, 0x80805, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, 0x0) socket$inet6(0xa, 0x3, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) ioprio_get$uid(0x3, 0x0) r6 = syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x2, 0x10, 0x4, 0x219}, &(0x7f0000000180), &(0x7f0000000580), 0x0) io_uring_enter(r6, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) accept4(r7, 0x0, 0x0, 0x0) 8.128408751s ago: executing program 1 (id=3039): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) socket(0x2, 0x80805, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, 0x0) socket$inet6(0xa, 0x3, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) ioprio_get$uid(0x3, 0x0) r6 = syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x2, 0x10, 0x4, 0x219}, &(0x7f0000000180), &(0x7f0000000580), 0x0) io_uring_enter(r6, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) accept4(r7, 0x0, 0x0, 0x0) 8.046575846s ago: executing program 0 (id=3040): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) openat$kvm(0xffffffffffffff9c, 0x0, 0x101201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, 0x0, 0x22000054) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x303, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000033) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000600)={0x2020}, 0x2020) mq_open(&(0x7f00000004c0)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2DvF\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b\x95\xcdq\xcc\xe6\x91X\xd6\xcc\xea$\xfd\xc4\n\x01&\x8d\xd2\x02\x83\x18(+\'4xq\xfebM\x84\x16+4\xc6Wf\xba\xb9\xaf\xac\xfe\x99\x95\x97[\x9bb\xd2\xfdr\x84&\x94\x7fcV\xa8m\\\x9bP\xfbFf\x0f \xd8R\xc9X+N\x9d\xbfx\xd0EZY\xea\\\xc1\x86{?jm\xec\x1b\x16\x83\xdeR~\x92\x8cg(@\xb3\xb2\x97\xdf\x1b\x9b\xcdtJw~\x99jd(\x034\xaa\x967\xd6OW# \xc3\xbf\xf2z\xf4\x8f\x91\xe3', 0x40, 0x80, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0xfffe) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863ff0760e15ce7cc0c86", 0xe, 0xfffffffffffffffd) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x200, 0x34565559, 0x5, 0x4, 0x5, 0x5, 0x9, 0x0, 0x6, 0x0, 0x5}}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48}) 7.916198605s ago: executing program 3 (id=3041): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = io_uring_setup(0x25e, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x1b, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7d2ccc1a8cedb015}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.736768944s ago: executing program 2 (id=3042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0x8, 0x2fa11, 0x401}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x20, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) tkill(r2, 0x7) tkill(r2, 0x27) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x0, 0x1012) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x4808c1, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00176a0000fcf7ffffa5e8673608f7ecfeff00"}) r4 = syz_open_pts(r3, 0x8182) dup3(r4, r3, 0x0) ioctl$TIOCMBIS(r3, 0x5416, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x154}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) gettid() sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x2000c450) 7.674843289s ago: executing program 0 (id=3043): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_uring_setup(0x25e, &(0x7f0000000080)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 7.069238785s ago: executing program 1 (id=3044): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x1b, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.816340229s ago: executing program 2 (id=3045): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfff, 0x3ff, 0x3, 0x19, 0x6, 0x1f, 0x2}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 6.350255398s ago: executing program 5 (id=3046): syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000004c0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0x3, 0x40}}, 0x18, 0x5, @random=0xa9, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x6f, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x0, 0xc0}}}, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500"], 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r4, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) 6.201219906s ago: executing program 0 (id=3047): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r2, 0x2141}, {r2, 0x1}], 0x2, 0x8000004) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c000380040005"], 0x20}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004400090000000000000000000500000008000200", @ANYRES32=r1, @ANYBLOB="ca20419e9287a26425a3486c7d5c56d9a49e036c611573cbe4ed30384af023a533c889458b311204cd89dc21eae6569404bcfb2a41a5983f487cbbf5aea686925bd96a79d6211f51a403f7aaed329bb6591f038bc33b6279270e1228dd070a9e5b4bebfce822a49c1fe3302c59bb1c88306052d48f3a5617e33c0dd5e71e805973bc70e0b896a6484ddae36ba04b3f176bacace18938310680947990d515cb164bff4e2667e5f1854b99c90ac73805e140b441"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) socket$nl_audit(0x10, 0x3, 0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000004c0)=[{&(0x7f0000000340)="a0", 0x1}], 0x2be, 0x4) 5.666037032s ago: executing program 3 (id=3048): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x1b, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.081448262s ago: executing program 5 (id=3049): rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa"]) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 4.54791728s ago: executing program 1 (id=3050): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x1b, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.39454793s ago: executing program 0 (id=3051): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, 0x0) get_mempolicy(0x0, 0x0, 0x400535a, &(0x7f0000835000/0x2000)=nil, 0x4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000004) unshare(0x1e000980) socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) 3.654082657s ago: executing program 3 (id=3052): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r2, 0x2141}, {r2, 0x1}], 0x2, 0x8000004) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c000380040005"], 0x20}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004400090000000000000000000500000008000200", @ANYRES32=r1, @ANYBLOB="ca20419e9287a26425a3486c7d5c56d9a49e036c611573cbe4ed30384af023a533c889458b311204cd89dc21eae6569404bcfb2a41a5983f487cbbf5aea686925bd96a79d6211f51a403f7aaed329bb6591f038bc33b6279270e1228dd070a9e5b4bebfce822a49c1fe3302c59bb1c88306052d48f3a5617e33c0dd5e71e805973bc70e0b896a6484ddae36ba04b3f176bacace18938310680947990d515cb164bff4e2667e5f1854b99c90ac73805e140b441"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x1, 0xf0, 0x200, 0x9, 0x6, 0x0, 0x2, 0x80000001, 0x5, 0x4, 0x5, 0x1, 0x2000, 0x4, 0x9, 0xa5, 0x5, 0x8000dff, 0xff, 0x452, 0x1000, 0xb, 0x4}}) vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000340)="a0", 0x1}], 0x2be, 0x4) 3.354429394s ago: executing program 2 (id=3053): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, 0x0) get_mempolicy(0x0, 0x0, 0x400535a, &(0x7f0000835000/0x2000)=nil, 0x4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000004) unshare(0x1e000980) socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) 2.74673457s ago: executing program 5 (id=3054): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r2, 0x2141}, {r2, 0x1}], 0x2, 0x8000004) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c000380040005"], 0x20}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004400090000000000000000000500000008000200", @ANYRES32=r1, @ANYBLOB="ca20419e9287a26425a3486c7d5c56d9a49e036c611573cbe4ed30384af023a533c889458b311204cd89dc21eae6569404bcfb2a41a5983f487cbbf5aea686925bd96a79d6211f51a403f7aaed329bb6591f038bc33b6279270e1228dd070a9e5b4bebfce822a49c1fe3302c59bb1c88306052d48f3a5617e33c0dd5e71e805973bc70e0b896a6484ddae36ba04b3f176bacace18938310680947990d515cb164bff4e2667e5f1854b99c90ac73805e140b441"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x1, 0xf0, 0x200, 0x9, 0x6, 0x0, 0x2, 0x80000001, 0x5, 0x4, 0x5, 0x1, 0x2000, 0x4, 0x9, 0xa5, 0x5, 0x8000dff, 0xff, 0x452, 0x1000, 0xb, 0x4}}) vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000340)="a0", 0x1}], 0x2be, 0x4) 2.717620976s ago: executing program 1 (id=3055): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfff, 0x3ff, 0x3, 0x19, 0x6, 0x1f, 0x2}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2.408108483s ago: executing program 2 (id=3056): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0aca6020"], 0xd) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r1 = socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000008c0)='\x00', 0x89901) fchdir(r3) close(r3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x4001, 0x0, 0x13}, 0x18) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x4f}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1000}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030f0000000000000000070000000400028026cfe65f2a8b22caa086444058ce969fa12535594dcbdd178f77bb1377ed7ec385ca18e8ae0a10b5e7bc193366b77a0ef6d8c6aadc0f26d373c85868324e4eb40cc1e3672e7296ccaaef1523205f2f2a86be0bc94901789f4a568a298a051998640f"], 0x18}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000a80000", @ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000540)={0x0, 0xffffffffffffff79, &(0x7f0000000000)={&(0x7f00000025c0)={0x14, r7, 0x301, 0x70bd29, 0x25dfdbff, {0x24}}, 0x6a}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES64=r0], 0x927560ec6e4b44f0) 2.060616422s ago: executing program 0 (id=3057): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_uring_setup(0x25e, &(0x7f0000000080)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.939280772s ago: executing program 3 (id=3058): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x1b, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 938.742504ms ago: executing program 5 (id=3059): syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000004c0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0x3, 0x40}}, 0x18, 0x5, @random=0xa9, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x6f, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x0, 0xc0}}}, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500"], 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r4, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) 231.08886ms ago: executing program 0 (id=3060): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) openat$kvm(0xffffffffffffff9c, 0x0, 0x101201, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, 0x0, 0x22000054) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x303, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000033) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000600)={0x2020}, 0x2020) mq_open(&(0x7f00000004c0)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2DvF\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b\x95\xcdq\xcc\xe6\x91X\xd6\xcc\xea$\xfd\xc4\n\x01&\x8d\xd2\x02\x83\x18(+\'4xq\xfebM\x84\x16+4\xc6Wf\xba\xb9\xaf\xac\xfe\x99\x95\x97[\x9bb\xd2\xfdr\x84&\x94\x7fcV\xa8m\\\x9bP\xfbFf\x0f \xd8R\xc9X+N\x9d\xbfx\xd0EZY\xea\\\xc1\x86{?jm\xec\x1b\x16\x83\xdeR~\x92\x8cg(@\xb3\xb2\x97\xdf\x1b\x9b\xcdtJw~\x99jd(\x034\xaa\x967\xd6OW# \xc3\xbf\xf2z\xf4\x8f\x91\xe3', 0x40, 0x80, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0xfffe) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863ff0760e15ce7cc0c86", 0xe, 0xfffffffffffffffd) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x200, 0x34565559, 0x5, 0x4, 0x5, 0x5, 0x9, 0x0, 0x6, 0x0, 0x5}}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48}) 119.468493ms ago: executing program 3 (id=3061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = io_uring_setup(0x25e, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x1b, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7d2ccc1a8cedb015}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 43.435444ms ago: executing program 2 (id=3062): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, 0x0) get_mempolicy(0x0, 0x0, 0x400535a, &(0x7f0000835000/0x2000)=nil, 0x4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000004) unshare(0x1e000980) socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) 0s ago: executing program 5 (id=3063): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfff, 0x3ff, 0x3, 0x19, 0x6, 0x1f, 0x2}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) kernel console output (not intermixed with test programs): il, usb_ep_enable returned -22 [ 732.132097][ T5710] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.344646][T14460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 732.482034][T14460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.545510][T14460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.702609][ T5356] usb 1-1: USB disconnect, device number 73 [ 734.812910][T14492] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2343'. [ 734.926743][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 734.974631][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 735.053165][T14493] netlink: 'syz.1.2343': attribute type 1 has an invalid length. [ 735.129453][T14493] netlink: 'syz.1.2343': attribute type 2 has an invalid length. [ 735.151333][T14491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.125256][ T5356] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 738.286655][ T5356] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 738.322155][ T5356] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 738.391930][ T5356] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 738.440147][ T5356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.531289][T14523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 738.561109][ T5356] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 738.773799][T14523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.838310][T14523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.892855][T14523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.993935][ T8470] usb 4-1: USB disconnect, device number 73 [ 740.244180][ T90] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 740.430378][ T90] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 740.475265][ T90] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 740.511826][ T90] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 740.549529][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.597915][T14550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 740.633235][ T90] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 740.648922][ T5625] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 740.814131][ T5625] usb 6-1: Using ep0 maxpacket: 16 [ 740.844091][ T5625] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.854751][ T5625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 740.867815][ T5625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 740.886174][T14550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.895843][ T5625] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 740.923241][T14550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.935582][ T5625] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.971132][T14550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.988599][ T5625] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 741.029685][ T5625] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 741.046146][ T90] usb 1-1: USB disconnect, device number 74 [ 741.064681][ T5625] usb 6-1: Manufacturer: syz [ 741.099691][ T5625] usb 6-1: config 0 descriptor?? [ 741.437667][ T5625] rc_core: IR keymap rc-hauppauge not found [ 741.452569][ T5625] Registered IR keymap rc-empty [ 741.466980][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 741.506214][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 741.549890][ T5625] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 741.610217][ T5625] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input67 [ 741.676497][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 741.706236][ C1] rc rc0: IR event FIFO is full! [ 741.711229][ C1] rc rc0: IR event FIFO is full! [ 741.716156][ C1] rc rc0: IR event FIFO is full! [ 741.721091][ C1] rc rc0: IR event FIFO is full! [ 741.726196][ C1] rc rc0: IR event FIFO is full! [ 741.731138][ C1] rc rc0: IR event FIFO is full! [ 741.736084][ C1] rc rc0: IR event FIFO is full! [ 741.741702][ C1] rc rc0: IR event FIFO is full! [ 741.746662][ C1] rc rc0: IR event FIFO is full! [ 741.751603][ C1] rc rc0: IR event FIFO is full! [ 741.756558][ C1] rc rc0: IR event FIFO is full! [ 741.761534][ C1] rc rc0: IR event FIFO is full! [ 741.766675][ C1] rc rc0: IR event FIFO is full! [ 741.772141][ C1] rc rc0: IR event FIFO is full! [ 741.777069][ C1] rc rc0: IR event FIFO is full! [ 741.782006][ C1] rc rc0: IR event FIFO is full! [ 741.786945][ C1] rc rc0: IR event FIFO is full! [ 741.794396][ C1] rc rc0: IR event FIFO is full! [ 741.799385][ C1] rc rc0: IR event FIFO is full! [ 741.804338][ C1] rc rc0: IR event FIFO is full! [ 741.810534][ C1] rc rc0: IR event FIFO is full! [ 741.815528][ C1] rc rc0: IR event FIFO is full! [ 741.820660][ C1] rc rc0: IR event FIFO is full! [ 741.825595][ C1] rc rc0: IR event FIFO is full! [ 741.830537][ C1] rc rc0: IR event FIFO is full! [ 741.835509][ C1] rc rc0: IR event FIFO is full! [ 741.907899][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 741.944900][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 741.964186][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 741.991686][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 742.032481][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 742.080110][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 742.141497][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 742.184753][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 742.224906][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 742.261513][ T5625] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 742.284174][ T5625] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 742.352650][ T5625] usb 6-1: USB disconnect, device number 43 [ 745.286720][ T5710] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 745.456187][ T5710] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 745.470707][ T5710] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 745.493549][ T5710] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 745.527447][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.566551][T14599] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 745.589145][ T5710] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 745.802972][T14598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 745.866358][T14598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.913243][T14598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.038705][ T5710] usb 6-1: USB disconnect, device number 44 [ 747.147686][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.154295][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.054152][ T5710] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 752.236307][ T5710] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 752.249529][ T5710] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 752.294167][ T5710] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 752.346540][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.376446][T14666] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 752.391182][ T5710] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 752.631276][T14666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 752.667096][T14666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.732599][T14666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.822972][ T5710] usb 3-1: USB disconnect, device number 80 [ 753.979248][T14684] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 754.035716][T14684] PKCS7: Only support pkcs7_signedData type [ 756.814128][T14723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.845723][T14725] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2388'. [ 756.900871][T14725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.003426][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 757.031055][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 757.994082][ T5710] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 758.179108][ T5710] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 758.236075][ T5710] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 758.288090][ T5710] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 758.354214][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.401205][T14735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 758.423900][ T5710] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 758.656889][T14735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.750098][T14735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.795128][T14735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.887511][ T5625] usb 1-1: USB disconnect, device number 75 [ 760.774184][ T5356] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 760.927115][ T5356] usb 6-1: Using ep0 maxpacket: 16 [ 760.955233][ T5356] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.970376][ T5356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 761.013923][ T5356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 761.039730][ T5356] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 761.066143][ T5356] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 761.136144][ T5356] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 761.167328][ T5356] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 761.196569][ T5356] usb 6-1: Manufacturer: syz [ 761.224400][ T5356] usb 6-1: config 0 descriptor?? [ 761.674119][ T5356] rc_core: IR keymap rc-hauppauge not found [ 761.683184][ T5356] Registered IR keymap rc-empty [ 761.734509][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 761.764193][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 761.795241][ T5356] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 761.838830][ T5356] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input68 [ 761.886879][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 761.929020][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 762.021694][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 762.064394][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 762.104410][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 762.134287][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 762.176675][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 762.228335][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 762.264893][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 762.311362][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 762.349126][ T5356] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 762.379424][ T5356] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 762.438505][ T5356] usb 6-1: USB disconnect, device number 45 [ 765.014182][ T5356] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 765.185050][ T5356] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 765.218601][ T5356] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 765.258005][ T5356] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 765.295090][ T5356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.330569][T14809] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 765.377019][ T5356] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.591970][T14809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.610747][T14809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.640360][T14809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.701355][ T5356] usb 4-1: USB disconnect, device number 74 [ 769.594288][ T90] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 769.850006][ T90] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 769.961646][ T90] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 770.049865][ T90] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 770.082293][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.114723][T14859] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 770.144610][ T90] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 770.383899][T14859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 770.580786][ T10] usb 2-1: USB disconnect, device number 89 [ 774.999305][T14914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.172619][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2428'. [ 775.194404][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2428'. [ 775.231291][T14917] netlink: 'syz.2.2428': attribute type 1 has an invalid length. [ 775.274617][T14917] netlink: 'syz.2.2428': attribute type 2 has an invalid length. [ 775.414137][ T90] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 775.576101][ T90] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 775.611928][ T90] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 775.660223][ T90] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 775.696823][ T90] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.740148][T14916] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 775.764735][ T90] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 775.961403][T14916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 776.046009][T14916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.081284][T14916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.275047][ T10] usb 6-1: USB disconnect, device number 46 [ 776.314080][ T90] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 776.488612][ T90] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 776.540171][ T90] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 776.571549][ T90] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 776.602257][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.631580][T14927] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 776.664867][ T90] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 776.890035][T14927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 776.982195][ T90] usb 2-1: USB disconnect, device number 90 [ 781.504083][ T8470] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 781.666182][ T8470] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 781.685158][ T8470] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 781.714081][ T10] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 781.721933][ T8470] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 781.754095][ T8470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.810450][T14995] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 781.835286][ T8470] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 781.877984][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 781.917300][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 781.972156][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 782.013418][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.031837][T14995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 782.062507][T14997] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 782.090492][T14995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.104868][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 782.126240][T14995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.353735][T14997] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 782.379177][ T5625] usb 2-1: USB disconnect, device number 91 [ 782.429432][T14997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.456704][T14997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.546679][ T90] usb 6-1: USB disconnect, device number 47 [ 786.539220][T15066] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2458'. [ 790.984439][ T5356] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 791.159369][ T5356] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 791.203510][ T5356] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 791.246661][ T5356] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 791.289374][ T5356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.347199][T15110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 791.370345][ T5356] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 791.576529][T15127] loop5: detected capacity change from 0 to 7 [ 791.588869][T15110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 791.606469][T15127] Dev loop5: unable to read RDB block 7 [ 791.638538][T15127] loop5: unable to read partition table [ 791.649663][T15110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.669758][T15127] loop5: partition table beyond EOD, truncated [ 791.681812][T15110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.728700][T15127] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 791.813752][ T5710] usb 2-1: USB disconnect, device number 92 [ 791.915107][ T8470] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 792.095922][ T8470] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 792.111297][ T8470] usb 6-1: config 0 has no interface number 0 [ 792.124111][ T8470] usb 6-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 792.154707][ T8470] usb 6-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 792.178589][ T8470] usb 6-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.194687][ T8470] usb 6-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 792.219522][ T8470] usb 6-1: config 0 interface 230 has no altsetting 0 [ 792.243493][ T8470] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 792.264139][ T8470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.287205][ T8470] usb 6-1: config 0 descriptor?? [ 792.935199][T15127] binder: 15125:15127 ioctl c0306201 2000000001c0 returned -14 [ 793.006944][ T8470] usbhid 6-1:0.230: can't add hid device: -71 [ 793.029719][ T8470] usbhid 6-1:0.230: probe with driver usbhid failed with error -71 [ 793.073922][ T8470] usb 6-1: USB disconnect, device number 48 [ 793.467737][ T5710] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 793.666516][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 793.717754][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.736773][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 793.756165][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 793.775761][ T5710] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 793.794962][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.816569][ T8470] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 793.848851][ T5710] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 793.867134][ T5710] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 793.884339][ T5710] usb 4-1: Manufacturer: syz [ 793.918337][ T5710] usb 4-1: config 0 descriptor?? [ 794.004249][ T8470] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 794.026113][ T8470] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 794.047604][ T8470] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 794.079331][ T8470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.119550][T15144] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 794.134694][ T8470] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 794.332967][ T5710] rc_core: IR keymap rc-hauppauge not found [ 794.339415][ T5710] Registered IR keymap rc-empty [ 794.349977][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.383461][T15144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.400034][T15156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.410299][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.418410][T15156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.464324][ T5710] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 794.519958][ T5710] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input69 [ 794.564611][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.576069][ T5356] usb 1-1: USB disconnect, device number 76 [ 794.584501][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.614367][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.651235][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.724195][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.765352][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.800880][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.840367][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.885357][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.934296][ T5710] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.975791][ T5710] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 794.993338][ T5710] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 795.028399][ T5710] usb 4-1: USB disconnect, device number 75 [ 800.621994][T15228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.696143][T15228] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2493'. [ 800.738102][T15228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2493'. [ 800.812286][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'. [ 800.860939][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'. [ 800.874855][T15230] netlink: 'syz.1.2493': attribute type 1 has an invalid length. [ 800.886439][T15230] netlink: 'syz.1.2493': attribute type 2 has an invalid length. [ 808.604544][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.624310][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.620298][T15374] syzkaller0: entered promiscuous mode [ 811.636795][T15374] syzkaller0: entered allmulticast mode [ 823.180278][ T5634] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 830.294163][ T8470] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 830.537951][ T8470] usb 2-1: Using ep0 maxpacket: 16 [ 830.576405][ T8470] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.639567][ T8470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 830.659174][ T8470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 830.706013][ T8470] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 830.761569][ T8470] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.819004][ T8470] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 830.850000][ T8470] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 830.874899][ T8470] usb 2-1: Manufacturer: syz [ 830.910980][ T8470] usb 2-1: config 0 descriptor?? [ 831.221166][ T8470] rc_core: IR keymap rc-hauppauge not found [ 831.232065][ T8470] Registered IR keymap rc-empty [ 831.264286][ T8470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 831.334348][ T8470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 831.365124][ T8470] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 831.411733][ T8470] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input70 [ 831.488000][ T8470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 831.525447][ T8470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 831.549980][ T8470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 831.594183][ T8470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 831.634201][ T8470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 831.697126][ T8470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 831.735350][ T8470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 831.804169][ T8470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 831.834324][ T8470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 831.860614][ T8470] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 831.903409][ T8470] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 831.970280][ T8470] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 832.002954][ T8470] usb 2-1: USB disconnect, device number 93 [ 833.114141][ T5710] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 833.294874][ T5710] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 833.319414][ T5710] usb 3-1: config 0 has no interface number 0 [ 833.339492][ T5710] usb 3-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 833.389143][ T5710] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 833.408524][ T5710] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.459804][ T5710] usb 3-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 833.505599][ T5710] usb 3-1: config 0 interface 230 has no altsetting 0 [ 833.537244][ T5710] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 833.571227][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.596159][ T5710] usb 3-1: config 0 descriptor?? [ 834.227151][T15584] binder: 15583:15584 ioctl c0306201 2000000001c0 returned -14 [ 834.262963][ T5710] usbhid 3-1:0.230: can't add hid device: -71 [ 834.270469][ T5710] usbhid 3-1:0.230: probe with driver usbhid failed with error -71 [ 834.310856][ T5710] usb 3-1: USB disconnect, device number 81 [ 839.492131][T15660] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 839.514186][T15660] PKCS7: Only support pkcs7_signedData type [ 839.548136][T15660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.306143][ T90] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 840.475818][ T90] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 840.498870][ T90] usb 3-1: config 0 has no interface number 0 [ 840.514096][ T90] usb 3-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 840.552862][ T90] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 840.593021][ T90] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.622856][ T90] usb 3-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 840.698621][ T90] usb 3-1: config 0 interface 230 has no altsetting 0 [ 840.715395][ T90] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 840.756238][ T90] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.779501][ T90] usb 3-1: config 0 descriptor?? [ 841.455676][T15663] binder: 15662:15663 ioctl c0306201 2000000001c0 returned -14 [ 841.547555][ T90] usbhid 3-1:0.230: can't add hid device: -71 [ 841.563135][ T90] usbhid 3-1:0.230: probe with driver usbhid failed with error -71 [ 841.646219][ T90] usb 3-1: USB disconnect, device number 82 [ 843.734852][T15699] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 843.769084][T15699] PKCS7: Only support pkcs7_signedData type [ 843.790179][T15699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.843652][T15737] loop5: detected capacity change from 0 to 7 [ 846.874843][T15737] Dev loop5: unable to read RDB block 7 [ 846.893537][T15737] loop5: unable to read partition table [ 846.910031][T15737] loop5: partition table beyond EOD, truncated [ 846.947170][T15738] binder: 15736:15738 ioctl c0306201 2000000001c0 returned -14 [ 846.967090][T15737] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 847.029503][ T4990] Dev loop5: unable to read RDB block 7 [ 847.044232][ T4990] loop5: unable to read partition table [ 847.059425][ T4990] loop5: partition table beyond EOD, truncated [ 847.254676][ T90] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 847.416203][ T90] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 847.436257][ T90] usb 4-1: config 0 has no interface number 0 [ 847.452990][ T90] usb 4-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 847.481370][ T90] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 847.499178][ T90] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.518896][ T90] usb 4-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 847.555224][ T90] usb 4-1: config 0 interface 230 has no altsetting 0 [ 847.573763][ T90] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 847.598168][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.681836][ T90] usb 4-1: config 0 descriptor?? [ 847.715183][ T4990] Dev loop5: unable to read RDB block 7 [ 847.729281][ T4990] loop5: unable to read partition table [ 847.743676][ T4990] loop5: partition table beyond EOD, truncated [ 848.082644][T15763] rdma_op ffff88802602f9f0 conn xmit_rdma 0000000000000000 [ 848.299827][T15740] binder: 15739:15740 ioctl c0306201 2000000001c0 returned -14 [ 848.328957][ T90] usbhid 4-1:0.230: can't add hid device: -71 [ 848.335434][ T90] usbhid 4-1:0.230: probe with driver usbhid failed with error -71 [ 848.378958][ T90] usb 4-1: USB disconnect, device number 76 [ 850.073393][ T5634] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 853.144187][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 853.314261][ T5710] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 853.346706][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 853.378487][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.394373][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 853.406018][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 853.418885][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 853.429147][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.446488][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 853.455746][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 853.476452][ T10] usb 6-1: Manufacturer: syz [ 853.487331][ T5710] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 853.498164][ T5710] usb 4-1: config 0 has no interface number 0 [ 853.510013][ T10] usb 6-1: config 0 descriptor?? [ 853.520720][ T5710] usb 4-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 853.562183][ T5710] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 853.598988][ T5710] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.634230][ T5710] usb 4-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 853.677723][ T5710] usb 4-1: config 0 interface 230 has no altsetting 0 [ 853.703483][ T5710] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 853.735435][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.759666][ T5710] usb 4-1: config 0 descriptor?? [ 853.912351][ T10] rc_core: IR keymap rc-hauppauge not found [ 853.918343][ T10] Registered IR keymap rc-empty [ 853.933063][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 854.000165][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 854.036979][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 854.071658][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input71 [ 854.129569][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 854.174186][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 854.214931][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 854.256605][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 854.306938][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 854.356042][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 854.408114][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 854.425940][T15816] binder: 15815:15816 ioctl c0306201 2000000001c0 returned -14 [ 854.441857][ T5710] usbhid 4-1:0.230: can't add hid device: -71 [ 854.448704][ T5710] usbhid 4-1:0.230: probe with driver usbhid failed with error -71 [ 854.457066][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 854.481881][ T5710] usb 4-1: USB disconnect, device number 77 [ 854.508537][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 854.570417][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 854.615467][ T10] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 854.656140][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 854.696505][ T10] usb 6-1: USB disconnect, device number 49 [ 856.219479][T15856] loop5: detected capacity change from 0 to 7 [ 856.228262][T15856] Dev loop5: unable to read RDB block 7 [ 856.236491][T15856] loop5: unable to read partition table [ 856.244404][T15856] loop5: partition table beyond EOD, truncated [ 856.262091][T15856] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 856.294806][T15858] binder: 15855:15858 ioctl c0306201 2000000001c0 returned -14 [ 859.354320][ T9] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 859.557739][ T9] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 859.600942][ T9] usb 1-1: config 0 has no interface number 0 [ 859.632800][ T9] usb 1-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 859.664585][ T9] usb 1-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 859.728665][ T9] usb 1-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.755487][ T9] usb 1-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 859.824102][ T9] usb 1-1: config 0 interface 230 has no altsetting 0 [ 859.834117][ T9] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 859.846894][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.878438][ T9] usb 1-1: config 0 descriptor?? [ 860.491856][T15894] binder: 15893:15894 ioctl c0306201 2000000001c0 returned -14 [ 860.548379][ T9] usbhid 1-1:0.230: can't add hid device: -71 [ 860.560494][ T9] usbhid 1-1:0.230: probe with driver usbhid failed with error -71 [ 860.613690][ T9] usb 1-1: USB disconnect, device number 77 [ 861.264065][ T9] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 861.478385][ T9] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 861.497856][ T9] usb 4-1: config 0 has no interface number 0 [ 861.522310][ T9] usb 4-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 861.575664][ T9] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 861.611888][ T9] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.652134][ T9] usb 4-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 861.681869][ T9] usb 4-1: config 0 interface 230 has no altsetting 0 [ 861.704730][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 861.727234][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.792428][ T9] usb 4-1: config 0 descriptor?? [ 862.438446][T15917] binder: 15916:15917 ioctl c0306201 2000000001c0 returned -14 [ 862.485329][ T9] usbhid 4-1:0.230: can't add hid device: -71 [ 862.491596][ T9] usbhid 4-1:0.230: probe with driver usbhid failed with error -71 [ 862.512331][ T9] usb 4-1: USB disconnect, device number 78 [ 862.786161][T15934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.838041][T15934] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2632'. [ 862.929689][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2632'. [ 862.950332][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2632'. [ 863.000051][T15934] netlink: 'syz.5.2632': attribute type 1 has an invalid length. [ 863.025381][T15934] netlink: 'syz.5.2632': attribute type 2 has an invalid length. [ 864.865739][T15961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.665224][ T5356] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 866.828263][ T5356] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 866.852595][ T5356] usb 4-1: config 0 has no interface number 0 [ 866.868381][ T5356] usb 4-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 866.891869][ T5356] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 866.921894][ T5356] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.979113][ T5356] usb 4-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 867.036021][ T5356] usb 4-1: config 0 interface 230 has no altsetting 0 [ 867.070471][ T5356] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 867.101767][ T5356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.163602][ T5356] usb 4-1: config 0 descriptor?? [ 867.604785][ T10] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 867.813664][T15971] binder: 15970:15971 ioctl c0306201 2000000001c0 returned -14 [ 867.862017][ T10] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 867.866339][ T5356] usbhid 4-1:0.230: can't add hid device: -71 [ 867.908701][ T5356] usbhid 4-1:0.230: probe with driver usbhid failed with error -71 [ 867.931366][ T10] usb 1-1: config 0 has no interface number 0 [ 867.946904][ T10] usb 1-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 867.974638][ T10] usb 1-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 867.983859][ T5356] usb 4-1: USB disconnect, device number 79 [ 868.063224][ T10] usb 1-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.155585][ T10] usb 1-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 868.233488][ T10] usb 1-1: config 0 interface 230 has no altsetting 0 [ 868.256434][ T10] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 868.281015][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.311003][ T10] usb 1-1: config 0 descriptor?? [ 868.939077][T15985] binder: 15984:15985 ioctl c0306201 2000000001c0 returned -14 [ 868.974618][ T10] usbhid 1-1:0.230: can't add hid device: -71 [ 868.991380][ T10] usbhid 1-1:0.230: probe with driver usbhid failed with error -71 [ 869.054510][ T10] usb 1-1: USB disconnect, device number 78 [ 869.300593][T15995] syzkaller0: entered promiscuous mode [ 869.316783][T15995] syzkaller0: entered allmulticast mode [ 870.035635][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.043640][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.450487][ T9] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 878.494284][ T5625] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 878.641861][ T9] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 878.655474][ T5625] usb 4-1: Using ep0 maxpacket: 16 [ 878.666572][ T9] usb 3-1: config 0 has no interface number 0 [ 878.679081][ T5625] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.699767][ T5625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 878.704048][ T9] usb 3-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 878.749458][ T5625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 878.760670][ T9] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 878.778770][ T9] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.815850][ T5625] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 878.825925][ T9] usb 3-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 878.861021][ T5625] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.891865][ T9] usb 3-1: config 0 interface 230 has no altsetting 0 [ 878.892219][ T5625] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 878.925191][ T5625] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 878.940323][ T5625] usb 4-1: Manufacturer: syz [ 878.951494][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 878.962046][ T5625] usb 4-1: config 0 descriptor?? [ 879.001647][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.032070][ T9] usb 3-1: config 0 descriptor?? [ 879.284091][ T5625] rc_core: IR keymap rc-hauppauge not found [ 879.300347][ T5625] Registered IR keymap rc-empty [ 879.312369][ T5625] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.354438][ T5625] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.399876][ T5625] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 879.458348][ T5625] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input72 [ 879.503324][ T5625] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.547522][ T5625] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.594121][ T5625] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.634167][ T5625] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.667044][T16056] binder: 16053:16056 ioctl c0306201 2000000001c0 returned -14 [ 879.674211][ T5625] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.709915][ T9] usbhid 3-1:0.230: can't add hid device: -71 [ 879.726916][ T5625] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.742348][ T9] usbhid 3-1:0.230: probe with driver usbhid failed with error -71 [ 879.809519][ T5625] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.838859][ T9] usb 3-1: USB disconnect, device number 83 [ 879.894262][ T5625] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.954239][ T5625] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 879.984213][ T5625] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 880.021173][ T5625] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 880.051584][ T5625] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 880.119232][ T5625] usb 4-1: USB disconnect, device number 80 [ 880.789059][ T5634] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 884.234095][ T90] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 884.475555][ T90] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 884.493620][ T90] usb 1-1: config 0 has no interface number 0 [ 884.518671][ T90] usb 1-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 884.547217][ T90] usb 1-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 884.615181][ T90] usb 1-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.625665][ T90] usb 1-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 884.642782][ T90] usb 1-1: config 0 interface 230 has no altsetting 0 [ 884.662544][ T90] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 884.705687][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.744546][T16143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.782990][T16144] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2674'. [ 884.797110][ T90] usb 1-1: config 0 descriptor?? [ 884.842442][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2674'. [ 884.912816][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 884.948189][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 884.964425][T16144] netlink: 'syz.2.2674': attribute type 1 has an invalid length. [ 885.004200][T16144] netlink: 'syz.2.2674': attribute type 2 has an invalid length. [ 885.445015][T16137] binder: 16136:16137 ioctl c0306201 2000000001c0 returned -14 [ 885.506384][ T90] usbhid 1-1:0.230: can't add hid device: -71 [ 885.524881][ T90] usbhid 1-1:0.230: probe with driver usbhid failed with error -71 [ 885.584123][ T90] usb 1-1: USB disconnect, device number 79 [ 891.021706][ T5634] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 891.636672][T16247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 891.786200][T16247] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2695'. [ 891.862776][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'. [ 891.975282][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'. [ 902.118137][ T5356] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 902.273703][T16374] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 902.282527][T16374] PKCS7: Only support pkcs7_signedData type [ 902.294951][ T5356] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 902.319411][ T5356] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 902.337886][T16374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.360418][ T5356] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 902.398088][ T5356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.442227][T16369] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 902.461812][ T5356] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 902.661720][T16369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.712029][T16369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.759520][T16369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.882767][ T9] usb 4-1: USB disconnect, device number 81 [ 905.774171][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 905.949760][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 905.977717][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 906.006379][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 906.041873][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.113175][T16411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 906.177609][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 906.384741][T16411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 906.437111][T16411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.500283][T16411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.700387][ T9] usb 2-1: USB disconnect, device number 94 [ 907.866544][ T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 908.132178][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 908.181383][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 908.210716][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 908.230150][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.244915][ T5356] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 908.344285][T16436] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 908.432570][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 908.446553][ T5356] usb 6-1: Using ep0 maxpacket: 16 [ 908.479222][ T5356] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.517019][ T5356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 908.550183][ T5356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 908.605137][ T5356] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 908.642432][ T5356] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.646373][T16436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 908.701691][T16451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.725107][ T5356] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 908.753930][ T5356] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 908.785297][T16451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.806531][ T5356] usb 6-1: Manufacturer: syz [ 908.823568][ T5356] usb 6-1: config 0 descriptor?? [ 909.052921][ T9] usb 2-1: USB disconnect, device number 95 [ 909.214137][ T5356] rc_core: IR keymap rc-hauppauge not found [ 909.240104][ T5356] Registered IR keymap rc-empty [ 909.272247][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 909.324260][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 909.364918][ T5356] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 909.406581][ T5356] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input73 [ 909.461687][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 909.505188][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 909.561717][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 909.624729][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 909.695000][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 909.736547][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 909.804459][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 909.864170][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 909.914149][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 909.945445][ T5356] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 909.961284][T16459] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 909.996120][ T5356] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 910.005488][T16459] PKCS7: Only support pkcs7_signedData type [ 910.025694][ T5356] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 910.068559][ T5356] usb 6-1: USB disconnect, device number 50 [ 910.169096][T16459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 912.256491][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 912.435813][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 912.488095][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 912.540685][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 912.599126][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.657384][T16486] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 912.715366][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 912.899390][T16486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 912.921480][T16486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.978233][T16486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.181900][ T5625] usb 4-1: USB disconnect, device number 82 [ 914.711311][T16516] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 914.727035][T16516] PKCS7: Only support pkcs7_signedData type [ 914.779902][T16516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 919.114113][ T5356] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 919.306176][ T5356] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 919.363211][ T5356] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 919.411101][ T5356] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 919.471825][ T5356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.534905][T16545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 919.610067][ T5356] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 919.805089][T16545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 919.869107][T16545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.934499][T16545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.140464][ T5710] usb 2-1: USB disconnect, device number 96 [ 925.894301][ T5625] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 925.915130][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 926.076075][ T5625] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 926.086153][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 926.103868][ T5625] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 926.120621][ T5625] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 926.124567][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 926.131443][ T5625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.159156][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 926.159219][T16626] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 926.184182][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.196946][T16621] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 926.197122][T16619] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 926.213083][T16626] PKCS7: Only support pkcs7_signedData type [ 926.253719][T16629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.276991][ T5625] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 926.420666][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 926.477740][T16621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.519674][T16621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.556338][T16619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.565265][T16621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.626616][T16619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.699766][ T5625] usb 2-1: USB disconnect, device number 97 [ 926.836772][T16492] usb 6-1: USB disconnect, device number 51 [ 927.965125][T16653] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2781'. [ 929.169496][T16663] syzkaller0: entered promiscuous mode [ 929.185080][T16663] syzkaller0: entered allmulticast mode [ 929.241161][T16668] loop5: detected capacity change from 0 to 7 [ 929.288444][T16668] Dev loop5: unable to read RDB block 7 [ 929.310817][T16668] loop5: unable to read partition table [ 929.331665][T16668] loop5: partition table beyond EOD, truncated [ 929.390930][T16668] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 929.575040][ T5356] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 929.747175][ T5356] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 929.778226][ T5356] usb 4-1: config 0 has no interface number 0 [ 929.812682][ T5356] usb 4-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 929.869770][ T5356] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 929.921552][ T5356] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.981318][ T5356] usb 4-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 930.016791][ T5356] usb 4-1: config 0 interface 230 has no altsetting 0 [ 930.055313][ T5356] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 930.085783][ T5356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.139361][ T5356] usb 4-1: config 0 descriptor?? [ 930.824797][T16668] binder: 16667:16668 ioctl c0306201 2000000001c0 returned -14 [ 930.864257][ T4990] Dev loop5: unable to read RDB block 7 [ 930.873862][ T4990] loop5: unable to read partition table [ 930.883233][ T5356] usbhid 4-1:0.230: can't add hid device: -71 [ 930.893614][ T5356] usbhid 4-1:0.230: probe with driver usbhid failed with error -71 [ 930.958762][ T4990] loop5: partition table beyond EOD, truncated [ 930.970351][ T5356] usb 4-1: USB disconnect, device number 83 [ 931.493508][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.502926][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.915543][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 931.968791][T16696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.020500][T16696] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2792'. [ 932.127187][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 932.263497][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 932.269203][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 932.295417][ T5356] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 932.296098][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 932.359840][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 932.428462][T16697] netlink: 'syz.1.2792': attribute type 1 has an invalid length. [ 932.441662][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.489438][ T5356] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 932.529737][ T5356] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 932.560873][T16692] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 932.600488][ T5356] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 932.628105][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 932.641471][T16697] netlink: 'syz.1.2792': attribute type 2 has an invalid length. [ 932.642144][ T5356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.760254][T16694] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 932.778132][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.831785][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.920495][ T5356] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 932.933448][ T9] usb 4-1: USB disconnect, device number 84 [ 933.022965][T16694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 933.070671][T16694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.126077][T16694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.905093][T16709] xt_connbytes: Forcing CT accounting to be enabled [ 933.943206][T16709] set match dimension is over the limit! [ 934.857743][ T5356] usb 1-1: USB disconnect, device number 80 [ 937.542266][T16752] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 937.593064][T16752] PKCS7: Only support pkcs7_signedData type [ 937.705937][T16756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.084117][ T5356] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 938.172742][T16763] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 938.208393][T16763] PKCS7: Only support pkcs7_signedData type [ 938.237480][ T5356] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 938.257303][ T5356] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 938.290350][T16763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.310515][ T5356] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 938.325984][ T5356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.365036][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2807'. [ 938.369789][T16759] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 938.398389][ T5356] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 938.598366][T16759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.626290][T16759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.648866][T16759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.717127][T16492] usb 6-1: USB disconnect, device number 52 [ 938.964201][ T5356] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 939.135440][ T5356] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 939.186301][ T5356] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 939.227820][ T5356] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 939.272218][ T5356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.316825][T16769] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 939.361365][ T5356] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 939.585296][T16769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.613033][T16769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.651559][T16769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.838600][ T10] usb 3-1: USB disconnect, device number 84 [ 940.643763][T16800] set match dimension is over the limit! [ 944.344207][ T9] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 944.427062][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2825'. [ 944.467340][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2825'. [ 944.537417][ T9] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 944.562904][ T9] usb 3-1: config 0 has no interface number 0 [ 944.589987][ T9] usb 3-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 944.625368][ T9] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 944.654216][ T9] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.698533][ T9] usb 3-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 944.746217][ T9] usb 3-1: config 0 interface 230 has no altsetting 0 [ 944.780852][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 944.819177][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.856839][ T9] usb 3-1: config 0 descriptor?? [ 945.364924][ T5625] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 945.485585][T16835] binder: 16834:16835 ioctl c0306201 2000000001c0 returned -14 [ 945.534150][ T5625] usb 6-1: Using ep0 maxpacket: 16 [ 945.549363][ T9] usbhid 3-1:0.230: can't add hid device: -71 [ 945.563762][ T9] usbhid 3-1:0.230: probe with driver usbhid failed with error -71 [ 945.591217][ T5625] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.616231][ T5625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 945.646375][ T9] usb 3-1: USB disconnect, device number 85 [ 945.690854][ T5625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 945.713427][ T5625] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 945.752062][ T5625] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 945.786898][ T5625] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 945.803301][ T5625] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 945.829548][ T5625] usb 6-1: Manufacturer: syz [ 945.847047][ T5625] usb 6-1: config 0 descriptor?? [ 946.264475][ T5625] rc_core: IR keymap rc-hauppauge not found [ 946.281856][ T5625] Registered IR keymap rc-empty [ 946.303618][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 946.361111][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 946.411311][ T5625] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 946.495424][ T5625] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input74 [ 946.652740][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 946.735341][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 946.854262][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 946.989641][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 947.044417][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 947.074265][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 947.105443][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 947.138752][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 947.191794][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 947.214180][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 947.237931][ T5625] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 947.252857][ T5625] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 947.332468][ T5625] usb 6-1: USB disconnect, device number 53 [ 947.955772][T16883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 947.978397][T16883] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2833'. [ 948.047752][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'. [ 948.193951][T16889] netlink: 'syz.1.2833': attribute type 1 has an invalid length. [ 948.230978][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'. [ 948.248089][T16889] netlink: 'syz.1.2833': attribute type 2 has an invalid length. [ 948.489669][T16895] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 948.540011][T16895] PKCS7: Only support pkcs7_signedData type [ 948.610509][T16894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 948.789469][T16900] set match dimension is over the limit! [ 949.286582][T16910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.303636][T16910] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2839'. [ 949.329789][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2839'. [ 949.344947][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2839'. [ 949.378507][T16910] netlink: 'syz.3.2839': attribute type 1 has an invalid length. [ 949.408433][T16910] netlink: 'syz.3.2839': attribute type 2 has an invalid length. [ 949.524261][ T5625] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 949.675193][T16913] loop5: detected capacity change from 0 to 7 [ 949.696097][ T5625] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 949.710627][T16913] Dev loop5: unable to read RDB block 7 [ 949.725592][T16913] loop5: unable to read partition table [ 949.733747][ T5625] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 949.762511][ T5625] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 949.762633][T16913] loop5: partition table beyond EOD, [ 949.783431][ T5625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.810009][T16913] truncated [ 949.823598][T16913] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 949.850812][T16908] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 949.876010][ T5625] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 950.016340][ T9] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 950.077153][T16908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.098040][T16908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.187836][ T9] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 950.201216][ T9] usb 3-1: config 0 has no interface number 0 [ 950.208291][ T5710] usb 6-1: USB disconnect, device number 54 [ 950.225259][ T9] usb 3-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 950.239495][ T9] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 950.253923][ T9] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.266001][ T9] usb 3-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 950.281997][ T9] usb 3-1: config 0 interface 230 has no altsetting 0 [ 950.294190][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 950.306305][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.407223][ T9] usb 3-1: config 0 descriptor?? [ 950.815484][ T4990] Dev loop5: unable to read RDB block 7 [ 950.848875][ T4990] loop5: unable to read partition table [ 950.867317][ T4990] loop5: partition table beyond EOD, truncated [ 951.061749][T16913] binder: 16912:16913 ioctl c0306201 2000000001c0 returned -14 [ 951.121923][ T9] usbhid 3-1:0.230: can't add hid device: -71 [ 951.154192][ T9] usbhid 3-1:0.230: probe with driver usbhid failed with error -71 [ 951.245265][ T9] usb 3-1: USB disconnect, device number 86 [ 951.302799][T16931] xt_connbytes: Forcing CT accounting to be enabled [ 951.371609][T16931] set match dimension is over the limit! [ 953.093303][T16970] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 953.133111][T16970] PKCS7: Only support pkcs7_signedData type [ 953.336870][T16969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.852508][T17000] loop5: detected capacity change from 0 to 7 [ 954.881364][T17000] Dev loop5: unable to read RDB block 7 [ 954.903382][T17000] loop5: unable to read partition table [ 954.923737][T17000] loop5: partition table beyond EOD, truncated [ 954.973385][T17000] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 955.214261][ T5710] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 955.415747][ T5710] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 955.431053][ T5710] usb 6-1: config 0 has no interface number 0 [ 955.458334][ T5710] usb 6-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 955.493805][ T5710] usb 6-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 955.528706][ T5710] usb 6-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.564582][ T5710] usb 6-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 955.583493][T17007] xt_connbytes: Forcing CT accounting to be enabled [ 955.614355][ T5710] usb 6-1: config 0 interface 230 has no altsetting 0 [ 955.650459][ T5710] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 955.669515][T17007] Cannot find set identified by id 0 to match [ 955.686022][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.723447][ T5710] usb 6-1: config 0 descriptor?? [ 956.364928][T17000] binder: 16999:17000 ioctl c0306201 2000000001c0 returned -14 [ 956.422180][ T5710] usbhid 6-1:0.230: can't add hid device: -71 [ 956.454173][ T5710] usbhid 6-1:0.230: probe with driver usbhid failed with error -71 [ 956.501894][ T5710] usb 6-1: USB disconnect, device number 55 [ 960.211997][T17073] loop5: detected capacity change from 0 to 7 [ 960.248077][T17073] Dev loop5: unable to read RDB block 7 [ 960.307988][T17073] loop5: unable to read partition table [ 960.354464][T17073] loop5: partition table beyond EOD, truncated [ 960.375889][T17073] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 960.524120][ T10] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 960.734459][ T10] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 960.756386][ T10] usb 4-1: config 0 has no interface number 0 [ 960.799131][ T10] usb 4-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 960.814817][ T4990] Dev loop5: unable to read RDB block 7 [ 960.831201][ T4990] loop5: unable to read partition table [ 960.856260][ T10] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 960.870243][T17077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.885776][ T4990] loop5: partition table beyond EOD, truncated [ 960.921546][ T10] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.955953][ T10] usb 4-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 960.960451][T17077] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2876'. [ 961.041838][ T10] usb 4-1: config 0 interface 230 has no altsetting 0 [ 961.057630][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2876'. [ 961.081699][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2876'. [ 961.109205][ T10] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 961.129495][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.156252][T17078] netlink: 'syz.5.2876': attribute type 1 has an invalid length. [ 961.173834][T17078] netlink: 'syz.5.2876': attribute type 2 has an invalid length. [ 961.192153][ T10] usb 4-1: config 0 descriptor?? [ 961.822935][T17073] binder: 17072:17073 ioctl c0306201 2000000001c0 returned -14 [ 961.880838][ T10] usbhid 4-1:0.230: can't add hid device: -71 [ 961.887553][ T10] usbhid 4-1:0.230: probe with driver usbhid failed with error -71 [ 961.904563][ T4990] Dev loop5: unable to read RDB block 7 [ 961.910878][ T4990] loop5: unable to read partition table [ 961.926401][ T10] usb 4-1: USB disconnect, device number 85 [ 961.934446][ T4990] loop5: partition table beyond EOD, truncated [ 965.517931][T17135] loop5: detected capacity change from 0 to 7 [ 965.593320][T17135] Dev loop5: unable to read RDB block 7 [ 965.682881][T17135] loop5: unable to read partition table [ 965.751377][T17135] loop5: partition table beyond EOD, truncated [ 965.801316][T17135] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 965.914113][ T42] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 966.086196][ T42] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 966.112917][ T42] usb 4-1: config 0 has no interface number 0 [ 966.187409][ T42] usb 4-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 966.231452][ T42] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 966.262238][ T42] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.353606][ T42] usb 4-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 966.455404][ T42] usb 4-1: config 0 interface 230 has no altsetting 0 [ 966.498635][ T42] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 966.554983][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 966.564363][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.619071][ T42] usb 4-1: config 0 descriptor?? [ 966.749044][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 966.784289][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 966.817878][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 966.854119][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.898722][T17149] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 966.923069][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 967.128132][T17149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.144950][T17149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.246809][T17135] binder: 17134:17135 ioctl c0306201 2000000001c0 returned -14 [ 967.285989][T16492] usb 1-1: USB disconnect, device number 81 [ 967.324202][ T42] usbhid 4-1:0.230: can't add hid device: -71 [ 967.354218][ T42] usbhid 4-1:0.230: probe with driver usbhid failed with error -71 [ 967.432887][ T42] usb 4-1: USB disconnect, device number 86 [ 968.449333][T17163] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 968.492107][T17163] PKCS7: Only support pkcs7_signedData type [ 968.618844][T17162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.786441][T17172] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 968.801531][T17172] PKCS7: Only support pkcs7_signedData type [ 968.929236][T17170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 969.012121][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2900'. [ 969.584175][ T42] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 969.654735][T16492] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 969.764104][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 969.812218][ T42] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 969.851904][ T42] usb 2-1: config 0 has no interface number 0 [ 969.874099][T16492] usb 1-1: Using ep0 maxpacket: 32 [ 969.884239][ T42] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 969.901762][T16492] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 969.916221][T17195] loop5: detected capacity change from 0 to 7 [ 969.924754][T16492] usb 1-1: config 0 has no interface number 0 [ 969.932449][ T42] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 969.942703][T16492] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 969.953137][T17195] Dev loop5: unable to read RDB block 7 [ 969.960168][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.972169][T17195] loop5: unable to read partition table [ 969.980908][T16492] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 969.992196][ T42] usb 2-1: Product: syz [ 969.997148][T17195] loop5: partition table beyond EOD, truncated [ 970.003567][ T42] usb 2-1: Manufacturer: syz [ 970.008462][T16492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.017914][ T42] usb 2-1: SerialNumber: syz [ 970.023938][T17195] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 970.047055][T16492] usb 1-1: Product: syz [ 970.058930][T16492] usb 1-1: Manufacturer: syz [ 970.086651][ T42] usb 2-1: config 0 descriptor?? [ 970.099213][T16492] usb 1-1: SerialNumber: syz [ 970.129725][T16492] usb 1-1: config 0 descriptor?? [ 970.136101][ T42] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 970.164390][T16492] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 970.176833][ T42] em28xx 2-1:0.132: Video interface 132 found: [ 970.189056][T16492] em28xx 1-1:0.132: Video interface 132 found: [ 970.274609][ T5356] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 970.434612][T16492] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 970.444838][ T5356] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 970.472691][ T5356] usb 3-1: config 0 has no interface number 0 [ 970.499832][ T5356] usb 3-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 970.528358][T16492] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 970.544940][ T42] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 970.564155][ T5356] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 970.583662][T16492] em28xx 1-1:0.132: board has no eeprom [ 970.596688][ T5356] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.615579][ T5356] usb 3-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 970.644101][T16492] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 970.658300][ T5356] usb 3-1: config 0 interface 230 has no altsetting 0 [ 970.674288][ T5356] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 970.688886][T16492] em28xx 1-1:0.132: analog set to bulk mode. [ 970.696256][ T90] em28xx 1-1:0.132: Registering V4L2 extension [ 970.729622][ T5356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.750982][T16492] usb 1-1: USB disconnect, device number 82 [ 970.772640][ T5356] usb 3-1: config 0 descriptor?? [ 970.778758][T16492] em28xx 1-1:0.132: Disconnecting em28xx [ 970.990533][ T42] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 971.033593][ T90] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 971.041092][ T42] em28xx 2-1:0.132: board has no eeprom [ 971.053153][ T90] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 971.073383][ T90] em28xx 1-1:0.132: No AC97 audio processor [ 971.110274][ T90] usb 1-1: Decoder not found [ 971.120981][ T90] em28xx 1-1:0.132: failed to create media graph [ 971.141609][ T90] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 971.170354][ T90] em28xx 1-1:0.132: Remote control support is not available for this card. [ 971.204227][T16492] em28xx 1-1:0.132: Closing input extension [ 971.303425][T16492] em28xx 1-1:0.132: Freeing device [ 971.415260][T17195] binder: 17194:17195 ioctl c0306201 2000000001c0 returned -14 [ 971.456857][ T5356] usbhid 3-1:0.230: can't add hid device: -71 [ 971.480366][ T5356] usbhid 3-1:0.230: probe with driver usbhid failed with error -71 [ 971.568727][ T5356] usb 3-1: USB disconnect, device number 87 [ 971.684060][ T42] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 971.713650][ T42] em28xx 2-1:0.132: analog set to bulk mode. [ 971.733760][T16492] em28xx 2-1:0.132: Registering V4L2 extension [ 971.759628][ T42] usb 2-1: USB disconnect, device number 98 [ 971.780927][ T42] em28xx 2-1:0.132: Disconnecting em28xx [ 972.070391][T16492] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 972.108729][T16492] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 972.131959][T16492] em28xx 2-1:0.132: No AC97 audio processor [ 972.157871][T16492] usb 2-1: Decoder not found [ 972.167641][T16492] em28xx 2-1:0.132: failed to create media graph [ 972.181535][T16492] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 972.268172][T16492] em28xx 2-1:0.132: Remote control support is not available for this card. [ 972.291062][ T42] em28xx 2-1:0.132: Closing input extension [ 972.415355][ T42] em28xx 2-1:0.132: Freeing device [ 975.662931][T17282] loop5: detected capacity change from 0 to 7 [ 975.689777][T17282] Dev loop5: unable to read RDB block 7 [ 975.709092][T17282] loop5: unable to read partition table [ 975.754325][T17282] loop5: partition table beyond EOD, truncated [ 975.805675][T17282] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 976.004076][ T42] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 976.176304][ T42] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 976.190986][ T42] usb 6-1: config 0 has no interface number 0 [ 976.211299][ T42] usb 6-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 976.247335][ T42] usb 6-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 976.296516][ T42] usb 6-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.324121][ T42] usb 6-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 976.349555][ T42] usb 6-1: config 0 interface 230 has no altsetting 0 [ 976.379195][ T42] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 976.417581][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.458419][ T42] usb 6-1: config 0 descriptor?? [ 976.704084][T16492] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 976.864129][T16492] usb 1-1: Using ep0 maxpacket: 32 [ 976.871409][T16492] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 976.881011][T16492] usb 1-1: config 0 has no interface number 0 [ 976.896689][T16492] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 976.951386][T16492] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 976.985315][T16492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.006344][T16492] usb 1-1: Product: syz [ 977.028206][T16492] usb 1-1: Manufacturer: syz [ 977.038372][T16492] usb 1-1: SerialNumber: syz [ 977.071063][T16492] usb 1-1: config 0 descriptor?? [ 977.117324][T17282] binder: 17279:17282 ioctl c0306201 2000000001c0 returned -14 [ 977.125325][T16492] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 977.139015][ T42] usbhid 6-1:0.230: can't add hid device: -71 [ 977.147522][ T42] usbhid 6-1:0.230: probe with driver usbhid failed with error -71 [ 977.157153][T16492] em28xx 1-1:0.132: Video interface 132 found: [ 977.315070][ T42] usb 6-1: USB disconnect, device number 56 [ 977.585019][T16492] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 977.594335][ T5356] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 977.766503][ T5356] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 977.797623][ T5356] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 977.828399][ T5356] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 977.856315][ T5356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.886302][T17297] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 977.899030][ T5634] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 977.926317][ T5356] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 978.012827][T16492] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 978.043675][T16492] em28xx 1-1:0.132: board has no eeprom [ 978.107535][T17297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 978.155928][T17297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.187343][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 978.214120][T16492] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 978.233898][T16492] em28xx 1-1:0.132: analog set to bulk mode. [ 978.255615][T17297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.296310][ T5356] em28xx 1-1:0.132: Registering V4L2 extension [ 978.361618][ T9] usb 4-1: USB disconnect, device number 87 [ 978.376130][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 978.420095][ T10] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 978.475597][ T10] usb 6-1: config 0 has no interface number 0 [ 978.505055][ T10] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 978.519825][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2928'. [ 978.582153][ T10] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 978.605205][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.653850][ T10] usb 6-1: Product: syz [ 978.677197][ T10] usb 6-1: Manufacturer: syz [ 978.691699][ T10] usb 6-1: SerialNumber: syz [ 978.725018][ T10] usb 6-1: config 0 descriptor?? [ 978.770104][ T10] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 978.808672][ T10] em28xx 6-1:0.132: Video interface 132 found: [ 979.148020][ T5356] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 979.148384][ T9] usb 1-1: USB disconnect, device number 83 [ 979.240184][ T9] em28xx 1-1:0.132: Disconnecting em28xx [ 979.267322][ T5356] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 979.293796][ T10] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 979.580574][ T5356] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 979.624676][ T5356] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 979.659087][ T5356] em28xx 1-1:0.132: No AC97 audio processor [ 979.729659][ T10] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 979.751951][ T5356] usb 1-1: Decoder not found [ 979.770156][ T5356] em28xx 1-1:0.132: failed to create media graph [ 979.810946][ T5356] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 979.830987][ T10] em28xx 6-1:0.132: board has no eeprom [ 979.967592][ T5356] em28xx 1-1:0.132: Remote control support is not available for this card. [ 980.044282][ T9] em28xx 1-1:0.132: Closing input extension [ 980.073333][ T9] em28xx 1-1:0.132: Freeing device [ 980.644308][ T10] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 980.667577][ T10] em28xx 6-1:0.132: analog set to bulk mode. [ 980.695316][ T9] em28xx 6-1:0.132: Registering V4L2 extension [ 980.740749][ T10] usb 6-1: USB disconnect, device number 57 [ 980.783755][ T10] em28xx 6-1:0.132: Disconnecting em28xx [ 981.053504][ T9] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 981.088955][ T9] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 981.123108][ T9] em28xx 6-1:0.132: No AC97 audio processor [ 981.242535][ T9] usb 6-1: Decoder not found [ 981.284517][ T9] em28xx 6-1:0.132: failed to create media graph [ 981.316617][ T9] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 981.368134][ T9] em28xx 6-1:0.132: Remote control support is not available for this card. [ 981.451335][ T10] em28xx 6-1:0.132: Closing input extension [ 981.490287][ T10] em28xx 6-1:0.132: Freeing device [ 982.259996][T17354] loop5: detected capacity change from 0 to 7 [ 982.290890][T17354] Dev loop5: unable to read RDB block 7 [ 982.321444][T17354] loop5: unable to read partition table [ 982.392319][T17354] loop5: partition table beyond EOD, truncated [ 982.427649][T17354] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 982.578576][ T10] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 982.807594][ T10] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 982.830373][ T10] usb 6-1: config 0 has no interface number 0 [ 982.848397][ T10] usb 6-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 982.891142][ T10] usb 6-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 982.926445][ T10] usb 6-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.955908][ T10] usb 6-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 983.001956][ T10] usb 6-1: config 0 interface 230 has no altsetting 0 [ 983.013266][ T10] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 983.039540][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.077090][ T10] usb 6-1: config 0 descriptor?? [ 983.718450][T17354] binder: 17353:17354 ioctl c0306201 2000000001c0 returned -14 [ 983.770860][ T10] usbhid 6-1:0.230: can't add hid device: -71 [ 983.781380][ T10] usbhid 6-1:0.230: probe with driver usbhid failed with error -71 [ 983.838456][ T10] usb 6-1: USB disconnect, device number 58 [ 983.916206][T17373] set match dimension is over the limit! [ 984.406690][T17380] Cannot find set identified by id 0 to match [ 987.869742][T17434] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2951'. [ 987.883047][T17433] loop5: detected capacity change from 0 to 7 [ 987.897827][T17433] Dev loop5: unable to read RDB block 7 [ 987.917015][T17434] openvswitch: netlink: Message has 512 unknown bytes. [ 987.928596][T17433] loop5: unable to read partition table [ 987.959391][T17433] loop5: partition table beyond EOD, truncated [ 987.967540][T17433] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 988.184190][ T90] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 988.375371][ T90] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 988.390009][ T90] usb 3-1: config 0 has no interface number 0 [ 988.404874][ T90] usb 3-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 988.466303][ T90] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 988.524099][ T90] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.569503][ T90] usb 3-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 988.642624][ T90] usb 3-1: config 0 interface 230 has no altsetting 0 [ 988.657793][ T90] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 988.674087][ T90] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.701292][ T90] usb 3-1: config 0 descriptor?? [ 989.317461][T17433] binder: 17432:17433 ioctl c0306201 2000000001c0 returned -14 [ 989.420284][ T90] usbhid 3-1:0.230: can't add hid device: -71 [ 989.451324][ T90] usbhid 3-1:0.230: probe with driver usbhid failed with error -71 [ 989.535796][ T90] usb 3-1: USB disconnect, device number 88 [ 989.594667][ T5634] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 989.854155][T17310] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 990.018278][T17310] usb 6-1: Using ep0 maxpacket: 32 [ 990.029906][T17310] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 990.043471][T17310] usb 6-1: config 0 has no interface number 0 [ 990.067212][T17310] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 990.134409][T17310] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 990.174038][T17310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.219623][T17310] usb 6-1: Product: syz [ 990.238914][T17310] usb 6-1: Manufacturer: syz [ 990.265966][T17310] usb 6-1: SerialNumber: syz [ 990.325543][T17310] usb 6-1: config 0 descriptor?? [ 990.372578][T17310] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 990.392656][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.416916][T17310] em28xx 6-1:0.132: Video interface 132 found: [ 990.465736][T17463] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2960'. [ 990.528445][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'. [ 990.553338][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'. [ 990.608046][T17463] netlink: 'syz.1.2960': attribute type 1 has an invalid length. [ 990.617204][T17463] netlink: 'syz.1.2960': attribute type 2 has an invalid length. [ 990.636722][T17310] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 990.710310][T17310] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 990.721533][T17310] em28xx 6-1:0.132: board has no eeprom [ 990.736578][T17468] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2957'. [ 990.794067][T17310] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 990.803111][T17310] em28xx 6-1:0.132: analog set to bulk mode. [ 990.813712][ T9] em28xx 6-1:0.132: Registering V4L2 extension [ 990.838198][T17310] usb 6-1: USB disconnect, device number 59 [ 990.853050][T17310] em28xx 6-1:0.132: Disconnecting em28xx [ 991.104909][ T9] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 991.123202][ T9] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 991.164448][ T9] em28xx 6-1:0.132: No AC97 audio processor [ 991.195120][ T9] usb 6-1: Decoder not found [ 991.201062][ T9] em28xx 6-1:0.132: failed to create media graph [ 991.241590][ T9] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 991.315428][ T9] em28xx 6-1:0.132: Remote control support is not available for this card. [ 991.338735][T17310] em28xx 6-1:0.132: Closing input extension [ 991.403997][T17310] em28xx 6-1:0.132: Freeing device [ 992.877673][T17502] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 992.918263][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.926243][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.034061][T17502] PKCS7: Only support pkcs7_signedData type [ 993.145989][T17501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 994.780074][T17514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 994.843910][T17515] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2971'. [ 994.915599][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 994.959586][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 995.030674][T17514] netlink: 'syz.3.2971': attribute type 1 has an invalid length. [ 995.119697][T17521] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2972'. [ 995.137060][T17521] openvswitch: netlink: Message has 512 unknown bytes. [ 995.182525][T17514] netlink: 'syz.3.2971': attribute type 2 has an invalid length. [ 995.392739][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 995.596750][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 995.610721][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 995.622708][ T9] usb 1-1: config 0 has no interface number 0 [ 995.648460][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 995.679464][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 995.688923][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.716163][ T9] usb 1-1: Product: syz [ 995.728825][ T9] usb 1-1: Manufacturer: syz [ 995.794346][ T9] usb 1-1: SerialNumber: syz [ 995.845350][ T9] usb 1-1: config 0 descriptor?? [ 995.886752][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 995.910842][ T9] em28xx 1-1:0.132: Video interface 132 found: [ 996.353501][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 996.765131][ T9] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 996.806877][ T9] em28xx 1-1:0.132: board has no eeprom [ 996.915111][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 996.936965][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 996.953464][T17310] em28xx 1-1:0.132: Registering V4L2 extension [ 997.077125][T17544] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2977'. [ 997.108611][ T90] usb 1-1: USB disconnect, device number 84 [ 997.116154][ T90] em28xx 1-1:0.132: Disconnecting em28xx [ 997.174590][T17544] openvswitch: netlink: Message has 512 unknown bytes. [ 997.385739][T17310] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 997.412204][T17310] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 997.445978][T17310] em28xx 1-1:0.132: No AC97 audio processor [ 997.461953][T17310] usb 1-1: Decoder not found [ 997.495269][T17310] em28xx 1-1:0.132: failed to create media graph [ 997.521237][T17310] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 997.560965][T17310] em28xx 1-1:0.132: Remote control support is not available for this card. [ 997.634248][ T90] em28xx 1-1:0.132: Closing input extension [ 997.726946][ T90] em28xx 1-1:0.132: Freeing device [ 998.535143][T17310] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 998.724320][T17310] usb 3-1: Using ep0 maxpacket: 32 [ 998.751602][T17310] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 998.766219][T17310] usb 3-1: config 0 has no interface number 0 [ 998.772447][T17310] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 998.819362][T17310] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 998.834140][T17310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.857946][T17310] usb 3-1: Product: syz [ 998.868067][T17310] usb 3-1: Manufacturer: syz [ 998.887892][T17310] usb 3-1: SerialNumber: syz [ 998.932150][T17310] usb 3-1: config 0 descriptor?? [ 998.963862][T17310] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 999.014685][T17310] em28xx 3-1:0.132: Video interface 132 found: [ 999.382746][T17571] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2983'. [ 999.410474][T17310] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 999.444583][T17571] openvswitch: netlink: Message has 512 unknown bytes. [ 999.558218][T17573] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 999.850632][T17310] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 999.887807][T17310] em28xx 3-1:0.132: board has no eeprom [ 999.919385][T17582] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2984'. [ 999.932932][T17582] openvswitch: netlink: Message has 512 unknown bytes. [ 999.994116][T17310] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1000.002110][T17310] em28xx 3-1:0.132: analog set to bulk mode. [ 1000.024316][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 1000.147872][T17310] usb 3-1: USB disconnect, device number 89 [ 1000.168033][T17310] em28xx 3-1:0.132: Disconnecting em28xx [ 1000.296152][ T9] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1000.313225][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1000.347351][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 1000.378057][T17582] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1000.399826][ T9] usb 3-1: Decoder not found [ 1000.422360][ T9] em28xx 3-1:0.132: failed to create media graph [ 1000.438964][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1000.486027][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1000.530248][T17310] em28xx 3-1:0.132: Closing input extension [ 1000.574519][T17310] em28xx 3-1:0.132: Freeing device [ 1002.165073][T17618] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2991'. [ 1002.406639][T17621] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1002.477986][T17618] openvswitch: netlink: Message has 512 unknown bytes. [ 1003.793732][T17635] set match dimension is over the limit! [ 1003.893638][T17638] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2995'. [ 1003.980453][T17638] openvswitch: netlink: Message has 512 unknown bytes. [ 1004.131313][T17639] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1004.324566][T17644] set match dimension is over the limit! [ 1004.786164][ T5634] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1005.044096][T17310] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1005.224225][T17310] usb 4-1: Using ep0 maxpacket: 32 [ 1005.237103][T17310] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1005.264412][T17310] usb 4-1: config 0 has no interface number 0 [ 1005.283483][T17310] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1005.318400][T17310] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1005.351996][T17310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.380912][T17310] usb 4-1: Product: syz [ 1005.395032][T17310] usb 4-1: Manufacturer: syz [ 1005.411008][T17310] usb 4-1: SerialNumber: syz [ 1005.430741][T17310] usb 4-1: config 0 descriptor?? [ 1005.458555][T17310] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1005.485923][T17310] em28xx 4-1:0.132: Video interface 132 found: [ 1005.940289][T17310] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1006.367622][T17310] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1006.421837][T17310] em28xx 4-1:0.132: board has no eeprom [ 1006.514695][T17310] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1006.546403][T17310] em28xx 4-1:0.132: analog set to bulk mode. [ 1006.571108][ T10] em28xx 4-1:0.132: Registering V4L2 extension [ 1006.584869][T17310] usb 4-1: USB disconnect, device number 88 [ 1006.612320][T17310] em28xx 4-1:0.132: Disconnecting em28xx [ 1006.896669][ T10] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1006.913476][ T10] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1006.940608][ T10] em28xx 4-1:0.132: No AC97 audio processor [ 1006.980205][ T10] usb 4-1: Decoder not found [ 1006.994037][ T10] em28xx 4-1:0.132: failed to create media graph [ 1007.030619][ T10] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1007.063855][ T10] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1007.103223][T17682] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3003'. [ 1007.135683][T17310] em28xx 4-1:0.132: Closing input extension [ 1007.159295][T17310] em28xx 4-1:0.132: Freeing device [ 1007.164962][T17682] openvswitch: netlink: Message has 512 unknown bytes. [ 1007.298761][T17687] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3004'. [ 1007.341012][T17687] openvswitch: netlink: Message has 512 unknown bytes. [ 1007.838531][T17687] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1008.264585][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1009.412220][T17715] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3009'. [ 1009.451087][T17715] openvswitch: netlink: Message has 512 unknown bytes. [ 1009.583216][T17718] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 1009.610804][T17720] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1009.629826][T17718] PKCS7: Only support pkcs7_signedData type [ 1009.683307][T17718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1012.471123][T17758] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3017'. [ 1012.510063][T17758] openvswitch: netlink: Message has 512 unknown bytes. [ 1012.688783][T17760] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1013.154122][ T90] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1013.213706][T17766] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 1013.230604][T17766] PKCS7: Only support pkcs7_signedData type [ 1013.286017][T17766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.314160][ T90] usb 2-1: Using ep0 maxpacket: 32 [ 1013.335582][ T90] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1013.355072][ T90] usb 2-1: config 0 has no interface number 0 [ 1013.373112][ T90] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1013.416827][ T90] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1013.457104][ T90] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.482844][ T90] usb 2-1: Product: syz [ 1013.488568][ T90] usb 2-1: Manufacturer: syz [ 1013.497574][ T90] usb 2-1: SerialNumber: syz [ 1013.507016][ T90] usb 2-1: config 0 descriptor?? [ 1013.534962][ T90] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1013.561810][ T90] em28xx 2-1:0.132: Video interface 132 found: [ 1013.593266][T17777] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3022'. [ 1013.617283][T17779] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 1013.625797][T17777] openvswitch: netlink: Message has 512 unknown bytes. [ 1013.632746][T17779] PKCS7: Only support pkcs7_signedData type [ 1013.680021][T17774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.881914][T17777] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1013.954363][ T90] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1014.379450][ T90] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1014.417532][ T90] em28xx 2-1:0.132: board has no eeprom [ 1014.504865][ T90] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1014.532174][ T90] em28xx 2-1:0.132: analog set to bulk mode. [ 1014.551244][T16492] em28xx 2-1:0.132: Registering V4L2 extension [ 1014.690368][T16492] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1014.701122][ T90] usb 2-1: USB disconnect, device number 99 [ 1014.715074][ T90] em28xx 2-1:0.132: Disconnecting em28xx [ 1014.855517][T16492] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1014.868233][T16492] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1014.892916][T16492] em28xx 2-1:0.132: No AC97 audio processor [ 1014.938419][T16492] usb 2-1: Decoder not found [ 1014.946916][T16492] em28xx 2-1:0.132: failed to create media graph [ 1014.977853][T16492] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1015.005043][T16492] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1015.029548][ T90] em28xx 2-1:0.132: Closing input extension [ 1015.073084][ T90] em28xx 2-1:0.132: Freeing device [ 1018.361167][T17844] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3035'. [ 1018.409060][T17844] openvswitch: netlink: Message has 512 unknown bytes. [ 1018.616958][T17846] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1019.068717][ T5634] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1019.314409][ T5710] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1019.492809][T17856] set match dimension is over the limit! [ 1019.498700][ T5710] usb 6-1: Using ep0 maxpacket: 32 [ 1019.510167][ T5710] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1019.535633][ T5710] usb 6-1: config 0 has no interface number 0 [ 1019.558399][ T5710] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1019.592777][ T5710] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1019.607740][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.631140][ T5710] usb 6-1: Product: syz [ 1019.649013][ T5710] usb 6-1: Manufacturer: syz [ 1019.673031][ T5710] usb 6-1: SerialNumber: syz [ 1019.697077][ T5710] usb 6-1: config 0 descriptor?? [ 1019.721125][ T5710] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1019.758966][ T5710] em28xx 6-1:0.132: Video interface 132 found: [ 1020.071363][T17863] set match dimension is over the limit! [ 1020.077646][T17864] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 1020.094362][T17864] PKCS7: Only support pkcs7_signedData type [ 1020.182401][T17862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1020.186076][ T5710] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 1020.624228][ T5710] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1020.637192][ T5710] em28xx 6-1:0.132: board has no eeprom [ 1020.714089][ T5710] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1020.732219][ T5710] em28xx 6-1:0.132: analog set to bulk mode. [ 1020.756217][T17310] em28xx 6-1:0.132: Registering V4L2 extension [ 1020.947131][T17310] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1020.947451][ T90] usb 6-1: USB disconnect, device number 60 [ 1020.988710][T17310] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 1021.007068][T17310] em28xx 6-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 1021.023582][T17310] em28xx 6-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 1021.032951][ T90] em28xx 6-1:0.132: Disconnecting em28xx [ 1021.290768][T17310] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 1021.313835][T17310] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 1021.343765][T17310] em28xx 6-1:0.132: No AC97 audio processor [ 1021.374437][T17310] usb 6-1: Decoder not found [ 1021.390740][T17310] em28xx 6-1:0.132: failed to create media graph [ 1021.409467][T17310] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 1021.456169][T17310] em28xx 6-1:0.132: Remote control support is not available for this card. [ 1021.473260][ T90] em28xx 6-1:0.132: Closing input extension [ 1021.529942][ T90] em28xx 6-1:0.132: Freeing device [ 1021.764270][T17899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.999467][T17899] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3046'. [ 1022.013517][T17903] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1022.067816][T17903] openvswitch: netlink: Message has 512 unknown bytes. [ 1022.076235][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3046'. [ 1022.147166][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3046'. [ 1022.178692][T17905] netlink: 'syz.5.3046': attribute type 1 has an invalid length. [ 1022.216196][T17905] netlink: 'syz.5.3046': attribute type 2 has an invalid length. [ 1022.529694][T17903] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1023.204095][T17310] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1023.419963][T17310] usb 6-1: Using ep0 maxpacket: 16 [ 1023.432840][T17310] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1023.441953][T17310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1023.473284][T17310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1023.503113][T17310] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1023.536974][T17310] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1023.571000][T17310] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1023.590635][T17310] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1023.619541][T17310] usb 6-1: Manufacturer: syz [ 1023.634985][T17310] usb 6-1: config 0 descriptor?? [ 1024.087958][T17310] rc_core: IR keymap rc-hauppauge not found [ 1024.097158][T17310] Registered IR keymap rc-empty [ 1024.108568][T17310] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1024.135082][T17310] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1024.180738][T17310] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1024.243153][T17310] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input75 [ 1024.328774][T17310] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1024.382070][T17310] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1024.414223][T17310] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1024.464355][T17310] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1024.478936][T17931] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3052'. [ 1024.496054][T17931] openvswitch: netlink: Message has 512 unknown bytes. [ 1024.524835][T17310] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1024.574190][T17310] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1024.613372][T17310] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1024.658040][T17310] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1024.698927][T17310] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1024.734202][T17310] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1024.787187][T17310] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1024.805853][T17310] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1024.829879][T17310] usb 6-1: USB disconnect, device number 61 [ 1025.027283][T17931] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1025.441563][T17943] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3054'. [ 1025.453496][T17943] openvswitch: netlink: Message has 512 unknown bytes. [ 1025.707384][T17943] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1025.834083][T17310] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1026.008062][T17310] usb 3-1: Using ep0 maxpacket: 32 [ 1026.015552][T17310] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1026.026174][T17310] usb 3-1: config 0 has no interface number 0 [ 1026.032601][T17310] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1026.060448][T17310] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1026.074696][T17310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.095653][T17310] usb 3-1: Product: syz [ 1026.104312][T17310] usb 3-1: Manufacturer: syz [ 1026.114359][T17310] usb 3-1: SerialNumber: syz [ 1026.139457][T17310] usb 3-1: config 0 descriptor?? [ 1026.170350][T17310] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1026.190261][T17310] em28xx 3-1:0.132: Video interface 132 found: [ 1026.621538][T17310] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1027.033917][T17310] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1027.088020][T17310] em28xx 3-1:0.132: board has no eeprom [ 1027.102387][T17960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1027.168110][T17960] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3059'. [ 1027.177813][T17310] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1027.194132][T17310] em28xx 3-1:0.132: analog set to bulk mode. [ 1027.208299][ T10] em28xx 3-1:0.132: Registering V4L2 extension [ 1027.234528][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3059'. [ 1027.276024][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3059'. [ 1027.318949][T17960] netlink: 'syz.5.3059': attribute type 1 has an invalid length. [ 1027.346641][T17310] usb 3-1: USB disconnect, device number 90 [ 1027.358853][T17310] em28xx 3-1:0.132: Disconnecting em28xx [ 1027.366939][T17960] netlink: 'syz.5.3059': attribute type 2 has an invalid length. [ 1027.630162][ T10] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1027.637977][ T10] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1027.670240][ T10] em28xx 3-1:0.132: No AC97 audio processor [ 1027.793072][ T10] usb 3-1: Decoder not found [ 1027.850225][ T10] em28xx 3-1:0.132: failed to create media graph [ 1027.913000][ T10] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1027.964726][T17968] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 1027.998062][ T10] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1028.037832][T17310] em28xx 3-1:0.132: Closing input extension [ 1028.046525][T17310] ================================================================== [ 1028.056253][T17310] BUG: KASAN: slab-use-after-free in media_device_unregister+0x13f/0x440 [ 1028.064771][T17310] Read of size 8 at addr ffff88807caec210 by task kworker/0:2/17310 [ 1028.072736][T17310] [ 1028.075067][T17310] CPU: 0 UID: 0 PID: 17310 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1028.075083][T17310] Tainted: [L]=SOFTLOCKUP [ 1028.075088][T17310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1028.075098][T17310] Workqueue: usb_hub_wq hub_event [ 1028.075188][T17310] Call Trace: [ 1028.075195][T17310] [ 1028.075200][T17310] dump_stack_lvl+0xe8/0x150 [ 1028.075238][T17310] print_address_description+0x55/0x1e0 [ 1028.075260][T17310] ? media_device_unregister+0x13f/0x440 [ 1028.075303][T17310] print_report+0x58/0x70 [ 1028.075316][T17310] kasan_report+0x117/0x150 [ 1028.075351][T17310] ? media_device_unregister+0x13f/0x440 [ 1028.075365][T17310] media_device_unregister+0x13f/0x440 [ 1028.075378][T17310] ? em28xx_ir_fini+0x295/0x2f0 [ 1028.075428][T17310] em28xx_release_resources+0xac/0x240 [ 1028.075463][T17310] em28xx_usb_disconnect+0x19f/0x2f0 [ 1028.075475][T17310] usb_unbind_interface+0x295/0x9f0 [ 1028.075517][T17310] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1028.075538][T17310] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1028.075554][T17310] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1028.075570][T17310] device_release_driver_internal+0x4f5/0x880 [ 1028.075628][T17310] bus_remove_device+0x444/0x560 [ 1028.075665][T17310] ? __pfx_bus_remove_device+0x10/0x10 [ 1028.075680][T17310] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1028.075690][T17310] device_del+0x524/0x8f0 [ 1028.075703][T17310] ? __pfx_device_del+0x10/0x10 [ 1028.075712][T17310] ? kobject_put+0x516/0x550 [ 1028.075772][T17310] usb_disable_device+0x3d4/0x8d0 [ 1028.075788][T17310] usb_disconnect+0x346/0x9a0 [ 1028.075803][T17310] hub_event+0x1bbb/0x4d30 [ 1028.075820][T17310] ? register_lock_class+0x31/0x2e0 [ 1028.075849][T17310] ? trace_hrtimer_start+0x82/0x200 [ 1028.075869][T17310] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1028.075880][T17310] ? __pfx_hub_event+0x10/0x10 [ 1028.075893][T17310] ? process_scheduled_works+0xa20/0x14e0 [ 1028.075912][T17310] ? rcu_is_watching+0x15/0xb0 [ 1028.075931][T17310] ? process_scheduled_works+0xa20/0x14e0 [ 1028.075941][T17310] process_scheduled_works+0xa8e/0x14e0 [ 1028.075957][T17310] ? __pfx_process_scheduled_works+0x10/0x10 [ 1028.075968][T17310] ? assign_work+0x3cf/0x5d0 [ 1028.075979][T17310] worker_thread+0xa47/0xfb0 [ 1028.075993][T17310] ? __kthread_parkme+0x71/0x1f0 [ 1028.076007][T17310] kthread+0x388/0x470 [ 1028.076021][T17310] ? __pfx_worker_thread+0x10/0x10 [ 1028.076031][T17310] ? __pfx_kthread+0x10/0x10 [ 1028.076044][T17310] ret_from_fork+0x514/0xb70 [ 1028.076065][T17310] ? __pfx_ret_from_fork+0x10/0x10 [ 1028.076078][T17310] ? __switch_to+0xc89/0x1420 [ 1028.076090][T17310] ? __pfx_kthread+0x10/0x10 [ 1028.076104][T17310] ret_from_fork_asm+0x1a/0x30 [ 1028.076116][T17310] [ 1028.076120][T17310] [ 1028.341265][T17310] Allocated by task 10: [ 1028.345413][T17310] kasan_save_track+0x3e/0x80 [ 1028.350096][T17310] __kasan_kmalloc+0x93/0xb0 [ 1028.354699][T17310] __kmalloc_cache_noprof+0x32d/0x660 [ 1028.360141][T17310] em28xx_v4l2_init+0x103/0x3300 [ 1028.365081][T17310] em28xx_init_extension+0x120/0x1d0 [ 1028.370387][T17310] process_scheduled_works+0xa8e/0x14e0 [ 1028.375927][T17310] worker_thread+0xa47/0xfb0 [ 1028.380511][T17310] kthread+0x388/0x470 [ 1028.384573][T17310] ret_from_fork+0x514/0xb70 [ 1028.389160][T17310] ret_from_fork_asm+0x1a/0x30 [ 1028.393938][T17310] [ 1028.396248][T17310] Freed by task 10: [ 1028.400039][T17310] kasan_save_track+0x3e/0x80 [ 1028.404710][T17310] kasan_save_free_info+0x40/0x50 [ 1028.409765][T17310] __kasan_slab_free+0x5c/0x80 [ 1028.414525][T17310] kfree+0x1c5/0x640 [ 1028.418407][T17310] em28xx_v4l2_init+0x1919/0x3300 [ 1028.423424][T17310] em28xx_init_extension+0x120/0x1d0 [ 1028.428701][T17310] process_scheduled_works+0xa8e/0x14e0 [ 1028.434250][T17310] worker_thread+0xa47/0xfb0 [ 1028.438856][T17310] kthread+0x388/0x470 [ 1028.442937][T17310] ret_from_fork+0x514/0xb70 [ 1028.447544][T17310] ret_from_fork_asm+0x1a/0x30 [ 1028.452311][T17310] [ 1028.454629][T17310] The buggy address belongs to the object at ffff88807caec000 [ 1028.454629][T17310] which belongs to the cache kmalloc-8k of size 8192 [ 1028.468681][T17310] The buggy address is located 528 bytes inside of [ 1028.468681][T17310] freed 8192-byte region [ffff88807caec000, ffff88807caee000) [ 1028.483008][T17310] [ 1028.485333][T17310] The buggy address belongs to the physical page: [ 1028.491761][T17310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cae8 [ 1028.500540][T17310] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1028.509048][T17310] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1028.516587][T17310] page_type: f5(slab) [ 1028.520565][T17310] raw: 00fff00000000040 ffff88801b005280 dead000000000100 dead000000000122 [ 1028.529151][T17310] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1028.537732][T17310] head: 00fff00000000040 ffff88801b005280 dead000000000100 dead000000000122 [ 1028.546402][T17310] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1028.555079][T17310] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1028.563850][T17310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1028.572552][T17310] page dumped because: kasan: bad access detected [ 1028.579081][T17310] page_owner tracks the page as allocated [ 1028.584801][T17310] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5267, tgid 5267 (S30dbus), ts 48849398778, free_ts 48768047924 [ 1028.604956][T17310] post_alloc_hook+0x1f9/0x250 [ 1028.609846][T17310] get_page_from_freelist+0x21fa/0x2270 [ 1028.615390][T17310] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1028.621200][T17310] allocate_slab+0x79/0x5e0 [ 1028.625717][T17310] refill_objects+0x2d5/0x350 [ 1028.630425][T17310] __pcs_replace_empty_main+0x2bf/0x6b0 [ 1028.636208][T17310] __kmalloc_cache_noprof+0x3a7/0x660 [ 1028.641590][T17310] tomoyo_init_log+0x112e/0x1fa0 [ 1028.646635][T17310] tomoyo_supervisor+0x35f/0x1560 [ 1028.651664][T17310] tomoyo_env_perm+0x151/0x1f0 [ 1028.656432][T17310] tomoyo_find_next_domain+0x1332/0x1a90 [ 1028.662117][T17310] tomoyo_bprm_check_security+0x11b/0x180 [ 1028.667916][T17310] security_bprm_check+0x85/0x240 [ 1028.672978][T17310] bprm_execve+0x918/0x1630 [ 1028.677504][T17310] do_execveat_common+0x4f4/0x670 [ 1028.682530][T17310] __x64_sys_execve+0x97/0xc0 [ 1028.687207][T17310] page last free pid 5264 tgid 5264 stack trace: [ 1028.693522][T17310] __free_frozen_pages+0xc1e/0xd10 [ 1028.698628][T17310] __slab_free+0x274/0x2c0 [ 1028.703035][T17310] qlist_free_all+0x99/0x100 [ 1028.707619][T17310] kasan_quarantine_reduce+0x148/0x160 [ 1028.713067][T17310] __kasan_slab_alloc+0x22/0x80 [ 1028.717917][T17310] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 1028.723371][T17310] vm_area_dup+0x28/0x670 [ 1028.727690][T17310] dup_mmap+0x8a2/0x1d90 [ 1028.731988][T17310] copy_mm+0x11a/0x480 [ 1028.736067][T17310] copy_process+0x1e3e/0x4390 [ 1028.740733][T17310] kernel_clone+0x2d7/0x940 [ 1028.745222][T17310] __x64_sys_clone+0x1b6/0x230 [ 1028.749976][T17310] do_syscall_64+0x174/0x580 [ 1028.754670][T17310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.760620][T17310] [ 1028.762929][T17310] Memory state around the buggy address: [ 1028.768711][T17310] ffff88807caec100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1028.776775][T17310] ffff88807caec180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1028.784824][T17310] >ffff88807caec200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1028.792903][T17310] ^ [ 1028.797477][T17310] ffff88807caec280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1028.805520][T17310] ffff88807caec300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1028.813564][T17310] ================================================================== [ 1028.824081][T17968] PKCS7: Only support pkcs7_signedData type [ 1028.843743][T17973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.014418][T17310] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1029.021644][T17310] CPU: 0 UID: 0 PID: 17310 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.032922][T17310] Tainted: [L]=SOFTLOCKUP [ 1029.037349][T17310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1029.047420][T17310] Workqueue: usb_hub_wq hub_event [ 1029.052513][T17310] Call Trace: [ 1029.055814][T17310] [ 1029.058752][T17310] vpanic+0x56c/0xa60 [ 1029.062796][T17310] ? __pfx_vpanic+0x10/0x10 [ 1029.067316][T17310] ? __pfx___schedule+0x10/0x10 [ 1029.072289][T17310] panic+0xc5/0xd0 [ 1029.076030][T17310] ? __pfx_panic+0x10/0x10 [ 1029.080470][T17310] ? preempt_schedule_thunk+0x16/0x40 [ 1029.085862][T17310] ? media_device_unregister+0x13f/0x440 [ 1029.091541][T17310] check_panic_on_warn+0x89/0xb0 [ 1029.096524][T17310] ? media_device_unregister+0x13f/0x440 [ 1029.102179][T17310] end_report+0x73/0x170 [ 1029.106442][T17310] ? media_device_unregister+0x13f/0x440 [ 1029.112085][T17310] kasan_report+0x128/0x150 [ 1029.116814][T17310] ? media_device_unregister+0x13f/0x440 [ 1029.122789][T17310] media_device_unregister+0x13f/0x440 [ 1029.128273][T17310] ? em28xx_ir_fini+0x295/0x2f0 [ 1029.133147][T17310] em28xx_release_resources+0xac/0x240 [ 1029.138620][T17310] em28xx_usb_disconnect+0x19f/0x2f0 [ 1029.143926][T17310] usb_unbind_interface+0x295/0x9f0 [ 1029.149144][T17310] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1029.154875][T17310] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1029.160605][T17310] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1029.166348][T17310] device_release_driver_internal+0x4f5/0x880 [ 1029.172474][T17310] bus_remove_device+0x444/0x560 [ 1029.177439][T17310] ? __pfx_bus_remove_device+0x10/0x10 [ 1029.182920][T17310] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1029.188645][T17310] device_del+0x524/0x8f0 [ 1029.192985][T17310] ? __pfx_device_del+0x10/0x10 [ 1029.197847][T17310] ? kobject_put+0x516/0x550 [ 1029.202459][T17310] usb_disable_device+0x3d4/0x8d0 [ 1029.207596][T17310] usb_disconnect+0x346/0x9a0 [ 1029.212290][T17310] hub_event+0x1bbb/0x4d30 [ 1029.216724][T17310] ? register_lock_class+0x31/0x2e0 [ 1029.221940][T17310] ? trace_hrtimer_start+0x82/0x200 [ 1029.227160][T17310] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1029.232547][T17310] ? __pfx_hub_event+0x10/0x10 [ 1029.237324][T17310] ? process_scheduled_works+0xa20/0x14e0 [ 1029.243059][T17310] ? rcu_is_watching+0x15/0xb0 [ 1029.247845][T17310] ? process_scheduled_works+0xa20/0x14e0 [ 1029.253576][T17310] process_scheduled_works+0xa8e/0x14e0 [ 1029.259143][T17310] ? __pfx_process_scheduled_works+0x10/0x10 [ 1029.265150][T17310] ? assign_work+0x3cf/0x5d0 [ 1029.269749][T17310] worker_thread+0xa47/0xfb0 [ 1029.274358][T17310] ? __kthread_parkme+0x71/0x1f0 [ 1029.279317][T17310] kthread+0x388/0x470 [ 1029.283403][T17310] ? __pfx_worker_thread+0x10/0x10 [ 1029.288532][T17310] ? __pfx_kthread+0x10/0x10 [ 1029.293155][T17310] ret_from_fork+0x514/0xb70 [ 1029.297771][T17310] ? __pfx_ret_from_fork+0x10/0x10 [ 1029.302913][T17310] ? __switch_to+0xc89/0x1420 [ 1029.307610][T17310] ? __pfx_kthread+0x10/0x10 [ 1029.312220][T17310] ret_from_fork_asm+0x1a/0x30 [ 1029.316999][T17310] [ 1029.320337][T17310] Kernel Offset: disabled [ 1029.324674][T17310] Rebooting in 86400 seconds..