last executing test programs: 18m57.400412415s ago: executing program 0 (id=636): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) prctl$PR_CAPBSET_READ(0x17, 0x1b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x384, 0x1ec, 0x0, 0x94, 0x2c0, 0x94, 0x354, 0x354, 0x354, 0x354, 0x354, 0x6, 0x0, {[{{@ip={@local, @empty, 0xffffff00, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1, 0x76}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x40}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x1, @multicast1}}}, {{@ip={@remote, @remote, 0xffffff00, 0x0, 'veth0_virt_wifi\x00', 'pimreg1\x00', {0xff}, {}, 0x62, 0x2, 0x33}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@multicast2, @loopback, 0xff, 0xffffff00, 'veth1_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x0, 0x1, 0x36}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xffffff00, 0x0, 'bond0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x1, 0x80}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0xfffffffd}}}}, 0x3e0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000002c0)=0x3) 18m56.744763355s ago: executing program 0 (id=640): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@host, 0xffffffff}, 0x0, 0x1, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000040)={&(0x7f0000000780)=[0x0, 0x8, 0x3, 0x9, 0x340b, 0xe4, 0xfffffff8, 0xa8e, 0xffffe907, 0xd, 0x6, 0xffffffa5, 0xfffffff8, 0x44, 0x1, 0x10000, 0x6, 0x8, 0x7, 0x8, 0x100, 0xff, 0x6, 0x3, 0xbb48976c, 0xa, 0x4, 0x3, 0xfd, 0xd5, 0x4, 0xdcb7, 0xfffffffb, 0x1, 0x3b7, 0x2800000, 0x401, 0x0, 0x1ff, 0x6, 0x8, 0x0, 0x4, 0x7, 0x4, 0x8, 0xd, 0x8, 0x1, 0x3, 0x0, 0xfff, 0x3ff, 0x2, 0x7, 0x2, 0x0, 0x81, 0x7, 0x1, 0x0, 0x9, 0x5, 0xb, 0x2, 0x6, 0x9, 0x5, 0x9, 0x40, 0x5, 0x4062, 0x8000, 0x7, 0x800, 0x40, 0x9, 0x3, 0x8, 0x8, 0x2, 0xfffffff3, 0x3f, 0xd, 0x1ff, 0xfffffffe, 0xffffffca, 0x7f, 0x0, 0x942, 0xffffffff, 0x2, 0x7, 0x5, 0x2, 0x8, 0x2, 0xee46, 0xffffffff, 0x200, 0x8280, 0x5, 0x9, 0xee, 0x54, 0x1, 0x6427, 0xb, 0x81, 0x5, 0x9, 0x9, 0xc2, 0x7, 0x7ff, 0xffff, 0x100, 0xfffffffb, 0x4, 0x4d, 0x5, 0x9, 0x8, 0x9, 0xe, 0x7, 0x4, 0x4, 0xa8db, 0x5, 0xd6f, 0x4, 0x0, 0x5, 0x120000, 0x0, 0x8, 0x10, 0x1ad8, 0x5, 0x8, 0x9, 0x7ff, 0x9, 0x0, 0x80, 0x1, 0x0, 0x9, 0x1, 0xd, 0xffffff01, 0x3, 0x3, 0xfffffffc, 0x5, 0x6ed, 0x5, 0x1, 0x1, 0x0, 0x4, 0xff, 0x14000000, 0x6, 0x400, 0x8a67, 0x4, 0x5, 0x4, 0x80000000, 0xfffffffc, 0x400, 0x1, 0x3, 0x4, 0x6, 0xf, 0xff, 0x5, 0x17e, 0x1, 0x7, 0xb8d5, 0x7, 0x87eb, 0xfffffffc, 0x3, 0x80000001, 0x7, 0x0, 0x3ff, 0x6315, 0x2, 0xfffffff8, 0x1, 0xffffffff, 0xfffffffd, 0xc5c, 0x10000, 0x9, 0x2, 0x3, 0x0, 0x633, 0x1, 0x8000, 0x9, 0x0, 0x0, 0x8001, 0xfffffff9, 0x6, 0x80, 0x5, 0x10001, 0xec, 0xf, 0x5, 0x1, 0x2, 0x9d, 0x4000000, 0x80000001, 0x8, 0xff, 0x6, 0x1, 0x81, 0x9deb, 0x1, 0x5, 0x9, 0x459, 0x480, 0xb3, 0x4, 0x641, 0x2, 0xf, 0x9, 0x9, 0x3, 0x505, 0xffff0001, 0x6, 0xfffffff8, 0x7, 0xfce, 0xdf0, 0x2, 0x1, 0x18d0, 0x1eb, 0x7a6d, 0x3, 0x2, 0x6, 0x3, 0x81, 0x7, 0xffffffff, 0x1600, 0xc1, 0x6fb4, 0x7, 0x5, 0x0, 0x80, 0xd57, 0x0, 0x811, 0x1, 0x7c, 0x2, 0xbb4, 0x5ae4, 0x2, 0x4578, 0x94e, 0x7, 0x40, 0xef4a, 0x3, 0x0, 0xfffffe01, 0x7, 0xe97, 0x0, 0x8001, 0x7, 0x10000, 0x6, 0x4, 0x400, 0x1, 0x7, 0x4, 0x3, 0x10, 0x2, 0x14000, 0xffffffff, 0x5, 0x687824e7, 0x2, 0xfffff001, 0x7, 0x3, 0x3ff, 0x0, 0x10000, 0x98, 0x3, 0x0, 0x1, 0xa, 0xec2, 0x3ff, 0x7, 0x5, 0x2ba, 0xee, 0x1, 0x8, 0x2, 0x9, 0x4, 0x10, 0x6, 0x9, 0x3, 0x1, 0x0, 0x39e, 0x1, 0x2, 0x1, 0x4, 0x800, 0xff, 0x7, 0x7e8, 0x0, 0x2c7b, 0x2, 0x3, 0x400, 0xe, 0x8, 0xf, 0x9, 0x5484, 0x7, 0x1, 0x10001, 0x3, 0x5, 0x8, 0x1, 0x7fff, 0x4, 0x7, 0xffff, 0x1, 0xfff, 0x9, 0xb0, 0x7, 0x4, 0xffffff01, 0x7, 0x2, 0x5, 0xab20, 0x7, 0x0, 0x1, 0xffffffff, 0x0, 0x400, 0xa, 0xd5, 0x19a90000, 0xecf8, 0x88, 0x8, 0xffffffff, 0x7, 0x3, 0x0, 0x5, 0x101, 0xb, 0x0, 0x2, 0x3ff, 0xfff, 0xf580, 0x0, 0x1, 0x5, 0x5, 0x9, 0x3, 0x1, 0x2, 0x8, 0x46c, 0x2, 0x100, 0x1ff, 0xfffff957, 0x7, 0x0, 0x4, 0x0, 0x8e6, 0x7fff, 0x3, 0xe, 0x8, 0x0, 0x100, 0x9, 0x7, 0x0, 0x9, 0x8, 0x0, 0xf, 0xffff, 0x200, 0x2, 0x100, 0x8, 0x1c, 0x2, 0x2, 0x2, 0xb, 0x3, 0x1, 0xdd7f, 0x80000000, 0x8000000, 0x8, 0x9, 0x4, 0x5, 0xfffffffc, 0x80000000, 0x5, 0x0, 0x5, 0x401, 0x3, 0x4, 0x6, 0x5, 0x200, 0x0, 0x2, 0x7, 0x8001, 0x1ff, 0x679, 0x2, 0x401, 0x2, 0x2, 0xffff8000, 0x80000000, 0x2, 0x9, 0x0, 0x3ff, 0x7, 0x9, 0x6, 0x6, 0x8, 0x1, 0xfc81, 0xfffffff8, 0x6, 0xffffff81, 0x1, 0x5, 0x5, 0x0, 0x6, 0x6, 0x2, 0xdd, 0x1, 0x7, 0xf, 0x2, 0x0, 0x7, 0x1, 0x8, 0x10001, 0x8, 0xfff, 0xa6, 0x1, 0x4, 0x8547, 0x7, 0x3ff, 0x4, 0x81, 0x7, 0x7d0e93d7, 0x8000, 0x9, 0x3, 0x3, 0x2, 0x8, 0x121, 0xe8, 0x166b, 0x8000, 0x400, 0x9, 0x6, 0x9, 0x3, 0x5, 0x5, 0x4, 0x2f, 0x75, 0x7fff, 0x1, 0x5, 0x4, 0x14, 0x2, 0x15da, 0xa79, 0x34, 0x0, 0x7, 0x2, 0x3, 0xfffffff5, 0x7fffffff, 0x809b, 0x3, 0x1, 0x3ff, 0x1, 0x7929, 0xffffff81, 0x4fc, 0x4000800, 0x53da, 0x9, 0x2, 0x8, 0x2253, 0x800, 0x1, 0xe, 0xa26b, 0x9, 0x254, 0x6, 0x7, 0x400, 0x8, 0x9, 0xb9, 0x8, 0x4b, 0x3, 0xf, 0xac, 0x3, 0x2, 0x0, 0xff, 0x10, 0x2000000, 0x8, 0x7fffffff, 0x10001, 0x2, 0x2, 0x7, 0x8001, 0xfffffffc, 0x3, 0x245, 0x0, 0x8, 0xe, 0x19cd, 0xe, 0x5, 0xfffffffa, 0x6, 0x7, 0xfff, 0xe, 0xf1, 0x8, 0x4000, 0x0, 0x1, 0x919, 0xa514, 0x9, 0x3, 0x5, 0x5, 0x2, 0x800, 0x1, 0x40, 0x7, 0x5, 0x3, 0x8, 0x1ae2, 0x3, 0x800, 0xb, 0x0, 0xa, 0x220e, 0x8, 0x7, 0x7, 0x3, 0x800, 0xc, 0x0, 0x178b, 0x75474156, 0x7, 0x1000, 0x6, 0x7284, 0x7, 0xa25, 0x4, 0xfffffffd, 0x2, 0x20000000, 0x3, 0x8, 0x35, 0x0, 0x8000, 0x1, 0x0, 0x40, 0x7, 0x5, 0x400, 0x86ae, 0x6, 0x401, 0x2, 0x9, 0x7, 0x7ff, 0x7ff, 0x0, 0x100, 0x7, 0x3, 0x2, 0x1000, 0x5, 0x6, 0x6, 0x3, 0x3ff, 0x800, 0x7fffffff, 0x6, 0x7, 0x4, 0xfffffffb, 0x8, 0x40, 0x200, 0x4, 0x0, 0x7ff, 0x632, 0x5, 0x0, 0x47f1, 0x3ff, 0x7, 0x7, 0x1, 0x80, 0x0, 0x5, 0x101, 0x2, 0x0, 0x8, 0x6, 0xffffffff, 0x54eb, 0x2, 0x85, 0x4, 0x80000000, 0x3, 0x7, 0x1, 0x63fcaef, 0x4, 0x4, 0x0, 0xe27, 0xf1, 0x100, 0x7, 0x5, 0x7ff, 0x0, 0x7f80, 0x7, 0x80, 0x3, 0x1c, 0x9, 0x12000, 0x5, 0x4, 0x2, 0x4, 0xea6, 0x5, 0x24000, 0x8, 0x69, 0x976, 0x3, 0x1, 0xffffffff, 0x16c, 0x88, 0x6, 0x424, 0x80, 0x1, 0x30000000, 0x47, 0x6, 0x9, 0x9, 0x5, 0xb, 0x3, 0x8, 0x9, 0x7, 0x4, 0x70e, 0xffff0000, 0xf, 0x7, 0x2, 0x3fb5, 0x1ff, 0x80000000, 0x40, 0xaef, 0x1afb, 0xb, 0x1, 0x2, 0x8, 0x71, 0x6, 0xfff, 0x4, 0x10, 0x857, 0x4, 0x0, 0x37, 0x1, 0x4, 0x7, 0x9, 0x1, 0x9, 0x200, 0x5, 0xbc4, 0x100, 0x101, 0x9, 0x2, 0x7, 0x6, 0x8, 0x5, 0xe6, 0x7, 0x80000000, 0x35, 0x200, 0x3, 0x8, 0x4, 0x9, 0x9, 0x5, 0x3, 0x80000001, 0x8, 0x1, 0x4162, 0x4f3, 0x2, 0x8001, 0x9, 0x8, 0xf19, 0x8000, 0x5, 0x8, 0x6, 0x47f4, 0x1, 0x872e, 0x5, 0xcca, 0x7, 0x7fffffff, 0xff, 0x80, 0x10001, 0x6, 0xe374, 0x80000001, 0xff, 0x4, 0x800, 0x6, 0x3, 0x918e, 0x8001, 0x7, 0x761d, 0xfff, 0xc0000000, 0x1a, 0x5, 0x2, 0x3ac1453f, 0x7, 0x1, 0xd, 0x3ff, 0x1, 0x3, 0x7, 0x1a, 0xfffff000, 0x2, 0xe, 0xc90, 0x200, 0x3, 0x69f, 0x7, 0x8, 0x1fd, 0x80be, 0xe, 0x8, 0x2, 0x5, 0x3, 0x3, 0x2, 0x6, 0x5, 0x2, 0x18, 0x0, 0x40, 0xb, 0xfffff001, 0x5, 0x6, 0xdaa, 0x401, 0x519f, 0x5, 0x694, 0x4, 0x9, 0x6, 0x3, 0x2, 0x6, 0x7, 0x80000000, 0xd8, 0x9, 0xcb41, 0x800, 0xffffffff, 0x3, 0x9, 0xffff, 0xfffffff1, 0x800, 0x6, 0x1, 0xc0, 0xc5c, 0x4, 0x80, 0x4, 0x5, 0x200, 0xd, 0xfffffffb, 0x7, 0xb5, 0x8000000, 0xf, 0x88d, 0x80000001, 0x5, 0xfff, 0x3, 0x0, 0x9, 0xb42e, 0x3, 0x5, 0x7, 0x80b8, 0x9, 0xf59, 0x7f, 0x9, 0x401, 0x3, 0x6, 0x9, 0x1000, 0x1a8d, 0x4, 0x0, 0x2, 0x8, 0xd, 0xfffffff9, 0x2e6, 0x6, 0x4, 0x3, 0x1, 0x9, 0x0, 0x3, 0x0, 0x1, 0x400, 0x100, 0x0, 0xfffffff7, 0x4, 0x10, 0x80000, 0x6, 0x0, 0x80, 0xd, 0xffffffff, 0x0, 0x7, 0x5, 0x80000001, 0x8, 0x6, 0x36, 0xe144, 0x7, 0x8, 0x9, 0xfffffffc, 0x4, 0x6, 0x2, 0x81, 0x9, 0xfffff800, 0x3, 0x4, 0x9, 0x8, 0xfffffe00, 0x2, 0x9, 0x3, 0x288, 0x0, 0x7ff, 0x40000000, 0x3ff, 0x9c, 0x7ff, 0x67e], 0x6, 0x400, 0xff}) 18m56.407973121s ago: executing program 0 (id=644): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) openat$vsock(0xffffffffffffff9c, 0x0, 0x101080, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16], 0x0) 18m54.662601136s ago: executing program 0 (id=659): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xff, 0xc, 0x68, 0x10, 0x46d, 0x840, 0x2c30, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x41, 0x0, 0x0, 0x9d, 0xe3, 0x84}}]}}]}}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x1001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x381, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x800, 0x3}, 0x7, 0x1, 'id0\x00', 'timer0\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 18m49.811132215s ago: executing program 0 (id=669): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000700), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14}}, 0x74}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@v={0x93, 0xd, 0x90, 0x1d, @generic=0x5, 0x6, 0x4}) io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0]) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r4, &(0x7f00000022c0)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03da8c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c0c7ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528f04000000ec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f976ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b1645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc201000000b7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a1298062004b1c23126eeb1b15cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c3d60f01fcacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fa4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18007b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc6070000000000000000000a00", 0x1000}}, 0x1006) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x7a, 0xdd, 0x15, 0x20, 0x545, 0x8080, 0x301, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x62, 0x0, 0x0, 0xa1, 0xc3, 0x85}}]}}]}}, 0x0) 18m49.093144751s ago: executing program 0 (id=676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 18m48.647077077s ago: executing program 32 (id=676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 5.593070582s ago: executing program 3 (id=5642): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="7110b7000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2000000}, 0x94) 5.314549635s ago: executing program 3 (id=5643): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0xa0000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x22020400) unshare(0x20020000) memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\x02\xea\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\r\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xc4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb<3\xaf\xcb\x8cP\xef\x84\x91\x87\x8b\xb5Z\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\xebR\xc0\xc6\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f?\x00\x00\x00\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xd5\x01\x1b\xd1\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x1b\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa4\x85G\'+\xcc\xbf\r\xa9\x10Klb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fE\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93y\x9d\xc4K mC\x97\x1c\x91\xd7\xf3\x13)`\xfb\xbf\xd3\xcc\x8d\x0e\x1f\x80\x0f\xcag\xd5J\xd7\x99\x02B\xd9\xdb;\xbd\x05\xc8\x9a\xe9(\xb7\xd1\xce\xba\xf8\xc0\x1fPc\x8d\xfceY\xf8j9\xc4\v\xb5\x82\xbaI,\xf5\xbd\a\a\xa2\x83\x99]/@\xbc(*v%\xa1\xd9\xfb\v\xdc\xed\xa3\x93\x16\x0e\xa8\x96\x10\xfc\xae\xc6X@f\x17\xf4\xb78\xa6\n\xaa\xe5m5\x9d\x14\xd7\x91Q\xb5\x11\x88\x89i\x94,]\x91\x13\xa6~O\xcdV\xf36,\x8a\xc9P\xbd\xf6\x16\x99_\x01\x0f0/\xe1Yi\x00=nz\x1d\xbd\xb0\x85W\xeaU\xea\x03)!\xf2\xfa\x04\xecf\xad\xb5\x94\x97\xbb\xae7\xbf\vQpi\xf3x\x80\xf0\xd3B\x17\xbc\xf2H\xeej\xc4\xdd\xb31\xdc\xb3\x19\x12<\xf7\xca\x12\x86\x15kZ\xb4t\x87;\xfb\x97\xc6\xb4\xf5\xa6\x9b-|EW$\x0e\xb2\xef\xebW/\xff`)M\xe3\x99\xe5\xe2M\x8dxD\xbf!\b\xf4o-\xab\xe0\x1eN\xdb\x94x\xe9:\x92#\x80\x91\xc0\x04\xfd}\xd6\xd6\x0f4/\x13\xf2q\xbc&\xd0p\xe6\xe6\x01V\xf3Lc\xfd\"\xa5V\xce\x9b\xd9\xd3\xc2(Q+\xd0\x00\x00\x00\x00\xf9\x17\n\x9bHw\xfb1\x8e\xa0^\xe0\xbd\xfa\xb8\x9f\xb3~\xab\x1c\x85\x85\x91\xa6\xba\xc9\x81\xaa\xfc<\x18\xf0\xb7\xe0\x95,F\x94\x89\x13\xc1\xad\xaeU\x8bb\xbbc\xa1\xb7a5\xf2\"\xb0\xfb\x1c7ZH\x96\xc66\xd5\xe6r\x19\xb4\xd0\x80\'`\x8a\xe9.\a\xa6g\x13\xe5\t\x11', 0x6) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x63c, 0x0, 0x350, 0x350, 0x0, 0x230, 0x574, 0x574, 0x574, 0x574, 0x574, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd8, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0x2, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x1, 0x5}, 0x0, 0xec, 0x158, 0x0, {}, [@common=@eui64={{0x24}}, @common=@eui64={{0x24}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x100, 0x8, 0x6, 0x0, 0x0, "0b4d66201b7f50ed57f1663b9b29deec512f5da08f075fb1aa98c112a228cfe2a51e125958d417d11d83dfffe2f80649394edfbb1726f30822ae3a997d5146f5"}}}, {{@uncond, 0x0, 0xec, 0x120, 0x48000000, {}, [@inet=@rpfilter={{0x24}, {0xb}}, @common=@mh={{0x24}, {"31f2", 0x1}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x0, 0x3, 0x6}, {0x3, 0x1}, 0x851, 0xe537}}}, {{@uncond, 0x0, 0xc8, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xc}}]}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@empty, 0x6, 0x13, 0xe}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@srh={{0x2c}, {0x62, 0x8, 0xa, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x24}, {0x6}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x698) 5.190052944s ago: executing program 2 (id=5645): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@ipv4_delroute={0x2c, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x1000000}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_DST={0x8, 0x1, @dev}]}, 0x2c}}, 0x404) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 5.058222778s ago: executing program 3 (id=5646): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') pipe(&(0x7f0000000040)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002200)={0x10, 0x8000000000000004}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000030700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 4.815145611s ago: executing program 2 (id=5647): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a4ac0d0", 0x5}, {&(0x7f0000000400)="9ffd729dbae96124252639abd7540abd68f6013d24bf653c416382d8c61fb3c9369fc5cba020b12d1e50640cd4f91dced996db5bddd9f42d750099be8321db18e6f9794b4b3030de9c27e217d2c6ac1eb99f7f76e16b51c4e3c7bb527e62c78f7dabb2d9e6f9b32ddbae71b12521735dd1f00d9dc753a274e6a50393d0fef6dddce0064b3d20220fe05517904304ced6505d0bb0e97a0dfba5331d2605fb795c71f350f6", 0xa4}], 0x2) 4.546558043s ago: executing program 3 (id=5648): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000480)={0x5c}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) shutdown(r4, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x400000) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000180)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021800060c000000000000000000000005001700000000000a0000000000000000040000000000000000000000000000000000000000000005001a00ff000000000000000000000000000001fc02000000000000000000000000000029001010"], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 4.342380784s ago: executing program 1 (id=5650): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'veth0\x00', {'macvtap0\x00'}, 0x1}) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x200000c, 0x10000000}}, 0x10) io_uring_enter(0xffffffffffffffff, 0x49b0, 0x6, 0x10, &(0x7f0000000080)={[0xfff, 0xfa]}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg1\x00'}) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1fb553244e946098, {{0x41, 0x200000c}, 0x1}}, 0x10) 3.995731673s ago: executing program 1 (id=5652): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x4000840) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r6}) keyctl$link(0x8, r6, r5) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000001e00)=""/218, &(0x7f0000001f00)=0xda) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [], "578e0e048d23cf66029067c74a20dc68d161baf5682a678673d745cab12ff3ba"}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 3.530481088s ago: executing program 4 (id=5653): syz_usb_connect(0x3, 0x3f, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="ce99e3be79fe4f04aa9b8d87fb6e212850c4178d1f7b21c06bf1e2a794fedefd4ce638b8457cca216e7d2b4c90b31ac17ee0dfd587dfa3f15c30305e88a939c5c165cbe8860346c85fd0732c43f5dbb330764000160dd6e0a30c2f7187d98b02283644bebc41247b01eb4747f613c93b6cc8a5c261f8cbf1039246a6e2232bf71d59ef7598f3fbc848713b9032854e4c2dec03f3794eed99969a2b0ac35e48458c2e36f194bd6fdc446c4ea5144dfcf2a3c876da9cdc3bdb5f21956ee14f11dff602e27e053391e25ce0a19eaa2419b635c428487da6039debebb39168fc719316", @ANYBLOB="31172fe28d3d445ae4f065266d76464afe131be2734292cbc373270b13f224c06a6f0bf98c0411e6030e9fe0fa3c6fdc826ac3a9ea5e6aa89424063e3597ed2e7d6f00424b88bb2035", @ANYRES16=0x0, @ANYRESHEX], 0x0) 3.369365776s ago: executing program 3 (id=5654): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003ad7000000bd7000fcffffff0d00000008000300", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200000d3}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0x2000c5fb, @value=0x3}) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc5b848d6fa38f7956549438addc5e", 0x70, 0xfffffffffffffffe) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x30) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r5, 0x402, 0x40000029) fcntl$notify(r4, 0x402, 0x1c) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x1a) open(&(0x7f0000000140)='./bus\x00', 0x141bc2, 0x1c0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f00000002c0)=""/84, 0x54, 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x5, 0x8641) 3.178712894s ago: executing program 5 (id=5656): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0xa0000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x22020400) unshare(0x20020000) memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\x02\xea\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\r\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xc4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb<3\xaf\xcb\x8cP\xef\x84\x91\x87\x8b\xb5Z\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\xebR\xc0\xc6\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f?\x00\x00\x00\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xd5\x01\x1b\xd1\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x1b\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa4\x85G\'+\xcc\xbf\r\xa9\x10Klb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fE\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93y\x9d\xc4K mC\x97\x1c\x91\xd7\xf3\x13)`\xfb\xbf\xd3\xcc\x8d\x0e\x1f\x80\x0f\xcag\xd5J\xd7\x99\x02B\xd9\xdb;\xbd\x05\xc8\x9a\xe9(\xb7\xd1\xce\xba\xf8\xc0\x1fPc\x8d\xfceY\xf8j9\xc4\v\xb5\x82\xbaI,\xf5\xbd\a\a\xa2\x83\x99]/@\xbc(*v%\xa1\xd9\xfb\v\xdc\xed\xa3\x93\x16\x0e\xa8\x96\x10\xfc\xae\xc6X@f\x17\xf4\xb78\xa6\n\xaa\xe5m5\x9d\x14\xd7\x91Q\xb5\x11\x88\x89i\x94,]\x91\x13\xa6~O\xcdV\xf36,\x8a\xc9P\xbd\xf6\x16\x99_\x01\x0f0/\xe1Yi\x00=nz\x1d\xbd\xb0\x85W\xeaU\xea\x03)!\xf2\xfa\x04\xecf\xad\xb5\x94\x97\xbb\xae7\xbf\vQpi\xf3x\x80\xf0\xd3B\x17\xbc\xf2H\xeej\xc4\xdd\xb31\xdc\xb3\x19\x12<\xf7\xca\x12\x86\x15kZ\xb4t\x87;\xfb\x97\xc6\xb4\xf5\xa6\x9b-|EW$\x0e\xb2\xef\xebW/\xff`)M\xe3\x99\xe5\xe2M\x8dxD\xbf!\b\xf4o-\xab\xe0\x1eN\xdb\x94x\xe9:\x92#\x80\x91\xc0\x04\xfd}\xd6\xd6\x0f4/\x13\xf2q\xbc&\xd0p\xe6\xe6\x01V\xf3Lc\xfd\"\xa5V\xce\x9b\xd9\xd3\xc2(Q+\xd0\x00\x00\x00\x00\xf9\x17\n\x9bHw\xfb1\x8e\xa0^\xe0\xbd\xfa\xb8\x9f\xb3~\xab\x1c\x85\x85\x91\xa6\xba\xc9\x81\xaa\xfc<\x18\xf0\xb7\xe0\x95,F\x94\x89\x13\xc1\xad\xaeU\x8bb\xbbc\xa1\xb7a5\xf2\"\xb0\xfb\x1c7ZH\x96\xc66\xd5\xe6r\x19\xb4\xd0\x80\'`\x8a\xe9.\a\xa6g\x13\xe5\t\x11', 0x6) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x63c, 0x0, 0x350, 0x350, 0x0, 0x230, 0x574, 0x574, 0x574, 0x574, 0x574, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd8, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0x2, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x1, 0x5}, 0x0, 0xec, 0x158, 0x0, {}, [@common=@eui64={{0x24}}, @common=@eui64={{0x24}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x100, 0x8, 0x6, 0x0, 0x0, "0b4d66201b7f50ed57f1663b9b29deec512f5da08f075fb1aa98c112a228cfe2a51e125958d417d11d83dfffe2f80649394edfbb1726f30822ae3a997d5146f5"}}}, {{@uncond, 0x0, 0xec, 0x120, 0x48000000, {}, [@inet=@rpfilter={{0x24}, {0xb}}, @common=@mh={{0x24}, {"31f2", 0x1}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x0, 0x3, 0x6}, {0x3, 0x1}, 0x851, 0xe537}}}, {{@uncond, 0x0, 0xc8, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xc}}]}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@empty, 0x6, 0x13, 0xe}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@srh={{0x2c}, {0x62, 0x8, 0xa, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x24}, {0x6}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x698) 3.071861814s ago: executing program 5 (id=5657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mbind(&(0x7f00004c2000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1fc9, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xbbe7}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004d9000/0x2000)=nil) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x3ff, 0x2}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) unshare(0x400) r7 = socket(0x840000000002, 0x3, 0xfa) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c000040000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef) mlock2(&(0x7f00008cd000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2.888468223s ago: executing program 2 (id=5658): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001a80)={'#! ', './file1/../file0', [{0x20, '\xeb)\'-!'}, {}, {0x20, '-*.\x1f'}, {0x20, '!\\\\\'#'}, {}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '/dev/loop#\x00'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfc"}, 0xd0) write$binfmt_script(r1, &(0x7f0000001c40)={'#! ', './file1/../file0', [{0x20, '\xce/d&6\xfa\x17o\x8e\xb1\xb3\xf7\xec\x1dev\x1e?kvm'}, {0x20, 'f\xce\x01\x00\xc7\xbb\xb5\xb7\x01\xfb\x03\x92\xa7,x\x9f\xfc4(\xa4\x7f@\xdc\x0f\xbe\x0fs\xea6\xe4\xbf\\\x12\x19pnm;\xcfM\x00\x00\x00\x00\x7f|7\xf7\x10\x93\x85\x18S\xa0x\xc0\xcf>\xad\xf6c\x0f\x0f\x03\f\x15\x1c\xb3ei\\'}], 0xa, "0002784148b29e7bcaf3e29c2593b929f38d08de9a57967d49c269445df5a02a484a4fff1f05bbd60b043247a4e72e4f0bedb7c930aa4ab1e46695c1fb6ce947a12539fd90c30a1de6c9c3f7d33fc18866cb172e469352b6ba03830dbcf172d1f7cf467bf6bea0cf4c0aa3cc8e"}, 0xdf) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x17, 0x1c, "fee8a2ab78fc5e36d1392583e42000001ea89de2b7fb0000e60080b8785d960001000000000007000000000000000000000000000090ac712500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2.774376967s ago: executing program 4 (id=5659): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x7f, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @private=0xa010100, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d47c0e5eef34204f04b00009644000000000000000000800094", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 2.691927528s ago: executing program 5 (id=5660): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000480)={0x5c}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) shutdown(r5, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x400000) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5387, &(0x7f0000000180)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021800060c000000000000000000000005001700000000000a0000000000000000040000000000000000000000000000000000000000000005001a00ff000000000000000000000000000001fc02000000000000000000000000000029001010"], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 2.552770849s ago: executing program 2 (id=5661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) close(r1) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, &(0x7f00000002c0), &(0x7f0000000200)=0x80) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 2.450834122s ago: executing program 4 (id=5662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000ff6a00000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461"], 0xd8}}, 0x80) 2.16859795s ago: executing program 4 (id=5663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r4 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f37000000000000", 0x8f, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000008000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x141, &(0x7f0000000300)=ANY=[], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1000000]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.909668395s ago: executing program 2 (id=5664): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000480)={0x5c}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) shutdown(r4, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x400000) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000180)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021800060c000000000000000000000005001700000000000a0000000000000000040000000000000000000000000000000000000000000005001a00ff000000000000000000000000000001fc02000000000000000000000000000029001010"], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 1.742123995s ago: executing program 1 (id=5665): setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000002c00)=""/4096, 0xb4d}, {0x0}], 0x3) syz_emit_ethernet(0xa10, &(0x7f0000003c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xa02, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9ee, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) 1.619136544s ago: executing program 1 (id=5666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) 1.418467691s ago: executing program 1 (id=5667): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0xa0000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x22020400) unshare(0x20020000) memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\x02\xea\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\r\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xc4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb<3\xaf\xcb\x8cP\xef\x84\x91\x87\x8b\xb5Z\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\xebR\xc0\xc6\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f?\x00\x00\x00\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xd5\x01\x1b\xd1\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x1b\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa4\x85G\'+\xcc\xbf\r\xa9\x10Klb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fE\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93y\x9d\xc4K mC\x97\x1c\x91\xd7\xf3\x13)`\xfb\xbf\xd3\xcc\x8d\x0e\x1f\x80\x0f\xcag\xd5J\xd7\x99\x02B\xd9\xdb;\xbd\x05\xc8\x9a\xe9(\xb7\xd1\xce\xba\xf8\xc0\x1fPc\x8d\xfceY\xf8j9\xc4\v\xb5\x82\xbaI,\xf5\xbd\a\a\xa2\x83\x99]/@\xbc(*v%\xa1\xd9\xfb\v\xdc\xed\xa3\x93\x16\x0e\xa8\x96\x10\xfc\xae\xc6X@f\x17\xf4\xb78\xa6\n\xaa\xe5m5\x9d\x14\xd7\x91Q\xb5\x11\x88\x89i\x94,]\x91\x13\xa6~O\xcdV\xf36,\x8a\xc9P\xbd\xf6\x16\x99_\x01\x0f0/\xe1Yi\x00=nz\x1d\xbd\xb0\x85W\xeaU\xea\x03)!\xf2\xfa\x04\xecf\xad\xb5\x94\x97\xbb\xae7\xbf\vQpi\xf3x\x80\xf0\xd3B\x17\xbc\xf2H\xeej\xc4\xdd\xb31\xdc\xb3\x19\x12<\xf7\xca\x12\x86\x15kZ\xb4t\x87;\xfb\x97\xc6\xb4\xf5\xa6\x9b-|EW$\x0e\xb2\xef\xebW/\xff`)M\xe3\x99\xe5\xe2M\x8dxD\xbf!\b\xf4o-\xab\xe0\x1eN\xdb\x94x\xe9:\x92#\x80\x91\xc0\x04\xfd}\xd6\xd6\x0f4/\x13\xf2q\xbc&\xd0p\xe6\xe6\x01V\xf3Lc\xfd\"\xa5V\xce\x9b\xd9\xd3\xc2(Q+\xd0\x00\x00\x00\x00\xf9\x17\n\x9bHw\xfb1\x8e\xa0^\xe0\xbd\xfa\xb8\x9f\xb3~\xab\x1c\x85\x85\x91\xa6\xba\xc9\x81\xaa\xfc<\x18\xf0\xb7\xe0\x95,F\x94\x89\x13\xc1\xad\xaeU\x8bb\xbbc\xa1\xb7a5\xf2\"\xb0\xfb\x1c7ZH\x96\xc66\xd5\xe6r\x19\xb4\xd0\x80\'`\x8a\xe9.\a\xa6g\x13\xe5\t\x11', 0x6) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x63c, 0x0, 0x350, 0x350, 0x0, 0x230, 0x574, 0x574, 0x574, 0x574, 0x574, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd8, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0x2, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x1, 0x5}, 0x0, 0xec, 0x158, 0x0, {}, [@common=@eui64={{0x24}}, @common=@eui64={{0x24}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x100, 0x8, 0x6, 0x0, 0x0, "0b4d66201b7f50ed57f1663b9b29deec512f5da08f075fb1aa98c112a228cfe2a51e125958d417d11d83dfffe2f80649394edfbb1726f30822ae3a997d5146f5"}}}, {{@uncond, 0x0, 0xec, 0x120, 0x48000000, {}, [@inet=@rpfilter={{0x24}, {0xb}}, @common=@mh={{0x24}, {"31f2", 0x1}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x0, 0x3, 0x6}, {0x3, 0x1}, 0x851, 0xe537}}}, {{@uncond, 0x0, 0xc8, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xc}}]}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@empty, 0x6, 0x13, 0xe}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@srh={{0x2c}, {0x62, 0x8, 0xa, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x24}, {0x6}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x698) 1.390297789s ago: executing program 3 (id=5668): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a4ac0d0", 0x5}, {&(0x7f0000000400)="9ffd729dbae96124252639abd7540abd68f6013d24bf653c416382d8c61fb3c9369fc5cba020b12d1e50640cd4f91dced996db5bddd9f42d750099be8321db18e6f9794b4b3030de9c27e217d2c6ac1eb99f7f76e16b51c4e3c7bb527e62c78f7dabb2d9e6f9b32ddbae71b12521735dd1f00d9dc753a274e6a50393d0fef6dddce0064b3d20220fe05517904304ced6505d0bb0e97a0dfba5331d2605fb795c71f350f6", 0xa4}], 0x2) 1.141325684s ago: executing program 1 (id=5669): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f0000000440)=@raw=[@generic={0x3, 0x4, 0x6, 0x9, 0xb2}], &(0x7f0000000480)='GPL\x00', 0xd, 0x1000, &(0x7f0000001880)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x2, 0x3ff, 0x457}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x0, 0x4, 0x6, 0xa}, {0x0, 0x4, 0x9, 0x5}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r2, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x8, 0x100, 0x19, 0xc}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x16, 0x27, 0x66, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010101, @empty}, {0x4e20, 0x4e23, 0x13, 0x0, @gue={{0x2, 0x0, 0x3, 0x6, 0x100, @val=0x80}, "785e7f"}}}}, 0x31) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e21, 0xb90a, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7f}}, [0x7, 0x401, 0x10000, 0x4, 0x7fffffff, 0x0, 0xd, 0x6, 0xdbb0, 0x1, 0x3, 0x7, 0xb, 0x6, 0x6]}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) connect$inet(r1, &(0x7f0000000640)={0x2, 0x4e21, @loopback}, 0x10) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x6, 0x4001, 0x0, 0x0}], 0x1}) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x7, 0x8000, 0xffffffff, 0x58ac, {{0x38, 0x4, 0x1, 0x2, 0xe0, 0x64, 0x0, 0x2, 0x0, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1f, 0x29, [@local, @private=0xa010102, @multicast2, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @empty]}, @cipso={0x86, 0x60, 0x1, [{0x0, 0x9, "31da2f7ad809dc"}, {0x1, 0x7, "0b6e8a351d"}, {0x2, 0xa, "f6e3d1158fe6a9b8"}, {0x1, 0x10, "bffb738d250806bd721933e7f825"}, {0x1, 0x7, "0fc71757cb"}, {0x6, 0x12, "fab6ef0e454edb3fc3c8a9398b44bb6b"}, {0x7, 0x3, "ea"}, {0x0, 0xa, "95ecb0c64af610f1"}, {0x6, 0xa, "ade51b1276dcf700"}]}, @end, @generic={0x94, 0xd, "edc0fb149fdb1fc8c56f95"}, @timestamp={0x44, 0x18, 0x57, 0x0, 0x0, [0x3ff, 0x19c, 0x3, 0x2, 0x2]}, @timestamp={0x44, 0xc, 0xd1, 0x0, 0x3, [0x0, 0x81]}, @lsrr={0x83, 0x17, 0xb7, [@remote, @local, @broadcast, @remote, @private=0xa010101]}, @noop, @generic={0x89, 0x2}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xf8, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xb}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x44850}, 0x20000800) 868.387741ms ago: executing program 5 (id=5670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0xe0ff, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0xb8, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) 662.06021ms ago: executing program 4 (id=5671): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000100)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0x6, 0x4, 0x1, 0x6, 0x20, 0x68, 0x0, 0xff, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x3, 0x8b}]}}, {0x14, 0x1, 0x0, @local}}}, 0x2e) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0x2104200, 0x0, 0x0, 0x0, 0x0, 0x0) 496.673317ms ago: executing program 5 (id=5672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x300) 332.456566ms ago: executing program 5 (id=5673): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setregid(0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) openat$vmci(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000024010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000300)={0x1e, 0x7, 0x2, "9807c6aa09a3d93fea070bc7378bc7e6535dc9e78a311ecb1b986ef9b5979da6", 0x50323234}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5910fae9d6dcd3292", 0xc) 70.861292ms ago: executing program 4 (id=5674): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40801, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x18, 0x3, 0x2) r5 = syz_io_uring_setup(0x512, &(0x7f0000000100)={0x0, 0xc61d, 0x20, 0x402000, 0xff, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x34c, &(0x7f0000000180)=0x5, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x55, 0x0, r1, 0x80, &(0x7f0000000280)=@isdn={0x22, 0x6, 0x3, 0x6, 0xff}, 0x0, 0x0, 0x0, {0x0, r8}}) io_uring_enter(r5, 0x47fa, 0x7c7e, 0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a00100000000290000012", 0x2d}], 0x1}, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x1f000000) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) socket$nl_netfilter(0x10, 0x3, 0xc) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) unshare(0x6a040000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 0s ago: executing program 2 (id=5675): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x4000840) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r6}) keyctl$link(0x8, r6, r5) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000001e00)=""/218, &(0x7f0000001f00)=0xda) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [], "578e0e048d23cf66029067c74a20dc68d161baf5682a678673d745cab12ff3ba"}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) kernel console output (not intermixed with test programs): vhci_hcd.0: Device attached [ 1216.027905][T23357] netlink: 'syz.2.5136': attribute type 1 has an invalid length. [ 1216.097851][T23353] netlink: 'syz.1.5140': attribute type 1 has an invalid length. [ 1216.243620][ T9] usb 37-1: new low-speed USB device number 18 using vhci_hcd [ 1216.442970][T23350] vhci_hcd: connection reset by peer [ 1216.462448][ T50] vhci_hcd vhci_hcd.2: stop threads [ 1216.467718][ T50] vhci_hcd vhci_hcd.2: release socket [ 1216.481850][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 1216.603885][T23361] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5140'. [ 1216.609250][T23353] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1216.736760][T23357] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1216.803363][T23364] loop8: detected capacity change from 0 to 1 [ 1216.814546][T23364] Dev loop8: unable to read RDB block 1 [ 1216.899555][T23358] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1216.907001][T23358] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1216.918776][T23358] bond17: (slave vxcan1): Error -95 calling set_mac_address [ 1216.939725][T23364] loop8: unable to read partition table [ 1217.008481][T23364] loop8: partition table beyond EOD, truncated [ 1217.112176][T23364] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1217.943883][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5145'. [ 1217.954539][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5145'. [ 1218.079171][T23375] loop8: detected capacity change from 0 to 8 [ 1218.106811][T23375] Dev loop8: unable to read RDB block 8 [ 1218.129214][T23375] loop8: unable to read partition table [ 1218.141621][T23375] loop8: partition table beyond EOD, truncated [ 1218.150112][T23375] loop_reread_partitions: partition scan of loop8 (þ被xü^6Ñ9%ƒä ) failed (rc=-5) [ 1218.309591][T17497] IPVS: starting estimator thread 0... [ 1218.313947][T23378] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1218.482901][T23381] IPVS: using max 29 ests per chain, 69600 per kthread [ 1218.732438][T16656] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1219.247212][T23399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5151'. [ 1219.275237][T23399] netlink: 'syz.4.5151': attribute type 10 has an invalid length. [ 1220.189388][T23411] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1220.195965][T23411] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1220.204582][T23411] vhci_hcd vhci_hcd.0: Device attached [ 1220.229756][T23411] netlink: 'syz.2.5148': attribute type 1 has an invalid length. [ 1220.357159][T23411] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1220.431783][T16656] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1220.468141][T23416] bond15: (slave geneve5): making interface the new active one [ 1220.486290][T23416] bond15: (slave geneve5): Enslaving as an active interface with an up link [ 1220.503696][T16656] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1220.511572][T16656] usb 6-1: can't read configurations, error -71 [ 1220.685117][T23412] vhci_hcd: connection closed [ 1220.685477][ T5956] vhci_hcd vhci_hcd.2: stop threads [ 1220.721947][ T5956] vhci_hcd vhci_hcd.2: release socket [ 1220.752472][ T5956] vhci_hcd vhci_hcd.2: disconnect device [ 1221.490044][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1221.525325][T23427] netlink: 'syz.3.5154': attribute type 4 has an invalid length. [ 1221.533378][T23427] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5154'. [ 1221.652624][T23428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5155'. [ 1221.958523][ T5923] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1222.222507][ T5923] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.356118][ T5923] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1222.474288][ T5923] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1222.589677][ T5923] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1222.733077][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.822468][T23435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5159'. [ 1222.872934][ T5923] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1222.946243][ T5923] usb 4-1: invalid MIDI out EP 0 [ 1223.246949][ T5923] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1223.716337][T16656] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1223.721218][T23447] macvtap2: entered promiscuous mode [ 1223.729561][T23447] macvtap2: entered allmulticast mode [ 1223.736319][T23447] vlan0: entered allmulticast mode [ 1223.741914][T23447] veth0_vlan: entered allmulticast mode [ 1223.749557][T23447] vlan0: entered promiscuous mode [ 1223.758127][T23447] team0: Device macvtap2 failed to register rx_handler [ 1223.773085][T23447] vlan0: left allmulticast mode [ 1223.779297][T23447] veth0_vlan: left allmulticast mode [ 1223.811163][T23447] vlan0: left promiscuous mode [ 1223.881870][T16656] usb 3-1: Using ep0 maxpacket: 16 [ 1223.888924][T16656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.907597][T16656] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1224.102334][T16656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.140072][T16656] usb 3-1: config 0 descriptor?? [ 1224.555596][T23458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5166'. [ 1224.619012][T23458] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5166'. [ 1224.631827][T23458] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5166'. [ 1224.632186][T16656] mcp2221 0003:04D8:00DD.0082: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1224.902055][T23429] delete_channel: no stack [ 1224.919819][ T5923] usb 4-1: USB disconnect, device number 41 [ 1225.242099][ T9] usb 3-1: USB disconnect, device number 45 [ 1225.934758][T23465] SET target dimension over the limit! [ 1226.332444][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5171'. [ 1226.354887][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5169'. [ 1226.815575][T23483] xt_bpf: check failed: parse error [ 1227.682462][T23502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5178'. [ 1227.698620][T23502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5178'. [ 1227.711070][T23502] netlink: 'syz.4.5178': attribute type 11 has an invalid length. [ 1228.061951][T16656] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1228.231862][T16656] usb 2-1: Using ep0 maxpacket: 8 [ 1228.266433][T16656] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1228.289964][T16656] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1228.320588][T16656] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1228.451767][T16656] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.488607][T16656] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1228.508235][T16656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.741235][T16656] usb 2-1: usb_control_msg returned -32 [ 1228.752603][T23497] IPVS: length: 218 != 24 [ 1228.755070][T16656] usbtmc 2-1:16.0: can't read capabilities [ 1228.763903][T23497] syz_tun: entered allmulticast mode [ 1228.782990][T23496] syz_tun: left allmulticast mode [ 1228.803625][ T9] usb 2-1: USB disconnect, device number 124 [ 1228.830639][T23515] netlink: 'syz.3.5184': attribute type 10 has an invalid length. [ 1228.988201][T23517] netlink: 'syz.3.5185': attribute type 12 has an invalid length. [ 1229.001300][T23517] netlink: 'syz.3.5185': attribute type 29 has an invalid length. [ 1229.012597][T23517] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5185'. [ 1229.023153][T23517] netlink: 'syz.3.5185': attribute type 2 has an invalid length. [ 1229.031116][T23517] netlink: 'syz.3.5185': attribute type 1 has an invalid length. [ 1229.512719][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1229.566193][T23535] netlink: 'syz.2.5193': attribute type 2 has an invalid length. [ 1229.673896][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1229.683207][ T5923] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1229.692153][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.715865][ T9] usb 4-1: config 0 descriptor?? [ 1229.727778][ T9] cp210x 4-1:0.0: cp210x converter detected [ 1229.851806][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 1229.861443][ T5923] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1229.877038][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.894827][ T5923] usb 2-1: config 0 has no interface number 0 [ 1229.910034][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1229.937933][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.960269][ T5923] usb 2-1: Product: syz [ 1229.967265][ T5923] usb 2-1: Manufacturer: syz [ 1229.982146][ T5923] usb 2-1: SerialNumber: syz [ 1230.000729][ T5923] usb 2-1: config 0 descriptor?? [ 1230.138394][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1230.202700][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1230.202721][ T30] audit: type=1326 audit(1768880710.270:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23524 comm="syz.3.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1230.209128][T23537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5195'. [ 1230.241398][T23537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5195'. [ 1230.330987][ T9] usb 4-1: cp210x converter now attached to ttyUSB1 [ 1230.342053][ T30] audit: type=1326 audit(1768880710.270:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23524 comm="syz.3.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=249 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1230.393667][ T30] audit: type=1326 audit(1768880710.270:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23524 comm="syz.3.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1230.449316][ T5923] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1230.459478][ T5923] uvcvideo 2-1:0.105: No valid video chain found. [ 1230.471836][ T5923] usb 2-1: USB disconnect, device number 125 [ 1230.488956][ T30] audit: type=1326 audit(1768880710.270:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23524 comm="syz.3.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1230.544798][ T30] audit: type=1326 audit(1768880710.270:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23524 comm="syz.3.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1230.585219][ T30] audit: type=1326 audit(1768880710.270:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23524 comm="syz.3.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1230.620100][ T30] audit: type=1326 audit(1768880710.270:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23524 comm="syz.3.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1230.663182][ T30] audit: type=1326 audit(1768880710.270:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23524 comm="syz.3.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1230.664201][T18053] usb 4-1: USB disconnect, device number 42 [ 1230.714878][T18053] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1230.716744][ T30] audit: type=1326 audit(1768880710.270:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23524 comm="syz.3.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1230.749724][ T30] audit: type=1326 audit(1768880710.270:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23524 comm="syz.3.5187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1230.822383][T18053] cp210x 4-1:0.0: device disconnected [ 1230.833576][T23545] tipc: Cannot configure node identity twice [ 1231.005817][T23552] sctp: [Deprecated]: syz.4.5200 (pid 23552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1231.005817][T23552] Use struct sctp_sack_info instead [ 1231.485770][T23572] loop5: detected capacity change from 0 to 7 [ 1231.492228][ T5923] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1231.511363][ T5835] Dev loop5: unable to read RDB block 7 [ 1231.517317][ T5835] loop5: AHDI p3 [ 1231.521121][ T5835] loop5: partition table partially beyond EOD, truncated [ 1231.540199][T23572] Dev loop5: unable to read RDB block 7 [ 1231.548741][T23572] loop5: AHDI p3 [ 1231.558552][T23572] loop5: partition table partially beyond EOD, truncated [ 1231.596798][T23572] Invalid argument reading file caps for ./file0 [ 1231.611061][T23572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.620464][T23572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.662115][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 1231.673114][ T5923] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1231.694182][ T5923] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1231.726538][ T5923] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1231.746399][ T5923] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1231.883942][ T5923] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1231.904561][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.134631][ T5923] usb 3-1: usb_control_msg returned -32 [ 1232.142710][T23565] IPVS: length: 218 != 24 [ 1232.147325][T23565] syz_tun: entered allmulticast mode [ 1232.159084][ T5923] usbtmc 3-1:16.0: can't read capabilities [ 1232.167671][T23563] syz_tun: left allmulticast mode [ 1232.205170][ T5923] usb 3-1: USB disconnect, device number 46 [ 1232.361877][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1232.401823][T18053] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 1232.518785][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1232.527924][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1232.538521][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1232.548108][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1232.559255][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1232.572033][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1232.581215][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1232.589373][ T9] usb 6-1: Product: syz [ 1232.593694][ T9] usb 6-1: Manufacturer: syz [ 1232.595116][T18053] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 1232.609128][T18053] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 1232.612992][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1232.624752][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1232.632134][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1232.639173][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 1232.644936][T18053] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1232.669220][T18053] usb 4-1: string descriptor 0 read error: -22 [ 1232.677233][T18053] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1232.695605][T18053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.711016][T23582] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1232.733213][T23582] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1232.755697][T18053] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1233.033721][T23590] netlink: 'syz.1.5209': attribute type 10 has an invalid length. [ 1234.591633][T23602] loop8: detected capacity change from 0 to 1 [ 1234.631406][T23602] Dev loop8: unable to read RDB block 1 [ 1234.637831][T23602] loop8: unable to read partition table [ 1234.644207][T23602] loop8: partition table beyond EOD, truncated [ 1234.650632][T23602] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1234.844263][ T9] usb 6-1: USB disconnect, device number 37 [ 1235.015105][T23606] netlink: 'syz.4.5214': attribute type 1 has an invalid length. [ 1235.287287][T23612] sctp: [Deprecated]: syz.5.5213 (pid 23612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1235.287287][T23612] Use struct sctp_sack_info instead [ 1235.331985][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1235.525046][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1235.533373][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1235.545322][ T9] usb 3-1: config 0 has no interface number 0 [ 1235.556076][ T9] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1235.581078][ T9] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1235.600991][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1235.610333][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.619277][ T9] usb 3-1: Product: syz [ 1235.626542][ T9] usb 3-1: Manufacturer: syz [ 1235.638213][ T9] usb 3-1: SerialNumber: syz [ 1235.665371][ T9] usb 3-1: config 0 descriptor?? [ 1235.702316][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1235.973345][ T9] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 1235.980504][ T9] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 1236.094337][ T5907] usb 4-1: USB disconnect, device number 43 [ 1236.217809][ T9] usb 3-1: USB disconnect, device number 47 [ 1236.692465][ T5907] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1236.871815][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 1236.879839][ T5907] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1236.889969][ T5907] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1236.917214][ T5907] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1236.969162][ T5907] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.990371][ T5907] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1237.008878][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.212191][T23634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5225'. [ 1237.221433][T23634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5225'. [ 1237.295995][ T5907] usb 4-1: usb_control_msg returned -32 [ 1237.304750][T23623] IPVS: length: 218 != 24 [ 1237.309636][T23623] syz_tun: entered allmulticast mode [ 1237.362570][ T5907] usbtmc 4-1:16.0: can't read capabilities [ 1237.366032][T23622] syz_tun: left allmulticast mode [ 1237.393514][ T9] usb 4-1: USB disconnect, device number 44 [ 1237.557472][T23641] veth5: entered promiscuous mode [ 1237.564984][T23641] veth5: entered allmulticast mode [ 1238.072600][T23642] 8021q: VLANs not supported on wg0 [ 1238.852819][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.859167][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.091828][T23661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1239.101324][T23661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1239.291863][T16623] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1239.301914][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1239.437984][T16623] usb 2-1: device descriptor read/64, error -71 [ 1239.451852][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1239.465695][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.520663][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1239.539656][T23666] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1239.546228][T23666] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1239.550665][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.577441][T23666] vhci_hcd vhci_hcd.0: Device attached [ 1239.593484][ T9] usb 3-1: config 0 descriptor?? [ 1239.668209][T23666] netlink: 'syz.3.5229': attribute type 1 has an invalid length. [ 1239.699559][T16623] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1239.766306][T23666] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1239.814493][T23670] bond17: (slave geneve6): making interface the new active one [ 1239.827433][T23670] bond17: (slave geneve6): Enslaving as an active interface with an up link [ 1239.836617][T17497] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1239.892407][ T5907] usb 39-1: new low-speed USB device number 12 using vhci_hcd [ 1239.977167][T23667] vhci_hcd: connection reset by peer [ 1239.982793][T16623] usb 2-1: device descriptor read/64, error -71 [ 1239.999959][ T8946] vhci_hcd vhci_hcd.3: stop threads [ 1240.008043][ T8946] vhci_hcd vhci_hcd.3: release socket [ 1240.039654][T17497] usb 6-1: Using ep0 maxpacket: 8 [ 1240.048484][ T8946] vhci_hcd vhci_hcd.3: disconnect device [ 1240.092858][T16623] usb usb2-port1: attempt power cycle [ 1240.121305][ T9] mcp2221 0003:04D8:00DD.0083: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1240.388111][T18053] usb 3-1: USB disconnect, device number 48 [ 1240.442762][T16623] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1240.539473][T16623] usb 2-1: device descriptor read/8, error -71 [ 1240.822614][T16623] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1240.850984][T16623] usb 2-1: device descriptor read/8, error -71 [ 1240.968070][T16623] usb usb2-port1: unable to enumerate USB device [ 1241.721375][T23679] syzkaller0: entered promiscuous mode [ 1241.727317][T23679] syzkaller0: entered allmulticast mode [ 1241.738660][T23679] 0: reclassify loop, rule prio 0, protocol 800 [ 1241.869036][T23681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.882762][T23681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.900694][T23681] IPVS: length: 218 != 24 [ 1241.908044][T23681] syz_tun: left allmulticast mode [ 1242.168346][T23687] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1242.660034][T17497] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1242.684502][T17497] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1242.698816][T17497] usb 6-1: can't read configurations, error -71 [ 1242.742318][T16623] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1242.881846][T16623] usb 2-1: device descriptor read/64, error -71 [ 1243.131904][T16623] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1243.271947][T16623] usb 2-1: device descriptor read/64, error -71 [ 1243.587383][T16623] usb usb2-port1: attempt power cycle [ 1243.652086][T17497] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1244.142124][T17497] usb 6-1: Using ep0 maxpacket: 16 [ 1244.148851][T17497] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.199113][T16623] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1244.232036][T17497] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1244.248407][T17497] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.267686][T16623] usb 2-1: device descriptor read/8, error -71 [ 1244.283643][T17497] usb 6-1: config 0 descriptor?? [ 1244.523296][T16623] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1244.552647][T16623] usb 2-1: device descriptor read/8, error -71 [ 1244.661884][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1244.685818][T16623] usb usb2-port1: unable to enumerate USB device [ 1244.708918][T23718] netlink: 'syz.4.5247': attribute type 4 has an invalid length. [ 1244.716933][T23718] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5247'. [ 1244.756379][T23718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.766042][T23718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.805037][T17497] mcp2221 0003:04D8:00DD.0084: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1245.062117][ T5907] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1245.210491][T17497] usb 6-1: USB disconnect, device number 39 [ 1246.012353][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5249'. [ 1246.099778][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1246.113258][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1246.171805][ T9] usb 3-1: can't read configurations, error -71 [ 1247.190232][T23732] PKCS8: Unsupported PKCS#8 version [ 1247.203651][T23734] xt_bpf: check failed: parse error [ 1247.451826][T18053] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1247.746517][T23717] delete_channel: no stack [ 1247.763431][T23732] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5252'. [ 1247.781797][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1247.818573][T18053] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1247.829379][T18053] usb 4-1: can't read configurations, error -71 [ 1247.941835][ T5907] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1247.972196][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1247.979000][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1247.990808][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1248.036003][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1248.176804][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1248.240392][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1248.296281][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.669189][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 1248.674965][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1248.714870][T23749] veth0: entered promiscuous mode [ 1248.722077][T23749] veth0_to_hsr: entered promiscuous mode [ 1248.728427][T23748] veth0_to_hsr: left promiscuous mode [ 1248.736244][T23748] veth0: left promiscuous mode [ 1248.962688][T23737] IPVS: length: 218 != 24 [ 1248.972165][T23737] syz_tun: entered allmulticast mode [ 1249.036372][T23736] syz_tun: left allmulticast mode [ 1249.071054][ T9] usb 3-1: USB disconnect, device number 51 [ 1249.157833][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1249.178513][ T5907] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1249.191081][ T5907] usb 2-1: can't read configurations, error -71 [ 1249.913340][T18053] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1250.041860][ T6927] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1250.146702][T18053] usb 4-1: device descriptor read/64, error -71 [ 1250.176174][T23761] loop5: detected capacity change from 0 to 7 [ 1250.195870][T23761] Dev loop5: unable to read RDB block 7 [ 1250.201581][T23761] loop5: AHDI p3 [ 1250.217267][T23761] loop5: partition table partially beyond EOD, truncated [ 1250.257773][T23761] Invalid argument reading file caps for ./file0 [ 1250.312323][ T6927] usb 3-1: Using ep0 maxpacket: 16 [ 1250.327309][ T6927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.359180][ T6927] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1250.382101][ T6927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.407142][ T6927] usb 3-1: config 0 descriptor?? [ 1250.431985][T18053] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1250.588286][ T5200] Dev loop5: unable to read RDB block 7 [ 1250.597324][ T5200] loop5: AHDI p3 [ 1250.601278][T18053] usb 4-1: device descriptor read/64, error -71 [ 1250.628395][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1250.666041][ T5200] loop5: partition table partially beyond EOD, truncated [ 1250.755005][T18053] usb usb4-port1: attempt power cycle [ 1250.788613][T23764] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5262'. [ 1250.852014][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1251.146944][ T6927] mcp2221 0003:04D8:00DD.0085: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1251.160715][T23764] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5262'. [ 1251.265044][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 1251.276336][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1251.288280][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1251.303234][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c413, bcdDevice= 0.dd [ 1251.350467][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.401172][ T9] usb 2-1: config 0 descriptor?? [ 1251.412090][T18053] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1251.426562][T23764] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5262'. [ 1251.440320][T23764] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5262'. [ 1251.453727][T16623] usb 3-1: USB disconnect, device number 52 [ 1251.464230][T18053] usb 4-1: device descriptor read/8, error -71 [ 1251.613043][T23764] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5262'. [ 1251.651169][T23764] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5262'. [ 1251.711996][T18053] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1251.732603][T18053] usb 4-1: device descriptor read/8, error -71 [ 1251.832866][ T5200] Dev loop5: unable to read RDB block 7 [ 1251.838530][ T5200] loop5: AHDI p3 [ 1251.842734][T18053] usb usb4-port1: unable to enumerate USB device [ 1251.854511][ T5200] loop5: partition table partially beyond EOD, truncated [ 1252.386954][T23778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5265'. [ 1252.399748][T23778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5265'. [ 1253.049160][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1253.116477][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1253.166174][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1253.220390][ T9] usb 2-1: USB disconnect, device number 10 [ 1253.431625][T23793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.455703][T23793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.513774][T23793] fuse: Unknown parameter 'group_éd' [ 1253.821832][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1253.854627][T23803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5274'. [ 1253.885778][T23803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5274'. [ 1253.985747][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1254.018609][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1254.054053][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1254.072222][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1254.094563][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1254.124053][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1254.153709][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.242305][T18053] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1254.326440][T23810] netlink: 'syz.4.5278': attribute type 1 has an invalid length. [ 1254.377645][T23813] binder: BINDER_SET_CONTEXT_MGR already set [ 1254.384361][T23813] binder: 23811:23813 ioctl 4018620d 80000040 returned -16 [ 1254.395951][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 1254.411974][ T9] usbtmc 2-1:16.0: can't read capabilities [ 1254.441803][T18053] usb 6-1: Using ep0 maxpacket: 16 [ 1254.463527][T18053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.512861][T18053] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1254.551774][T18053] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.581215][T18053] usb 6-1: config 0 descriptor?? [ 1254.622828][T23799] IPVS: length: 218 != 24 [ 1254.643576][T23799] syz_tun: entered allmulticast mode [ 1254.663084][T23798] syz_tun: left allmulticast mode [ 1254.685268][ T6927] usb 2-1: USB disconnect, device number 11 [ 1255.038356][T18053] mcp2221 0003:04D8:00DD.0086: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1255.345792][ T9] usb 6-1: USB disconnect, device number 40 [ 1256.229183][T23844] netlink: 'syz.2.5285': attribute type 28 has an invalid length. [ 1256.342219][T16656] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1256.481794][T16656] usb 6-1: device descriptor read/64, error -71 [ 1256.772064][T16656] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1256.973703][T16656] usb 6-1: device descriptor read/64, error -71 [ 1257.095283][T16656] usb usb6-port1: attempt power cycle [ 1257.451892][T16656] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1257.483728][T16656] usb 6-1: device descriptor read/8, error -71 [ 1257.722907][T16656] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1257.762650][T16656] usb 6-1: device descriptor read/8, error -71 [ 1257.903726][T23862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5291'. [ 1257.916971][T16656] usb usb6-port1: unable to enumerate USB device [ 1258.235502][T23866] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1258.242138][T23866] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1258.264635][T23866] vhci_hcd vhci_hcd.0: Device attached [ 1258.318066][T23866] netlink: 'syz.3.5290': attribute type 1 has an invalid length. [ 1258.393999][T23866] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1258.508676][T23872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.571785][T16656] usb 39-1: new low-speed USB device number 13 using vhci_hcd [ 1258.603485][T23872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.636931][T23872] IPVS: length: 218 != 24 [ 1258.641432][T23872] syz_tun: entered allmulticast mode [ 1258.650779][T23871] syz_tun: left allmulticast mode [ 1258.828745][T23867] vhci_hcd: connection reset by peer [ 1258.838849][T14446] vhci_hcd vhci_hcd.3: stop threads [ 1258.878797][T14446] vhci_hcd vhci_hcd.3: release socket [ 1258.890615][T14446] vhci_hcd vhci_hcd.3: disconnect device [ 1259.272252][T23881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5297'. [ 1259.591903][T18053] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1259.941830][T18053] usb 2-1: Using ep0 maxpacket: 16 [ 1259.973020][T18053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.014957][T18053] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1260.080637][T18053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.130021][T18053] usb 2-1: config 0 descriptor?? [ 1260.191930][T16623] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1260.623385][T18053] mcp2221 0003:04D8:00DD.0087: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1260.641423][T23899] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1260.648093][T23899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1260.702998][T23899] vhci_hcd vhci_hcd.0: Device attached [ 1260.723543][T23902] netlink: 'syz.4.5300': attribute type 1 has an invalid length. [ 1260.928612][T23902] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1260.990538][T23899] bond16: (slave geneve4): making interface the new active one [ 1261.022019][ T6927] usb 41-1: new low-speed USB device number 11 using vhci_hcd [ 1261.095035][T17497] usb 2-1: USB disconnect, device number 12 [ 1261.148474][T23899] bond16: (slave geneve4): Enslaving as an active interface with an up link [ 1261.180818][T23900] vhci_hcd: connection reset by peer [ 1261.192330][ T3456] vhci_hcd vhci_hcd.4: stop threads [ 1261.197605][ T3456] vhci_hcd vhci_hcd.4: release socket [ 1261.255279][ T3456] vhci_hcd vhci_hcd.4: disconnect device [ 1261.509415][T23910] syzkaller0: entered promiscuous mode [ 1261.535421][T23910] syzkaller0: entered allmulticast mode [ 1261.589725][T23910] 0: reclassify loop, rule prio 0, protocol 800 [ 1261.842117][T23917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5304'. [ 1262.512525][T16623] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1262.565785][T16623] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1262.637314][T16623] usb 3-1: can't read configurations, error -71 [ 1262.681637][T23920] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1263.061868][T17497] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1263.256658][T23926] syzkaller1: entered promiscuous mode [ 1263.262955][T23926] syzkaller1: entered allmulticast mode [ 1263.432900][T17497] usb 6-1: device descriptor read/64, error -71 [ 1263.551879][T23929] macvtap2: entered promiscuous mode [ 1263.560250][T23929] macvtap2: entered allmulticast mode [ 1263.577176][T23929] vlan0: entered allmulticast mode [ 1263.590247][T23929] veth0_vlan: entered allmulticast mode [ 1263.603561][T23929] vlan0: entered promiscuous mode [ 1263.622007][T23929] team0: Device macvtap2 failed to register rx_handler [ 1263.642669][T23929] vlan0: left allmulticast mode [ 1263.648119][T23929] veth0_vlan: left allmulticast mode [ 1263.667869][T23929] vlan0: left promiscuous mode [ 1263.676660][T17497] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1263.705805][T16656] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1263.905107][T17497] usb 6-1: device descriptor read/64, error -71 [ 1263.971843][T16623] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1264.022633][T17497] usb usb6-port1: attempt power cycle [ 1264.173846][T16623] usb 3-1: Using ep0 maxpacket: 8 [ 1264.200727][T16623] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1264.253800][T16623] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1264.711865][T17497] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1264.744227][T17497] usb 6-1: device descriptor read/8, error -71 [ 1264.766437][T16623] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1264.861768][T16623] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1264.894451][T16623] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1264.922148][T16623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.011857][T17497] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1265.053948][T17497] usb 6-1: device descriptor read/8, error -71 [ 1265.182477][T17497] usb usb6-port1: unable to enumerate USB device [ 1265.210658][T16623] usb 3-1: GET_CAPABILITIES returned 0 [ 1265.226601][T16623] usbtmc 3-1:16.0: can't read capabilities [ 1265.411327][T23930] IPVS: length: 218 != 24 [ 1265.427755][T23930] syz_tun: entered allmulticast mode [ 1265.453832][T23927] syz_tun: left allmulticast mode [ 1265.463691][ T5907] usb 3-1: USB disconnect, device number 55 [ 1265.794431][T23953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5315'. [ 1266.182381][ T6927] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1266.690647][T23960] SET target dimension over the limit! [ 1266.907503][T23965] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5318'. [ 1266.940082][T23965] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5318'. [ 1267.311502][T23968] netlink: 'syz.1.5322': attribute type 12 has an invalid length. [ 1267.326224][T23968] netlink: 'syz.1.5322': attribute type 29 has an invalid length. [ 1267.335044][T23968] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5322'. [ 1267.348597][T23968] netlink: 'syz.1.5322': attribute type 2 has an invalid length. [ 1267.361501][T23968] netlink: 'syz.1.5322': attribute type 1 has an invalid length. [ 1267.435743][T23970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5320'. [ 1267.444866][T23970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5320'. [ 1267.467312][T23973] netlink: 'syz.5.5321': attribute type 10 has an invalid length. [ 1267.845400][T23979] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5323'. [ 1267.895241][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1267.895262][ T30] audit: type=1326 audit(1768880747.890:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23975 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7539 code=0x7ffc0000 [ 1268.035689][ T30] audit: type=1326 audit(1768880747.890:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23975 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff7539 code=0x7ffc0000 [ 1268.087686][ T30] audit: type=1326 audit(1768880747.890:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23975 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7539 code=0x7ffc0000 [ 1268.153699][ T30] audit: type=1326 audit(1768880747.890:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23975 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7ff7539 code=0x7ffc0000 [ 1268.219978][T23986] syzkaller1: entered promiscuous mode [ 1268.225769][T23986] syzkaller1: entered allmulticast mode [ 1268.617547][ T30] audit: type=1326 audit(1768880747.890:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23975 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7539 code=0x7ffc0000 [ 1269.186902][ T30] audit: type=1326 audit(1768880747.890:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23975 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7ff7539 code=0x7ffc0000 [ 1269.216351][ T30] audit: type=1326 audit(1768880747.890:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23975 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7539 code=0x7ffc0000 [ 1269.241836][ T30] audit: type=1326 audit(1768880747.890:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23975 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7ff7539 code=0x7ffc0000 [ 1269.271774][ T30] audit: type=1326 audit(1768880747.890:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23975 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7539 code=0x7ffc0000 [ 1269.501902][T16623] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1269.862068][T16623] usb 4-1: device descriptor read/64, error -71 [ 1269.897596][ T30] audit: type=1326 audit(1768880747.890:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23975 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff7539 code=0x7ffc0000 [ 1270.221779][T17497] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1270.250923][T16623] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1270.421985][T16623] usb 4-1: device descriptor read/64, error -71 [ 1270.441795][T17497] usb 6-1: Using ep0 maxpacket: 8 [ 1270.449165][T17497] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1270.459355][T17497] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1270.469848][T17497] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1270.480249][T17497] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.542858][T16623] usb usb4-port1: attempt power cycle [ 1270.551821][T17497] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1270.562663][T17497] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.788474][T17497] usb 6-1: GET_CAPABILITIES returned 0 [ 1270.804318][T17497] usbtmc 6-1:16.0: can't read capabilities [ 1270.910745][T16623] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1270.958054][T16623] usb 4-1: device descriptor read/8, error -71 [ 1270.996288][T23997] IPVS: length: 218 != 24 [ 1271.016547][T23997] syz_tun: entered allmulticast mode [ 1271.036256][T23996] syz_tun: left allmulticast mode [ 1271.047978][T17497] usb 6-1: USB disconnect, device number 49 [ 1271.201785][T16623] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1271.237161][T24011] netlink: 'syz.2.5330': attribute type 2 has an invalid length. [ 1271.342459][T16623] usb 4-1: device descriptor read/8, error -71 [ 1271.500611][T16623] usb usb4-port1: unable to enumerate USB device [ 1271.671527][T16623] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1271.861778][T16623] usb 2-1: Using ep0 maxpacket: 32 [ 1272.002351][T16623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.013516][T16623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.031818][T16623] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1272.072426][T16623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.094266][T16623] usb 2-1: config 0 descriptor?? [ 1272.300025][T24022] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5336'. [ 1272.386278][T24025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5334'. [ 1272.547923][T16623] koneplus 0003:1E7D:2D51.0088: item fetching failed at offset 3/5 [ 1272.587152][T16623] koneplus 0003:1E7D:2D51.0088: parse failed [ 1272.613065][T16623] koneplus 0003:1E7D:2D51.0088: probe with driver koneplus failed with error -22 [ 1272.785189][T24013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.800816][T24013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.853592][T24033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1273.755195][T17497] usb 2-1: USB disconnect, device number 13 [ 1274.895578][T24049] loop8: detected capacity change from 0 to 8 [ 1274.903381][ T5827] Dev loop8: unable to read RDB block 8 [ 1274.909229][ T5827] loop8: unable to read partition table [ 1274.919736][T24050] netlink: 'syz.4.5343': attribute type 10 has an invalid length. [ 1275.016500][ T5827] loop8: partition table beyond EOD, truncated [ 1275.028923][T24049] Dev loop8: unable to read RDB block 8 [ 1275.051814][T24049] loop8: unable to read partition table [ 1275.061562][T24049] loop8: partition table beyond EOD, truncated [ 1275.106018][T24049] loop_reread_partitions: partition scan of loop8 (þ被xü^6Ñ9%ƒä ) failed (rc=-5) [ 1275.121808][T17497] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1275.311893][T17497] usb 4-1: Using ep0 maxpacket: 8 [ 1275.334416][T17497] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1275.348287][T17497] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1275.348694][T24059] syzkaller0: entered promiscuous mode [ 1275.361510][T17497] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1275.452175][T24059] syzkaller0: entered allmulticast mode [ 1275.458945][T17497] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1275.489375][T17497] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1275.498745][T16623] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1275.516358][T17497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.711855][T16623] usb 6-1: no configurations [ 1275.716550][T16623] usb 6-1: can't read configurations, error -22 [ 1275.744655][T17497] usb 4-1: GET_CAPABILITIES returned 0 [ 1275.791115][T17497] usbtmc 4-1:16.0: can't read capabilities [ 1275.804359][T24060] tipc: Enabled bearer , priority 10 [ 1275.861891][T16623] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1275.871015][T24058] tipc: Resetting bearer [ 1275.965125][T24058] tipc: Disabling bearer [ 1276.008007][T24064] IPVS: length: 218 != 24 [ 1276.034205][T16623] usb 6-1: no configurations [ 1276.039147][T16623] usb 6-1: can't read configurations, error -22 [ 1276.048551][T16623] usb usb6-port1: attempt power cycle [ 1276.074978][T24067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5351'. [ 1276.084601][T24067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5351'. [ 1276.150917][T24064] syz_tun: entered allmulticast mode [ 1276.185944][T24045] syz_tun: left allmulticast mode [ 1276.209364][ T9] usb 4-1: USB disconnect, device number 55 [ 1276.401836][T16623] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1276.443005][T16623] usb 6-1: no configurations [ 1276.451755][T16623] usb 6-1: can't read configurations, error -22 [ 1276.463170][T17497] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1276.481958][ T5923] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1276.614937][T16623] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1276.633850][T17497] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1276.649327][T17497] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1276.660255][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 1276.665684][T17497] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1276.675260][T16623] usb 6-1: no configurations [ 1276.684618][T16623] usb 6-1: can't read configurations, error -22 [ 1276.692950][T17497] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1276.706622][T16623] usb usb6-port1: unable to enumerate USB device [ 1276.717677][ T5923] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1276.727688][T17497] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1276.739396][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.753486][T17497] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1276.763567][ T5923] usb 3-1: Product: syz [ 1276.767821][ T5923] usb 3-1: Manufacturer: syz [ 1276.772877][ T5923] usb 3-1: SerialNumber: syz [ 1276.777818][T17497] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1276.793438][ T5923] usb 3-1: config 0 descriptor?? [ 1276.809756][T17497] usb 2-1: Product: syz [ 1276.816423][ T5923] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1276.824474][T17497] usb 2-1: Manufacturer: syz [ 1276.830076][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 1276.841169][T24079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.851100][T24079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.894591][T17497] cdc_wdm 2-1:1.0: skipping garbage [ 1276.899969][T17497] cdc_wdm 2-1:1.0: skipping garbage [ 1276.911643][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1276.913992][T17497] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1276.929455][T17497] cdc_wdm 2-1:1.0: Unknown control protocol [ 1276.939043][ T5923] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1276.951925][ T5923] usb 3-1: media controller created [ 1276.980774][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1277.068679][ T5923] usb 3-1: selecting invalid altsetting 7 [ 1277.090562][ T5923] cxusb: set interface failed [ 1277.111457][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 1277.183448][ T5923] DVB: Unable to find symbol lgdt330x_attach() [ 1277.265348][T24090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5355'. [ 1277.345734][ T5923] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1277.537437][T24096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5354'. [ 1277.652336][ T5923] rc_core: IR keymap rc-dvico-portable not found [ 1277.658843][ T5923] Registered IR keymap rc-empty [ 1277.679837][ T5923] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1277.709779][ T5923] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input53 [ 1277.733156][ T5923] dvb-usb: schedule remote query interval to 100 msecs. [ 1277.747261][ T5923] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1277.854888][T17497] dvb-usb: bulk message failed: -22 (1/0) [ 1277.986944][ T5923] usb 3-1: USB disconnect, device number 56 [ 1278.710368][ T5923] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1279.249934][ T5923] usb 2-1: USB disconnect, device number 14 [ 1279.515780][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1279.515800][ T30] audit: type=1326 audit(1768880759.590:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24100 comm="syz.1.5357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1279.550749][ T30] audit: type=1326 audit(1768880759.590:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24100 comm="syz.1.5357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1279.573264][ T30] audit: type=1326 audit(1768880759.590:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24100 comm="syz.1.5357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1279.604994][ T30] audit: type=1326 audit(1768880759.590:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24100 comm="syz.1.5357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1279.662168][ T30] audit: type=1326 audit(1768880759.590:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24100 comm="syz.1.5357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1279.716943][ T30] audit: type=1326 audit(1768880759.590:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24100 comm="syz.1.5357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1279.798982][T24107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5357'. [ 1280.191880][ T30] audit: type=1326 audit(1768880759.590:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24100 comm="syz.1.5357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1280.343664][ T30] audit: type=1326 audit(1768880759.590:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24100 comm="syz.1.5357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1280.446298][T24115] syzkaller1: entered promiscuous mode [ 1280.452099][T24115] syzkaller1: entered allmulticast mode [ 1280.460008][ T30] audit: type=1326 audit(1768880759.590:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24100 comm="syz.1.5357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1280.485261][ T30] audit: type=1326 audit(1768880759.590:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24100 comm="syz.1.5357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1280.854663][T24121] netlink: 'syz.5.5367': attribute type 1 has an invalid length. [ 1281.087061][T24120] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1281.093611][T24120] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1281.185177][T24121] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1281.448358][T24120] vhci_hcd vhci_hcd.0: Device attached [ 1281.522122][T24122] vhci_hcd: connection closed [ 1281.522505][T15535] vhci_hcd vhci_hcd.5: stop threads [ 1281.532693][T15535] vhci_hcd vhci_hcd.5: release socket [ 1281.538620][T15535] vhci_hcd vhci_hcd.5: disconnect device [ 1281.685991][T24134] netlink: 'syz.2.5362': attribute type 2 has an invalid length. [ 1283.226541][T24146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5368'. [ 1283.276908][T24146] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1283.356307][T24148] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1283.446044][T24148] bond20: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 1283.491508][T24148] bond20: (slave ip6tnl1): Error -95 calling set_mac_address [ 1283.751842][ T5923] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1283.922981][ T5923] usb 2-1: no configurations [ 1283.931354][ T5923] usb 2-1: can't read configurations, error -22 [ 1284.065873][T24160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1284.111957][ T5923] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1284.352504][ T5923] usb 2-1: no configurations [ 1284.357148][ T5923] usb 2-1: can't read configurations, error -22 [ 1284.371543][ T5923] usb usb2-port1: attempt power cycle [ 1284.762390][ T5923] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1284.906931][ T5923] usb 2-1: no configurations [ 1284.912663][ T5923] usb 2-1: can't read configurations, error -22 [ 1285.311847][ T5923] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1285.446150][ T5923] usb 2-1: no configurations [ 1285.461749][ T5923] usb 2-1: can't read configurations, error -22 [ 1285.487073][ T5923] usb usb2-port1: unable to enumerate USB device [ 1285.558957][T24172] macvtap1: entered promiscuous mode [ 1285.636771][T24172] macvtap1: entered allmulticast mode [ 1285.656907][T24172] vlan0: entered allmulticast mode [ 1285.726044][ T5923] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1285.751783][T24172] veth0_vlan: entered allmulticast mode [ 1285.759869][T24172] vlan0: entered promiscuous mode [ 1285.809020][T24172] team0: Device macvtap1 failed to register rx_handler [ 1285.840709][T24172] vlan0: left allmulticast mode [ 1285.881854][T24172] veth0_vlan: left allmulticast mode [ 1285.887217][T24172] vlan0: left promiscuous mode [ 1286.192078][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1286.786166][T24176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.815263][T24176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.816898][T24179] netlink: 'syz.4.5377': attribute type 8 has an invalid length. [ 1286.853262][T24179] netlink: 'syz.4.5377': attribute type 4 has an invalid length. [ 1286.873101][T24179] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5377'. [ 1286.977472][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1286.991921][T16623] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1287.008438][ T5923] usb 4-1: too many configurations: 233, using maximum allowed: 8 [ 1287.082792][T24184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5376'. [ 1287.096408][T24184] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5376'. [ 1287.108119][T24184] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5376'. [ 1287.185355][ T5923] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1287.193080][ T5923] usb 4-1: can't read configurations, error -71 [ 1287.703040][T16623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1287.719715][T16623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.813065][T16623] usb 6-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 1287.832410][T16623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.865054][T16623] usb 6-1: config 0 descriptor?? [ 1287.957325][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1287.967458][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1287.975326][ T9] usb 3-1: can't read configurations, error -71 [ 1288.088778][T24177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.101968][T24176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.110968][T24176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.164049][T24177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.242679][T24189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5379'. [ 1288.426844][T16623] usbhid 6-1:0.0: can't add hid device: -71 [ 1288.446283][T16623] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1288.468984][T16623] usb 6-1: USB disconnect, device number 54 [ 1288.578811][T24193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.603016][T24193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.771820][ T5923] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1289.022809][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 1289.083763][ T5923] usb 4-1: config 0 has an invalid interface number: 180 but max is 0 [ 1289.104246][ T5923] usb 4-1: config 0 has no interface number 0 [ 1289.113825][ T5923] usb 4-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 1289.171639][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.186511][ T5923] usb 4-1: Product: syz [ 1289.190796][ T5923] usb 4-1: Manufacturer: syz [ 1289.196113][ T5923] usb 4-1: SerialNumber: syz [ 1289.237368][ T5923] usb 4-1: config 0 descriptor?? [ 1289.276475][T24203] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5385'. [ 1289.338634][ T5923] usb 4-1: bad CDC descriptors [ 1289.462080][ T5907] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1289.571847][ T5923] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1289.631895][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 1289.653320][ T5907] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1289.664921][ T5907] usb 2-1: config 0 has no interface number 0 [ 1289.722676][ T5923] usb 3-1: no configurations [ 1289.727846][ T5907] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1289.727852][ T5923] usb 3-1: can't read configurations, error -22 [ 1289.727879][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.771815][ T5907] usb 2-1: Product: syz [ 1289.776033][ T5907] usb 2-1: Manufacturer: syz [ 1289.780753][ T5907] usb 2-1: SerialNumber: syz [ 1289.846062][ T5907] usb 2-1: config 0 descriptor?? [ 1289.869997][ T5907] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1289.872353][ T5923] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1290.053208][ T5923] usb 3-1: no configurations [ 1290.058089][ T5923] usb 3-1: can't read configurations, error -22 [ 1290.066808][ T5923] usb usb3-port1: attempt power cycle [ 1290.318150][T24192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5381'. [ 1290.357016][T24192] openvswitch: netlink: IP tunnel dst address not specified [ 1290.432912][ T5923] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1290.434334][ C1] usb-serial ttyUSB1: qt2_process_read_urb - unsupported command 91 [ 1290.453511][ T5923] usb 3-1: no configurations [ 1290.455461][ T5907] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1290.458202][ T5923] usb 3-1: can't read configurations, error -22 [ 1290.497917][ T5907] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1290.508298][ T9] usb 4-1: USB disconnect, device number 58 [ 1290.659920][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1290.664012][ T5923] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1290.668676][ T5907] usb 2-1: USB disconnect, device number 19 [ 1290.707624][ T5923] usb 3-1: no configurations [ 1290.708522][ T5907] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1290.724637][ T5923] usb 3-1: can't read configurations, error -22 [ 1290.748207][ T5923] usb usb3-port1: unable to enumerate USB device [ 1290.770448][ T5907] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1290.784147][ T5907] quatech2 2-1:0.51: device disconnected [ 1292.381778][ T5923] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1292.583826][T24236] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5395'. [ 1292.605369][T24236] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5395'. [ 1292.675392][T24236] dummy0: entered promiscuous mode [ 1292.713544][T24236] dummy0: left promiscuous mode [ 1293.400692][T24255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5401'. [ 1293.722317][T24260] loop8: detected capacity change from 0 to 1 [ 1293.748538][T24260] Dev loop8: unable to read RDB block 1 [ 1293.762348][T24260] loop8: unable to read partition table [ 1293.793046][T24260] loop8: partition table beyond EOD, truncated [ 1293.808055][T24260] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1294.202655][ T5907] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1294.274338][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1294.313034][ T5923] usb 2-1: too many configurations: 233, using maximum allowed: 8 [ 1294.384955][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.420322][ T5923] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1294.422922][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.461734][ T5923] usb 2-1: can't read configurations, error -71 [ 1294.487566][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1294.530810][ T5907] usb 4-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 1294.554125][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.580351][ T5907] usb 4-1: config 0 descriptor?? [ 1294.781851][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1295.030372][ T5907] apple 0003:05AC:027C.0089: unknown main item tag 0x0 [ 1295.075308][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.083338][ T5907] apple 0003:05AC:027C.0089: unknown main item tag 0x0 [ 1295.091731][ T9] usb 6-1: config 0 has no interfaces? [ 1295.110917][ T9] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1295.111241][ T5907] apple 0003:05AC:027C.0089: unknown main item tag 0x0 [ 1295.144912][ T5907] apple 0003:05AC:027C.0089: unknown main item tag 0x0 [ 1295.173373][ T5907] apple 0003:05AC:027C.0089: unknown main item tag 0x0 [ 1295.183734][ T5907] apple 0003:05AC:027C.0089: unknown main item tag 0x0 [ 1295.276239][ T5907] apple 0003:05AC:027C.0089: unknown main item tag 0x0 [ 1295.286394][ T5907] apple 0003:05AC:027C.0089: unknown main item tag 0x0 [ 1295.312007][ T5907] apple 0003:05AC:027C.0089: unknown main item tag 0x0 [ 1295.325512][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.333766][ T9] usb 6-1: Product: syz [ 1295.338134][ T9] usb 6-1: Manufacturer: syz [ 1295.342196][ T5907] apple 0003:05AC:027C.0089: unknown main item tag 0x0 [ 1295.348254][ T9] usb 6-1: SerialNumber: syz [ 1295.369204][ T9] usb 6-1: config 0 descriptor?? [ 1295.381957][ T5907] apple 0003:05AC:027C.0089: hidraw0: USB HID v0.00 Device [HID 05ac:027c] on usb-dummy_hcd.3-1/input0 [ 1295.463145][ T5907] usb 4-1: USB disconnect, device number 59 [ 1295.957574][T24283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5410'. [ 1295.972155][T24283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5410'. [ 1296.355098][T24297] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5415'. [ 1296.621025][T24306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5419'. [ 1296.648377][T24306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5419'. [ 1296.901821][ T5907] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1297.096420][ T5907] usb 4-1: config 0 has no interfaces? [ 1297.107158][ T5907] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1297.116951][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.134501][ T5907] usb 4-1: Product: syz [ 1297.200904][ T5907] usb 4-1: Manufacturer: syz [ 1297.292912][ T5907] usb 4-1: SerialNumber: syz [ 1297.318280][ T5907] usb 4-1: config 0 descriptor?? [ 1297.626543][ T5923] usb 6-1: USB disconnect, device number 55 [ 1297.970878][T24329] netlink: 'syz.5.5424': attribute type 13 has an invalid length. [ 1298.261826][ T5907] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1298.375188][T24329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.382649][T24329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.441479][ T5907] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1298.486190][ T5907] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1298.577032][ T5907] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1298.631504][ T5907] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1298.666718][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1298.686922][ T5907] usb 6-1: Product: syz [ 1298.695626][ T5907] usb 6-1: Manufacturer: syz [ 1298.704926][ T5907] usb 6-1: SerialNumber: syz [ 1298.727017][ T5907] usb 6-1: config 0 descriptor?? [ 1298.739565][ T5907] hub 6-1:0.0: bad descriptor, ignoring hub [ 1298.746875][ T5907] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1298.766463][ T5907] usb 6-1: selecting invalid altsetting 0 [ 1298.852457][T24346] openvswitch: netlink: Message has 4 unknown bytes. [ 1298.859464][T24346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1299.024875][T24329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.162157][T24329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.564005][T24354] usb 6-1: reset high-speed USB device number 56 using dummy_hcd [ 1299.851386][T24354] usb 6-1: device firmware changed [ 1299.870511][T24358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5427'. [ 1299.889810][T16070] usb 6-1: USB disconnect, device number 56 [ 1299.896496][T24358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5427'. [ 1299.963970][T24343] usb 4-1: USB disconnect, device number 60 [ 1299.987051][T24350] tipc: Enabling of bearer rejected, failed to enable media [ 1300.041945][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.164021][T16070] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1300.281820][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.288235][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.344408][T16070] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1300.367682][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.380060][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.392007][T16070] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1300.392047][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.764960][T16070] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1300.874738][T16070] usb 6-1: string descriptor 0 read error: -22 [ 1300.881187][T16070] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1300.940629][T16070] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1301.004483][T16070] usb 6-1: config 0 descriptor?? [ 1301.223759][T24372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.273938][T24372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.563301][T16070] usb 6-1: can't set config #0, error -71 [ 1301.575751][T16070] usb 6-1: USB disconnect, device number 57 [ 1301.896649][T24382] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5434'. [ 1301.971768][T16070] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1301.981774][T24343] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1302.123912][T16070] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.134344][T16070] usb 2-1: config 0 has no interfaces? [ 1302.163762][T16070] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1302.174599][T16070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.183204][T16070] usb 2-1: Product: syz [ 1302.187705][T16070] usb 2-1: Manufacturer: syz [ 1302.195372][T24343] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1302.204600][T24343] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1302.215365][T16070] usb 2-1: SerialNumber: syz [ 1302.220172][T24343] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1302.233592][T16070] usb 2-1: config 0 descriptor?? [ 1302.239968][T24343] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1302.271627][T24343] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1302.299673][T24343] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1302.309170][T24343] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1302.336854][T24343] usb 3-1: Product: syz [ 1302.341250][T24343] usb 3-1: Manufacturer: syz [ 1302.462916][T24343] cdc_wdm 3-1:1.0: skipping garbage [ 1302.468429][T24343] cdc_wdm 3-1:1.0: skipping garbage [ 1302.497561][T24343] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1302.504923][T24343] cdc_wdm 3-1:1.0: Unknown control protocol [ 1302.916382][T24397] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1303.320921][T24402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5440'. [ 1303.325060][T24336] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1303.369728][T24404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5441'. [ 1303.410324][T24404] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1303.433345][T24404] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1303.440851][T24404] bond16: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 1303.453750][T24404] bond16: (slave ip6tnl2): Error -95 calling set_mac_address [ 1303.492637][T24336] usb 4-1: Using ep0 maxpacket: 16 [ 1303.498729][T16656] usb 3-1: USB disconnect, device number 63 [ 1303.501991][T24336] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1303.540649][T24336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.605359][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 1303.605379][ T30] audit: type=1326 audit(1768880783.680:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24409 comm="syz.5.5444" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7539 code=0x0 [ 1303.612640][T24336] usb 4-1: Product: syz [ 1303.642883][T24336] usb 4-1: Manufacturer: syz [ 1303.647586][T24336] usb 4-1: SerialNumber: syz [ 1303.689084][T24411] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1303.700113][T24336] usb 4-1: config 0 descriptor?? [ 1303.705452][ T30] audit: type=1326 audit(1768880783.780:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24409 comm="syz.5.5444" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7539 code=0x0 [ 1303.853962][T24418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5443'. [ 1304.401789][T24336] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1304.419746][T24336] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1304.430840][T24336] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1304.439118][T24336] usb 4-1: media controller created [ 1304.482009][T24336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1304.780821][T16363] usb 2-1: USB disconnect, device number 22 [ 1304.906346][T24336] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1304.915169][T24336] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1304.936217][T24426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5446'. [ 1305.155931][T16656] usb 4-1: USB disconnect, device number 61 [ 1305.208900][T16656] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1305.380802][T24430] xt_bpf: check failed: parse error [ 1305.471976][T16363] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1305.645842][T16363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1305.691086][T16363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.711974][T16363] usb 2-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 1305.732294][T16363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.765585][T16363] usb 2-1: config 0 descriptor?? [ 1306.287905][T24428] IPVS: set_ctl: invalid protocol: 274 0.0.0.16:61207 [ 1306.313371][T24428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.326628][T24428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.541006][T16363] usbhid 2-1:0.0: can't add hid device: -71 [ 1306.549721][T16363] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1306.569926][T16363] usb 2-1: USB disconnect, device number 23 [ 1306.692173][T24446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.730622][T24446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.838690][T24448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5452'. [ 1307.268508][T24462] netlink: 'syz.3.5457': attribute type 10 has an invalid length. [ 1307.451897][T24336] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1307.656138][T24466] netlink: 'syz.3.5458': attribute type 12 has an invalid length. [ 1307.664483][T24466] netlink: 'syz.3.5458': attribute type 29 has an invalid length. [ 1307.673742][T24336] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.688927][T24336] usb 2-1: config 0 has no interfaces? [ 1307.760830][T24466] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5458'. [ 1307.771732][T24466] netlink: 'syz.3.5458': attribute type 2 has an invalid length. [ 1307.791492][T24466] netlink: 'syz.3.5458': attribute type 1 has an invalid length. [ 1307.822780][T24336] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1307.834560][T24336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.848235][T24336] usb 2-1: Product: syz [ 1307.942876][T24336] usb 2-1: Manufacturer: syz [ 1307.947675][T24336] usb 2-1: SerialNumber: syz [ 1307.957669][T24336] usb 2-1: config 0 descriptor?? [ 1308.739713][T24480] loop8: detected capacity change from 0 to 1 [ 1308.764962][ T5835] Dev loop8: unable to read RDB block 1 [ 1309.066959][ T5835] loop8: unable to read partition table [ 1309.082035][ T5835] loop8: partition table beyond EOD, truncated [ 1309.100163][T24480] Dev loop8: unable to read RDB block 1 [ 1309.106858][T24480] loop8: unable to read partition table [ 1309.129813][T24480] loop8: partition table beyond EOD, truncated [ 1309.158409][T24480] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1310.210370][T16656] usb 2-1: USB disconnect, device number 24 [ 1310.368256][T24509] nfs: Unknown parameter '' [ 1310.569716][T24513] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5471'. [ 1310.579350][T24513] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5471'. [ 1311.197737][T24517] xt_limit: Overflow, try lower: 1792/134217728 [ 1311.544670][T24524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5474'. [ 1311.589773][T24524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5474'. [ 1311.938785][ T30] audit: type=1326 audit(1768880792.010:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.2.5477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1311.981781][ T30] audit: type=1326 audit(1768880792.010:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.2.5477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1312.222497][ T30] audit: type=1326 audit(1768880792.030:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.2.5477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1312.327182][ T30] audit: type=1326 audit(1768880792.040:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.2.5477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1312.493878][ T30] audit: type=1326 audit(1768880792.040:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.2.5477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1312.580986][ T30] audit: type=1326 audit(1768880792.040:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.2.5477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=281 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1312.637204][ T30] audit: type=1326 audit(1768880792.040:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.2.5477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1312.697491][ T30] audit: type=1326 audit(1768880792.040:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.2.5477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1312.939238][T24343] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1313.188850][T24343] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.278907][T24343] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1313.288506][ T30] audit: type=1326 audit(1768880792.040:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.2.5477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1313.496041][T24343] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1313.535053][T24343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.591145][ T30] audit: type=1326 audit(1768880792.040:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.2.5477" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1313.629891][T24343] usb 3-1: Product: syz [ 1313.638869][T24343] usb 3-1: Manufacturer: syz [ 1313.650412][T24343] usb 3-1: SerialNumber: syz [ 1314.076664][T24552] nfs: Unknown parameter '' [ 1314.244532][T24559] syzkaller0: entered promiscuous mode [ 1314.250257][T24559] syzkaller0: entered allmulticast mode [ 1314.321442][T24559] tipc: Enabled bearer , priority 10 [ 1314.347388][T24558] tipc: Resetting bearer [ 1314.416613][T24558] tipc: Disabling bearer [ 1314.432680][T24562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5487'. [ 1314.443401][T24562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5487'. [ 1314.814582][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5485'. [ 1314.835309][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5485'. [ 1315.906743][T16070] usb 3-1: USB disconnect, device number 64 [ 1316.430646][T24593] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1316.521794][T24336] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1316.671789][T24336] usb 6-1: Using ep0 maxpacket: 32 [ 1316.678315][T24336] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1316.701299][T24336] usb 6-1: config 0 has no interface number 0 [ 1316.730002][T24336] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1316.778133][T24336] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1316.799080][T24336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.815728][T24602] nfs: Unknown parameter '' [ 1316.836737][T24336] usb 6-1: Product: syz [ 1316.851197][T24336] usb 6-1: Manufacturer: syz [ 1316.876839][T24336] usb 6-1: SerialNumber: syz [ 1316.910312][T24336] usb 6-1: config 0 descriptor?? [ 1316.935130][T24590] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1317.221853][T24337] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1317.300210][T24616] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1317.327796][T24615] macvtap2: entered promiscuous mode [ 1317.340262][T24615] macvtap2: entered allmulticast mode [ 1317.353831][T24615] vlan0: entered allmulticast mode [ 1317.359148][T24615] veth0_vlan: entered allmulticast mode [ 1317.366968][T24615] vlan0: entered promiscuous mode [ 1317.381485][T24615] team0: Device macvtap2 failed to register rx_handler [ 1317.397617][T24337] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1317.408138][T24337] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1317.419323][T24337] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1317.429087][T24615] vlan0: left allmulticast mode [ 1317.434838][T24615] veth0_vlan: left allmulticast mode [ 1317.441379][T24615] vlan0: left promiscuous mode [ 1317.446543][T24337] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1317.460560][T24337] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1317.490790][T24337] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1317.500667][T24337] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1317.511560][T24337] usb 4-1: Product: syz [ 1317.520706][T24337] usb 4-1: Manufacturer: syz [ 1317.559744][T24337] cdc_wdm 4-1:1.0: skipping garbage [ 1317.571309][T24337] cdc_wdm 4-1:1.0: skipping garbage [ 1317.599158][T24337] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1317.631913][T24337] cdc_wdm 4-1:1.0: Unknown control protocol [ 1317.927396][T24336] asix 6-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1317.962168][T16070] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1318.126738][T16070] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.222883][T16070] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1318.244294][T16070] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1318.253825][T16070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.263835][T16070] usb 2-1: Product: syz [ 1318.269975][T16070] usb 2-1: Manufacturer: syz [ 1318.281049][T16070] usb 2-1: SerialNumber: syz [ 1318.900440][T24636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5506'. [ 1318.970103][T24636] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1319.041799][T24638] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1319.049855][T24638] bond16: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 1319.067434][T24638] bond16: (slave ip6tnl2): Error -95 calling set_mac_address [ 1319.417921][T24336] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1319.434802][T24336] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1319.447951][T24336] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1319.460037][T24336] usb 6-1: USB disconnect, device number 58 [ 1319.489368][T24643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.539922][T24643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.611812][T24343] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1319.742584][T24343] usb 3-1: device descriptor read/64, error -71 [ 1319.991824][T24343] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1320.142754][T24343] usb 3-1: device descriptor read/64, error -71 [ 1320.262102][T24343] usb usb3-port1: attempt power cycle [ 1320.602146][T24343] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1320.633060][T24343] usb 3-1: device descriptor read/8, error -71 [ 1320.646815][T24652] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1320.653381][T24652] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1320.669529][T24652] vhci_hcd vhci_hcd.0: Device attached [ 1320.688965][T24652] netlink: 'syz.5.5510': attribute type 1 has an invalid length. [ 1320.730256][T24336] usb 2-1: USB disconnect, device number 25 [ 1320.860720][T24652] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1320.916013][T24337] usb 43-1: new low-speed USB device number 11 using vhci_hcd [ 1320.982169][T24343] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1321.062579][T24343] usb 3-1: device descriptor read/8, error -71 [ 1321.135875][T24663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5513'. [ 1321.172133][T24343] usb usb3-port1: unable to enumerate USB device [ 1321.245400][T24653] vhci_hcd: connection reset by peer [ 1321.253589][T10189] vhci_hcd vhci_hcd.5: stop threads [ 1321.258869][T10189] vhci_hcd vhci_hcd.5: release socket [ 1321.275664][T10189] vhci_hcd vhci_hcd.5: disconnect device [ 1322.013791][T24671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5516'. [ 1322.376354][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1322.376804][T24336] usb 4-1: USB disconnect, device number 62 [ 1322.383003][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1322.383028][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1322.561750][T24681] xt_bpf: check failed: parse error [ 1322.896333][T24685] Cannot find map_set index 2 as target [ 1322.931922][T16070] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1323.191732][T16070] usb 3-1: Using ep0 maxpacket: 32 [ 1323.275459][T16070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1323.301779][T16070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.324039][T16070] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1323.344491][T16070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.372553][T16070] usb 3-1: config 0 descriptor?? [ 1323.401844][T16070] hub 3-1:0.0: USB hub found [ 1323.595092][T24679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.606670][T24679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.633244][T16070] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 1323.634116][T24679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.959477][T24679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.968699][T24679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.982406][T24679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.991144][T24679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.000650][T24679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.039153][T24679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.073439][T24679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.233537][T16070] usbhid 3-1:0.0: can't add hid device: -32 [ 1324.239827][T16070] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1324.867498][T24714] tipc: Cannot configure node identity twice [ 1325.078302][T24716] Cannot find map_set index 2 as target [ 1325.120056][T24718] netlink: 'syz.1.5533': attribute type 12 has an invalid length. [ 1325.128289][T24718] netlink: 'syz.1.5533': attribute type 29 has an invalid length. [ 1325.384985][T24718] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5533'. [ 1325.422474][T24718] netlink: 'syz.1.5533': attribute type 2 has an invalid length. [ 1325.430583][T24718] netlink: 'syz.1.5533': attribute type 1 has an invalid length. [ 1325.681947][T24725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.691255][T24725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.728486][T17497] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1325.737453][T24336] usb 3-1: USB disconnect, device number 69 [ 1326.072250][T24337] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1326.163928][T17497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.211789][T17497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.225700][T17497] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1326.263049][T17497] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1326.520422][T17497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.608913][T17497] usb 4-1: config 0 descriptor?? [ 1327.041967][T17497] plantronics 0003:047F:FFFF.008A: reserved main item tag 0xd [ 1327.255764][T17497] plantronics 0003:047F:FFFF.008A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1327.288071][T24721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5531'. [ 1327.416439][T24721] vxlan0: entered promiscuous mode [ 1327.558694][T22433] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.582547][T22433] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.597175][T22433] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.608975][T22433] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1328.471748][T16070] usb 4-1: reset high-speed USB device number 63 using dummy_hcd [ 1328.485593][T24763] nfs: Unknown parameter '' [ 1328.552018][ T5907] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1328.689938][T24765] loop8: detected capacity change from 0 to 1 [ 1328.710189][T24765] Dev loop8: unable to read RDB block 1 [ 1328.720417][T24765] loop8: unable to read partition table [ 1328.730700][T24765] loop8: partition table beyond EOD, truncated [ 1328.744896][T24765] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1328.831824][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 1328.846427][ T5907] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 1328.893499][ T5907] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1328.912047][ T5907] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1328.921125][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.979255][ T5907] usb 3-1: config 0 descriptor?? [ 1329.441623][T17497] IPVS: starting estimator thread 0... [ 1329.453632][T24343] usb 4-1: USB disconnect, device number 63 [ 1329.584351][T24784] IPVS: using max 27 ests per chain, 64800 per kthread [ 1329.660714][T24791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5553'. [ 1330.046048][ T5907] nzxt-smart2 0003:1E71:2009.008B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1330.073799][T24794] netlink: zone id is out of range [ 1330.079153][T24794] netlink: zone id is out of range [ 1330.084383][T24794] netlink: zone id is out of range [ 1331.016300][T24803] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5556'. [ 1331.026826][ T5907] usb 3-1: USB disconnect, device number 70 [ 1331.062559][T24803] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5556'. [ 1331.420194][T24812] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5559'. [ 1331.541748][ T5907] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1331.702270][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 1331.729451][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.761781][ T5907] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1331.790764][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.800768][T24827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5564'. [ 1331.805576][ T5907] usb 3-1: config 0 descriptor?? [ 1331.859555][T24827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5564'. [ 1332.076083][T24833] loop8: detected capacity change from 0 to 8 [ 1332.102820][T24833] Dev loop8: unable to read RDB block 8 [ 1332.110417][T24833] loop8: unable to read partition table [ 1332.173329][T24833] loop8: partition table beyond EOD, truncated [ 1332.201949][T24833] loop_reread_partitions: partition scan of loop8 (þ被xü^6Ñ9%ƒä ) failed (rc=-5) [ 1332.434937][T24840] netlink: 'syz.3.5566': attribute type 2 has an invalid length. [ 1332.463874][ T5907] mcp2221 0003:04D8:00DD.008C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1332.922623][T24336] usb 3-1: USB disconnect, device number 71 [ 1333.415000][T24848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5571'. [ 1333.434410][T24848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5571'. [ 1333.720352][T24853] syzkaller0: entered promiscuous mode [ 1333.741769][T24853] syzkaller0: entered allmulticast mode [ 1333.785875][T24853] tipc: Enabled bearer , priority 10 [ 1333.801264][T24851] tipc: Resetting bearer [ 1333.810227][T24860] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5576'. [ 1333.820672][T24860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5576'. [ 1333.906523][T24851] tipc: Disabling bearer [ 1334.284338][T24874] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1334.349482][T24876] netlink: 'syz.3.5579': attribute type 10 has an invalid length. [ 1334.918271][T24886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.927286][T24886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.144802][T24905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5588'. [ 1336.171272][T24905] netlink: 'syz.2.5588': attribute type 10 has an invalid length. [ 1336.436755][T24909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.456935][T24909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.471521][T24909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5589'. [ 1336.489549][T24909] vxlan0: entered promiscuous mode [ 1336.499781][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1336.516412][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1336.525378][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1336.534225][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1336.810602][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5591'. [ 1337.321802][ T5907] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1337.465315][T24928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5597'. [ 1337.522382][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 1337.549296][ T5907] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1337.702459][ T5907] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1337.731943][ T5907] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1337.836262][ T5907] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1337.898617][ T5907] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1337.912933][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.198071][ T5907] usb 6-1: GET_CAPABILITIES returned 0 [ 1338.211856][ T5907] usbtmc 6-1:16.0: can't read capabilities [ 1338.454877][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.463984][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.473127][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.482170][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.491246][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.500346][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.635451][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.644589][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.653682][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.662781][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.716993][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.726103][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.735150][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.744194][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.753438][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.798397][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1338.835567][T24941] IPVS: length: 218 != 24 [ 1338.840662][T24918] syz_tun: entered allmulticast mode [ 1338.847533][T24917] syz_tun: left allmulticast mode [ 1338.853629][T16070] usb 6-1: USB disconnect, device number 59 [ 1339.101952][T24946] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5601'. [ 1339.122944][T24946] netlink: 'syz.3.5601': attribute type 12 has an invalid length. [ 1339.158045][T24946] netlink: 'syz.3.5601': attribute type 29 has an invalid length. [ 1339.179715][T24946] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5601'. [ 1339.196770][T24946] netlink: 59 bytes leftover after parsing attributes in process `syz.3.5601'. [ 1339.431998][T24957] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5603'. [ 1339.472446][T24954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5604'. [ 1339.538487][T24963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5607'. [ 1340.002318][T24336] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1340.061799][T24337] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1340.432904][T24337] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1340.691999][T24337] usb 6-1: can't read configurations, error -61 [ 1340.709511][T24336] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1340.718367][T24336] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1340.728680][T24336] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1340.737963][T24336] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1340.750859][T24336] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1340.794475][T24336] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1340.806464][T24336] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1340.821755][T24337] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1340.832029][T24336] usb 4-1: Product: syz [ 1340.837289][T24336] usb 4-1: Manufacturer: syz [ 1340.872699][T24336] cdc_wdm 4-1:1.0: skipping garbage [ 1340.881054][T24336] cdc_wdm 4-1:1.0: skipping garbage [ 1340.920504][T24336] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1340.997787][T24336] cdc_wdm 4-1:1.0: Unknown control protocol [ 1341.140880][T24336] usb 4-1: USB disconnect, device number 64 [ 1341.148417][T24337] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1341.161387][T24337] usb 6-1: can't read configurations, error -61 [ 1341.214128][T24337] usb usb6-port1: attempt power cycle [ 1341.575239][T24993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.583872][T24337] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1341.615127][T24993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.654841][T24337] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1341.663480][T24337] usb 6-1: can't read configurations, error -61 [ 1341.802346][T24337] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1341.902098][ T5907] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1341.913441][T24337] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1341.930350][T24337] usb 6-1: can't read configurations, error -61 [ 1341.937579][T24337] usb usb6-port1: unable to enumerate USB device [ 1341.986966][T25006] vlan0: left allmulticast mode [ 1341.996340][T25006] veth0_vlan: left allmulticast mode [ 1342.035088][T25006] ip6gre1: left allmulticast mode [ 1342.044352][T25006] macvtap1: left allmulticast mode [ 1342.050121][T25006] macvtap2: left allmulticast mode [ 1342.055873][T24343] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1342.070000][T25006] gretap0: left allmulticast mode [ 1342.077140][T25006] gretap1: left allmulticast mode [ 1342.083217][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 1342.090887][ T5907] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1342.100917][ T5907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1342.118952][ T5907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1342.129843][ T5907] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1342.253713][T24343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.265644][T24343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.282215][T24343] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1342.321738][ T5907] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1342.337625][T24343] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1342.349223][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.360299][T24343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.409299][T24343] usb 2-1: config 0 descriptor?? [ 1342.577845][ T5907] usb 3-1: GET_CAPABILITIES returned 0 [ 1342.591764][ T5907] usbtmc 3-1:16.0: can't read capabilities [ 1342.711600][T25015] __nla_validate_parse: 1 callbacks suppressed [ 1342.718137][T25015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5621'. [ 1342.732206][T25015] netlink: 277 bytes leftover after parsing attributes in process `syz.4.5621'. [ 1342.741551][T25015] netlink: 277 bytes leftover after parsing attributes in process `syz.4.5621'. [ 1342.848090][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1342.849658][T24343] plantronics 0003:047F:FFFF.008D: reserved main item tag 0xd [ 1342.857249][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1342.857312][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.314843][T25004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5618'. [ 1343.351162][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.360312][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.369413][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.425876][T25019] netlink: 'syz.5.5622': attribute type 12 has an invalid length. [ 1343.644324][T25019] netlink: 'syz.5.5622': attribute type 29 has an invalid length. [ 1343.653953][T24343] plantronics 0003:047F:FFFF.008D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1343.662722][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.675386][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.684459][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.693506][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.741316][T25019] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5622'. [ 1343.795656][T25019] netlink: 'syz.5.5622': attribute type 2 has an invalid length. [ 1343.800902][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.812599][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.819669][T25019] netlink: 'syz.5.5622': attribute type 1 has an invalid length. [ 1343.821727][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.838995][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.875753][T25004] vxlan0: entered promiscuous mode [ 1343.930638][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.940345][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1343.953163][T22585] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1343.959373][T24997] IPVS: length: 218 != 24 [ 1343.966531][T22585] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.011897][T24997] syz_tun: entered allmulticast mode [ 1344.058491][T22585] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.075826][T22585] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.117919][T24996] syz_tun: left allmulticast mode [ 1344.144713][T24337] usb 3-1: USB disconnect, device number 72 [ 1345.151496][T24337] usb 2-1: USB disconnect, device number 26 [ 1345.547722][T25041] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1345.554298][T25041] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1345.626174][T25041] vhci_hcd vhci_hcd.0: Device attached [ 1345.643664][T25045] netlink: 'syz.2.5625': attribute type 1 has an invalid length. [ 1345.655686][T25040] loop2: detected capacity change from 0 to 7 [ 1345.682557][T25040] Dev loop2: unable to read RDB block 7 [ 1345.692038][T25040] loop2: AHDI p1 p2 p3 [ 1345.702157][T25040] loop2: partition table partially beyond EOD, truncated [ 1345.713247][T25040] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1345.741885][T25040] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1345.896895][T24355] usb 37-1: new low-speed USB device number 19 using vhci_hcd [ 1346.033364][T25045] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1346.054238][T25058] Cannot find map_set index 2 as target [ 1346.160827][T25042] vhci_hcd: connection reset by peer [ 1346.167350][T10351] vhci_hcd vhci_hcd.2: stop threads [ 1346.177551][T10351] vhci_hcd vhci_hcd.2: release socket [ 1346.233989][T25041] bond17: (slave geneve6): making interface the new active one [ 1346.248349][T25041] bond17: (slave geneve6): Enslaving as an active interface with an up link [ 1346.450774][T25064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.489415][T10351] vhci_hcd vhci_hcd.2: disconnect device [ 1346.490720][T25064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.769659][T25060] SET target dimension over the limit! [ 1347.494115][T25073] loop8: detected capacity change from 0 to 1 [ 1347.521012][T25073] Dev loop8: unable to read RDB block 1 [ 1347.526841][T25073] loop8: unable to read partition table [ 1347.563529][T25073] loop8: partition table beyond EOD, truncated [ 1347.570244][T25073] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1347.731841][T24343] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1347.922873][T24343] usb 4-1: Using ep0 maxpacket: 8 [ 1347.992006][T24343] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1348.003013][T24343] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1348.013226][T24343] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1348.023998][T24343] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1348.169037][T24343] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1348.212176][T24343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.321793][T16070] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1348.559859][T24343] usb 4-1: GET_CAPABILITIES returned 0 [ 1348.571767][T24343] usbtmc 4-1:16.0: can't read capabilities [ 1348.802560][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1348.811708][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1348.822408][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1348.831525][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1348.840612][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1348.869894][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1348.879036][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1348.888152][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1348.968315][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1348.977484][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1349.115824][T25092] IPVS: length: 218 != 24 [ 1349.120427][T25092] syz_tun: entered allmulticast mode [ 1349.291854][T24337] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1349.418002][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1349.427137][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1349.559341][T24337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.602030][T24337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.611996][T24337] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1349.625078][T24337] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1349.632584][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1349.634419][T24337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.643315][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1349.654796][T24337] usb 6-1: config 0 descriptor?? [ 1349.660628][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1349.761924][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1349.920721][T25071] syz_tun: left allmulticast mode [ 1349.933477][T17497] usb 4-1: USB disconnect, device number 65 [ 1350.275978][T24337] plantronics 0003:047F:FFFF.008E: reserved main item tag 0xd [ 1350.300298][T24337] plantronics 0003:047F:FFFF.008E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1350.634739][T25089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5638'. [ 1350.651023][T25089] vxlan0: entered promiscuous mode [ 1350.662023][ T1140] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.693291][ T1140] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.726645][ T1140] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.740271][T16070] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1350.788488][T16070] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1350.836837][ T1140] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.862607][T16070] usb 3-1: can't read configurations, error -71 [ 1351.068444][T24355] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1351.204083][T25110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1351.242061][T25113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5646'. [ 1351.252596][T25113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5646'. [ 1351.296926][T25113] dummy0: entered promiscuous mode [ 1351.374622][T25113] dummy0: left promiscuous mode [ 1351.722379][T16070] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1351.801762][T24337] usb 6-1: reset high-speed USB device number 64 using dummy_hcd [ 1351.959309][T16070] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.003245][T16070] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1352.058401][T16070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.137988][T16070] usb 3-1: Product: syz [ 1352.150139][T16070] usb 3-1: Manufacturer: syz [ 1352.186335][T16070] usb 3-1: SerialNumber: syz [ 1352.212889][T16070] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1352.533806][T24343] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1352.583534][T24336] usb 6-1: USB disconnect, device number 64 [ 1352.677305][T16070] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1352.693315][T16070] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1352.697588][T25133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.710497][T24343] usb 2-1: Using ep0 maxpacket: 8 [ 1352.718253][T16070] usb 3-1: media controller created [ 1352.719512][T25133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.724728][T24343] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1352.750435][T16070] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1352.760798][T24343] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1352.772495][T24343] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1352.791870][T24343] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1352.825432][T24343] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1352.861732][T24343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.114129][T16070] usb 3-1: USB disconnect, device number 74 [ 1353.208488][T24343] usb 2-1: GET_CAPABILITIES returned 0 [ 1353.231412][T24343] usbtmc 2-1:16.0: can't read capabilities [ 1353.347611][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.356709][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.365889][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.375020][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.384129][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.403458][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.412686][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.421763][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.431421][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.440632][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.449747][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.505702][T25149] loop8: detected capacity change from 0 to 8 [ 1353.512588][T25149] Dev loop8: unable to read RDB block 8 [ 1353.519667][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.528757][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.537849][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.546915][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1353.556132][T25149] loop8: unable to read partition table [ 1353.562654][T25149] loop8: partition table beyond EOD, truncated [ 1353.568937][T25149] loop_reread_partitions: partition scan of loop8 (þ被xü^6Ñ9%ƒä ) failed (rc=-5) [ 1353.682557][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1353.822051][T25131] IPVS: length: 218 != 24 [ 1353.830163][T25131] syz_tun: entered allmulticast mode [ 1353.839702][T25131] syz_tun: left allmulticast mode [ 1353.848192][T16070] usb 2-1: USB disconnect, device number 27 [ 1353.867867][T25160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5662'. [ 1353.886662][T25160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5662'. [ 1355.152094][T24343] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1355.333440][T24343] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.355189][T24343] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1355.372383][T24343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.380587][T24343] usb 4-1: Product: syz [ 1355.402277][T24343] usb 4-1: Manufacturer: syz [ 1355.411766][T16070] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1355.445681][T24343] usb 4-1: SerialNumber: syz [ 1355.468678][T24343] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1355.481350][T25185] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1355.572728][T25187] syzkaller1: entered promiscuous mode [ 1355.580453][T25187] syzkaller1: entered allmulticast mode [ 1355.581782][T16070] usb 2-1: Using ep0 maxpacket: 16 [ 1355.594308][T16070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.616035][T16070] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1355.639403][T16070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.704200][T16070] usb 2-1: config 0 descriptor?? [ 1355.901265][T24343] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1355.938641][T24343] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1355.951029][T24343] usb 4-1: media controller created [ 1356.053112][T24343] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1356.169082][T16070] mcp2221 0003:04D8:00DD.008F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1356.358729][T25183] ------------[ cut here ]------------ [ 1356.364735][T25183] usb 4-1: BOGUS control dir, pipe 80004280 doesn't match bRequestType c0 [ 1356.373342][T25183] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#1: syz.1.5669/25183 [ 1356.383778][T25183] Modules linked in: [ 1356.387972][T25183] CPU: 1 UID: 0 PID: 25183 Comm: syz.1.5669 Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.399286][T25183] Tainted: [L]=SOFTLOCKUP [ 1356.403869][T25183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1356.405455][T25202] netlink: 'syz.4.5674': attribute type 10 has an invalid length. [ 1356.414068][T25183] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 1356.414129][T25183] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 1356.414151][T25183] RSP: 0018:ffffc9000bc376e0 EFLAGS: 00010246 [ 1356.414176][T25183] RAX: 0000000000000000 RBX: ffff888052c99800 RCX: 0000000080004280 [ 1356.414404][T25183] RDX: ffff8880777efcc0 RSI: ffffffff8c140b20 RDI: ffffffff8f8ef290 [ 1356.414426][T25183] RBP: 1ffff1100f533d84 R08: 00000000000000c0 R09: 0000000000000000 [ 1356.414443][T25183] R10: ffffc9000bc377e0 R11: fffff52001786f08 R12: ffff888067e81100 [ 1356.414461][T25183] R13: ffff88807a99ec20 R14: 0000000080004280 R15: ffff8880777efcc0 [ 1356.414479][T25183] FS: 0000000000000000(0000) GS:ffff888125f1b000(0063) knlGS:00000000f548db40 [ 1356.414501][T25183] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1356.414556][T25183] CR2: 000000000c3f607f CR3: 0000000081d26000 CR4: 00000000003526f0 [ 1356.414580][T25183] Call Trace: [ 1356.414591][T25183] [ 1356.414610][T25183] ? __init_swait_queue_head+0xa9/0x150 [ 1356.414650][T25183] usb_start_wait_urb+0x115/0x4f0 [ 1356.414715][T25183] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1356.414769][T25183] usb_control_msg+0x232/0x3e0 [ 1356.414802][T25183] gl861_ctrl_msg+0x207/0x420 [ 1356.531771][T24336] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1356.536733][T25183] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1356.564854][T25183] gl861_i2c_master_xfer+0x439/0x6a0 [ 1356.570175][T25183] __i2c_transfer+0x79a/0x1f00 [ 1356.575319][T25183] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1356.581173][T25183] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1356.587140][T25183] ? i2c_transfer+0xc8/0x2d0 [ 1356.592011][T25183] i2c_transfer+0x1cc/0x2d0 [ 1356.596625][T25183] i2cdev_ioctl_rdwr+0x460/0x740 [ 1356.601616][T25183] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 1356.606925][T25183] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1356.612686][T25183] ? __fget_files+0x3a0/0x420 [ 1356.617404][T25183] ? __fget_files+0x2a/0x420 [ 1356.622047][T25183] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1356.627860][T25183] __ia32_compat_sys_ioctl+0x543/0x840 [ 1356.633399][T25183] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1356.639574][T25183] ? __sys_connect+0x38d/0x440 [ 1356.644589][T25183] ? __se_sys_futex_time32+0x360/0x3e0 [ 1356.650176][T25183] ? rcu_is_watching+0x15/0xb0 [ 1356.654988][T25183] __do_fast_syscall_32+0x1dc/0x570 [ 1356.660208][T25183] ? lockdep_hardirqs_on+0x7b/0x110 [ 1356.665479][T25183] ? do_fast_syscall_32+0x34/0x80 [ 1356.670557][T25183] ? irqentry_exit+0x10f/0x670 [ 1356.675401][T25183] do_fast_syscall_32+0x34/0x80 [ 1356.680277][T25183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1356.686992][T25183] RIP: 0023:0xf709d539 [ 1356.691102][T25183] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1356.710768][T25183] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1356.719241][T25183] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000707 [ 1356.727542][T25183] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 1356.735628][T25183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1356.743650][T25183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1356.751775][T25183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1356.759795][T25183] [ 1356.762902][T25183] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1356.770201][T25183] CPU: 1 UID: 0 PID: 25183 Comm: syz.1.5669 Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.781228][T25183] Tainted: [L]=SOFTLOCKUP [ 1356.785728][T25183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1356.795877][T25183] Call Trace: [ 1356.799168][T25183] [ 1356.803408][T25183] vpanic+0x1e0/0x670 [ 1356.807695][T25183] panic+0xb9/0xc0 [ 1356.811426][T25183] ? __pfx_panic+0x10/0x10 [ 1356.815855][T25183] __warn+0x317/0x4b0 [ 1356.819837][T25183] ? usb_submit_urb+0x105c/0x18d0 [ 1356.824872][T25183] ? usb_submit_urb+0x105c/0x18d0 [ 1356.829922][T25183] __report_bug+0x288/0x500 [ 1356.834425][T25183] ? usb_submit_urb+0x105c/0x18d0 [ 1356.839533][T25183] ? __pfx___report_bug+0x10/0x10 [ 1356.844578][T25183] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1356.850471][T25183] ? lockdep_hardirqs_on+0x7b/0x110 [ 1356.855697][T25183] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1356.861496][T25183] ? stack_depot_save_flags+0x3f3/0x810 [ 1356.867040][T25183] report_bug_entry+0x19a/0x290 [ 1356.871904][T25183] ? usb_submit_urb+0x111c/0x18d0 [ 1356.876947][T25183] ? usb_submit_urb+0x1121/0x18d0 [ 1356.882055][T25183] handle_bug+0xca/0x200 [ 1356.886303][T25183] exc_invalid_op+0x1a/0x50 [ 1356.890801][T25183] asm_exc_invalid_op+0x1a/0x20 [ 1356.895728][T25183] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 1356.901448][T25183] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 1356.921274][T25183] RSP: 0018:ffffc9000bc376e0 EFLAGS: 00010246 [ 1356.927346][T25183] RAX: 0000000000000000 RBX: ffff888052c99800 RCX: 0000000080004280 [ 1356.935312][T25183] RDX: ffff8880777efcc0 RSI: ffffffff8c140b20 RDI: ffffffff8f8ef290 [ 1356.943387][T25183] RBP: 1ffff1100f533d84 R08: 00000000000000c0 R09: 0000000000000000 [ 1356.951438][T25183] R10: ffffc9000bc377e0 R11: fffff52001786f08 R12: ffff888067e81100 [ 1356.959416][T25183] R13: ffff88807a99ec20 R14: 0000000080004280 R15: ffff8880777efcc0 [ 1356.967399][T25183] ? __init_swait_queue_head+0xa9/0x150 [ 1356.972972][T25183] usb_start_wait_urb+0x115/0x4f0 [ 1356.978030][T25183] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1356.983607][T25183] usb_control_msg+0x232/0x3e0 [ 1356.988381][T25183] gl861_ctrl_msg+0x207/0x420 [ 1356.993188][T25183] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1356.998410][T25183] gl861_i2c_master_xfer+0x439/0x6a0 [ 1357.003699][T25183] __i2c_transfer+0x79a/0x1f00 [ 1357.008594][T25183] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1357.014401][T25183] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1357.020212][T25183] ? i2c_transfer+0xc8/0x2d0 [ 1357.024814][T25183] i2c_transfer+0x1cc/0x2d0 [ 1357.029440][T25183] i2cdev_ioctl_rdwr+0x460/0x740 [ 1357.034590][T25183] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 1357.039756][T25183] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1357.045395][T25183] ? __fget_files+0x3a0/0x420 [ 1357.050161][T25183] ? __fget_files+0x2a/0x420 [ 1357.055011][T25183] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1357.060557][T25183] __ia32_compat_sys_ioctl+0x543/0x840 [ 1357.066017][T25183] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1357.071999][T25183] ? __sys_connect+0x38d/0x440 [ 1357.076942][T25183] ? __se_sys_futex_time32+0x360/0x3e0 [ 1357.082617][T25183] ? rcu_is_watching+0x15/0xb0 [ 1357.087403][T25183] __do_fast_syscall_32+0x1dc/0x570 [ 1357.092604][T25183] ? lockdep_hardirqs_on+0x7b/0x110 [ 1357.097818][T25183] ? do_fast_syscall_32+0x34/0x80 [ 1357.102855][T25183] ? irqentry_exit+0x10f/0x670 [ 1357.107633][T25183] do_fast_syscall_32+0x34/0x80 [ 1357.112577][T25183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1357.119004][T25183] RIP: 0023:0xf709d539 [ 1357.123187][T25183] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1357.142826][T25183] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1357.151244][T25183] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000707 [ 1357.159302][T25183] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 1357.167354][T25183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1357.175335][T25183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1357.183322][T25183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1357.191347][T25183] [ 1357.194823][T25183] Kernel Offset: disabled [ 1357.199237][T25183] Rebooting in 86400 seconds..