last executing test programs: 20m23.181128542s ago: executing program 4 (id=319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x800) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="66f23636410f97f666baf80c0f06440f2b6c66bafc0c66b8414366ef410f01c3f2470f011df4250000b9800000c00f3235008000000f300f20e035000020000f22e0478c6f345c1ca467470f78b477e98d3fcd0fc730", 0x56}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e7000905", @ANYRES64], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) pread64(r4, &(0x7f0000001280)=""/4108, 0x100c, 0xfa64) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 20m20.551787551s ago: executing program 4 (id=329): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x8, 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) lgetxattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000640)=@known='user.incfs.id\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d003f0000000000000000000400008005001180"], 0x1c}], 0x1, 0x0, 0x0, 0x4000045}, 0x300) 20m20.343622996s ago: executing program 4 (id=330): syz_usb_connect(0x0, 0x24, &(0x7f0000002500)={{0x12, 0x1, 0x0, 0xeb, 0xe4, 0x45, 0x20, 0x93a, 0x2603, 0x5301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x96, 0xf3, 0x0, 0xd, 0x80, 0xde}}]}}]}}, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x10000a}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000006fc0)=@req3={0x6, 0x101, 0x5, 0x8, 0x7, 0x9, 0xfffffff9}, 0x1c) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socket$kcm(0x10, 0x100000000002, 0x4) (async) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2805}, 0x4000) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000040)="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", 0x1f3, 0x1090, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000000000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x20003, 0x10020f5b, 0x0, [{}, {}, {}, {0x0, 0x35}, {0x20}, {0x5}, {}, {0x0, 0x6}, {0x0, 0x1}, {0xf, 0x1, 0x9, '\x00', 0x1}, {0x3b, 0x0, 0xfe}, {0xa}, {0xfe}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0xa, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x3, 0x0, 0xfa}, {0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}]}}) ioctl$KVM_RUN(r3, 0x8004ae98, 0x20e10000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x7fffffff) syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a"], 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) 20m17.969681824s ago: executing program 4 (id=334): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e967c540b1134200f48c0102030109021b0001000000000904571ccc49f9710009050235bc"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) unshare(0x2040600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0xb55cbc099b415d1, 0x34, &(0x7f00000003c0)=""/52}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x2) syz_usb_connect$cdc_ecm(0x4, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="13011003020000102505a1a440000102030109027d00010113e00309040001030206002a0824060000da1ee205240000010d240f01010400000f00e4006b862407070700072414ff0102001524120700a317a88b045e4f01a607c0ffcb7e392a08241c80000600000a02018107052415b200090581030800062300096a9856dee38c114e6304356d058202100008400000bfbd399c0ade2175d68f15eb63f201ce25"], &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x2, 0x3, 0x6, 0xff, 0x2}, 0x35, &(0x7f0000000100)={0x5, 0xf, 0x35, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x2, 0x1ef00, 0x7, [0x30, 0x0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0xa4f5, 0xf000, 0x9, [0xff00, 0x0, 0xff30, 0x0]}]}, 0x9, [{0x88, &(0x7f0000000140)=@string={0x88, 0x3, "757aba0b761bbfc452501f4c5b6bb017423325bc447d7ac3da8506257ade1d05c3e2579079a2102980b1457c797ea431c298075ea6abff99ab1454db2f12beea0e45794eb23bdbda725b157ef7e575c30a0275d8316828a688c0c837a26afa98533dcad8c5890f8048f25672a27e3f4f6a5eee40f733e39695de04cba3dd5fc3247a73890fb5"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x182a}}, {0x6f, &(0x7f0000000280)=@string={0x6f, 0x3, "f8bffe5fc8c6f7dcd5a91f89f210633a701812be33ca31daa1758d4ee491210d679738b603c7d094074f88d7c704e01ac9c990142db231b4fe0594cc3cf2378af4e9e99055778409e37b05cdd321e53c377f0629b82f66b7c89e4d4a15e9ff6a57af41bcfcd8ddaa756253aea8"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2401}}, {0x57, &(0x7f0000000340)=@string={0x57, 0x3, "0bd8fb6d18ca108b56b874f26015c4d6d82690119aa4a9016edf5804ee246cbf5f9dd269c79d2d575afabef63cb2c96359ce8a48ad22d7bcbf5939111b4757b9a452b5ae8511bf0079276f10f5cf201daedf8691ec"}}, {0x10, &(0x7f00000003c0)=@string={0x10, 0x3, "d024b754dc183781410a662a0a8d"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40d}}, {0x29, &(0x7f0000000480)=@string={0x29, 0x3, "2ce2d38cb78a987b2daea06c867ee1e6dbe45b34e189b11acd40b8dff22e096608c6892a1a6974"}}]}) 20m15.203157181s ago: executing program 4 (id=343): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x2, 0x8, 0x201, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf1a0}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}]}, 0x50}, 0x1, 0x0, 0x0, 0x8810}, 0x20000840) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, 0x0, 0x0, 0x20008801, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0xf010000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=0x0}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r6, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = msgget$private(0x0, 0x0) msgrcv(r8, 0x0, 0x0, 0x3, 0x2000) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="12010300a6ff0540cdabeecdb905000000010902220001000000000904000001010351000905f6fefffffff000072501"], 0x0) bind(r2, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @loopback}, 0x0, 0x1, 0x4, 0x3}}, 0x80) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x4, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000041}, 0x40) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r0) 20m14.87411052s ago: executing program 4 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) syz_emit_vhci(&(0x7f0000000f40)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x20000000) 20m13.522368788s ago: executing program 32 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) syz_emit_vhci(&(0x7f0000000f40)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x20000000) 17m56.614911757s ago: executing program 1 (id=744): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000140)={0x18, r2, 0x20, 0x0, &(0x7f0000000100)=[{0xe26, 0x7fffffffffffffff}, {0x9, 0xb}]}) tkill(r0, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004"], 0xe8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="110000000000030000000f00000008000300", @ANYRES32, @ANYBLOB="08002b007f00000005002e"], 0x34}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r7, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r7, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(r7) 17m55.798031839s ago: executing program 1 (id=745): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000140)="470f230ff00fb142438ed066bad004b000669af16b66edbf4cbf4c0569b56400000006c744240200000000c7442406000000000f011c24670fc77507420f0765f3410f0966baf80cb8d2128189ef66bafc0c66b86815450fc79800000000", 0x5e}], 0x1, 0x33, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x8baa, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000001b0003020000000000000000000052c463a810c0be805943cf929a40ee48"], 0x48}}, 0x10) close(r4) io_setup(0xffffff7f, &(0x7f0000000280)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500ffffff7f000008001e"], 0x4c}}, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 17m54.843367862s ago: executing program 1 (id=749): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x9d67, 0x10100, 0x0, 0x15c, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x1) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000001c0)) (async) r7 = syz_open_dev$dmmidi(&(0x7f0000000080), 0xfffffffffffffffe, 0x1f1582) (async) syz_io_uring_setup(0xd75, &(0x7f00000035c0)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000100), 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) fadvise64(r7, 0x1, 0x8, 0x0) shutdown(r8, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x83, &(0x7f00000000c0)={r9}, 0x8) r10 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='%(0.', 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000380), 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x30f9, &(0x7f0000000040)={0x0, 0x817, 0x40, 0x1, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r11) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 17m54.777448412s ago: executing program 1 (id=750): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r0, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) close_range(r0, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xff, 0xff, 0xff000000], [0xffffff00, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x74}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xff000000], [], 'wg2\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local, @private1, [0x0, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1420}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585cf"], 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000e8ffffff00020000000003"], 0x48) listen(0xffffffffffffffff, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24020400) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) 17m52.916331341s ago: executing program 1 (id=754): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f00000000c0)) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/2, 0x2) 17m51.850095181s ago: executing program 1 (id=756): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_setup(0x3507, &(0x7f0000000240)={0x0, 0xcb98, 0x10, 0x1, 0xb2}, &(0x7f0000000000), &(0x7f0000000080)) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a000001072414"], 0x0) splice(r4, 0x0, r7, 0x0, 0x4ffe2, 0x0) r8 = fanotify_init(0x200, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r8, 0x455, 0x8000003, r9, 0x0) syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad83700398d1c7", 0x11, 0xfffffffffffffffe) 17m51.066756301s ago: executing program 33 (id=756): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_setup(0x3507, &(0x7f0000000240)={0x0, 0xcb98, 0x10, 0x1, 0xb2}, &(0x7f0000000000), &(0x7f0000000080)) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a000001072414"], 0x0) splice(r4, 0x0, r7, 0x0, 0x4ffe2, 0x0) r8 = fanotify_init(0x200, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r8, 0x455, 0x8000003, r9, 0x0) syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad83700398d1c7", 0x11, 0xfffffffffffffffe) 21.263606034s ago: executing program 0 (id=3941): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioperm(0x0, 0x82, 0x1e) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x44485) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) fanotify_init(0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="af", 0x1}], 0x1}}], 0x1, 0x4040005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000002c0)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000100)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x40086603, &(0x7f0000000040)) unshare(0x62040200) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000100001000000001a0000000000000000", @ANYRES32=0x0, @ANYBLOB="3238d832a1595ff008e51a001d5ad9928f16df32f0b20f5797c41ffa254d9d95637e99100b956aca4e05d522c8c58cbc1473329d82c53eb997e6f00f04d8b9140696a9b36702a2e866940586848bf122dfb19c4487fb1caa0a44b33e6f435c3067e472d6af22cad61289da452b9a8bdf9765a012bab6a07c1c27bbb0763191285f6306c6ce3bfdd3a6778e3810a5"], 0x28}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 18.714290374s ago: executing program 0 (id=3946): socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x0, 0x0, 0xb49, 0x9, 0x1020000}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x0, 0x280, 0x368, 0x1b0, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x7, 0x4200, 0x0, 0x0}], 0x1}) 15.673882263s ago: executing program 2 (id=3953): io_setup(0x3ff, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa", 0xc5}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000580)="17", 0xfffffffffffffe08, 0x10008095, 0x0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480", @ANYRESDEC=r3], 0x7c}}, 0x0) unshare(0x68040200) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x21, 0x0, 0x0, 0xfffff010}, {0x5d, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x4006}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f557a8ea7bc2735faeab968506dd", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x7]}) 14.263249551s ago: executing program 0 (id=3956): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f00000004c0)=""/110, 0x6e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000b40)=""/263, 0x107, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/212, 0xfe65, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000025f85e40fd0b1700a32f0102030109022400010000000009040000"], 0x0) 12.50844684s ago: executing program 2 (id=3960): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = getpgid(r6) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x21, 0x0, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r8, @ANYRESOCT=r6, @ANYRES32=r0, @ANYRES8=r0, @ANYRES32=r5, @ANYRESOCT=r7], 0x7c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r2], 0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r10 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r10, 0xdb4, 0x0, 0x0, 0x0, 0x0) r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r13, &(0x7f0000000080)='3', 0x1) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b0020080080003400000000004000a80040001"], 0x364}}, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 11.48211602s ago: executing program 5 (id=3964): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000200)=0x1cc7) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) inotify_init1(0x0) r4 = socket$rds(0x15, 0x5, 0x0) unshare(0x26020480) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) 10.93468764s ago: executing program 0 (id=3965): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x15b4, 0x5}}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r0, 0x5, 0x2, 0xff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)={0x1298, 0x17, 0x100, 0x70bd26, 0x25dfdbfd, {0x1c}, [@generic="0fa97cb3e4f34e7b9c5cedb04f92f95917c4cb326d9c80d5bd00f9756904a482433ab9d02e841c5318bcdaeae37206ff4c312dbbdb4e11bb85cc4c173f3b1600fbd6ff47b74d21fcdad11f2ba13a7948c2fe6d27483847273583c91ac621c4e4257df0304bb79a240435a4a49ed44bfd4e7597da3365c7463a90afeaff2a30ccbc7d7afb91eebbc411f194d6d48ec6f060205465119990beea086f04a8f680d46bf66442706096b0adf1fc01e54b10a45359b051d276f354b028ef36d63fbe99e30c7c803866e9eb67c6e58796546a5303ebc8e4f26cf7da635ce4c185e3c013d2dfc1b3b86dc6e40229641ae70d01fc6e8344ed891a321e20ec368d8df71387f35d8b59d5736df453517fb3ccc0f28484ba6dcec0d830e7c112a95062fb73569aaf7c4aa833f85c471c2a9d7b758c6ac7ad21a571d5c159083c451f475d10440313693c6863513ecbcb054bdc828a380a3bdeac504b19e4630a532a8465e50b2b3cc81c4d686b01b9c316691adb83f5006d045a9878f03028263951e1ae356c37c06ac6d24b9ef7450040db70099ef9813a0fa667da5b51b88258ac1ff8ef8dd5376f02d76a995a5cdb48c106346f9b33959872d66b8fddd4344ded533b3c1a3542e4a6544c665f576f7c8739351de1b2402a259f64a0fbed0c87903388bd3aed05d949772f361eeb05d2ca399d080b51fb94e41e4037184e2e89adf5d2c130cd8efb2a00368a0329af13bac9cf7fe60c2d11497951664f270361a72b4a0fce3cac50538ddebfa1c0d7c2a6bddba0fff8b73acaf8e7c9ad58b0b5198bb6a560e7b3aad6c168d9bb29bb14d7282c93c86f5b084ba888bc516e8e482ea340b499e186efc39f9fc6b64150baa2bd7dbefcd0f76f35b8ce3d2801b338806ebe5dc72fb93d32dfb5cc08ec02101dc3e8ad829d647c4614e40724c391187f1787099acf8181c6f389d73622d7aefae69940b28b425eb73a1f92cedd26f60fe2cb19941824c5e32a708f931378d9ecc19e388a8fcc1c170c1b93a1ef07597cb26902da5f2c3cbc135b28b1ec81e35c1ffa791e5a426beae307ee20275a097bc1ba717402b53e0544b4f0e40a4b2f6ef9067715897edfcea1f48b3a2b18e6eaf9886863f288ad4aaf633ccd150c8af8fc959e12b9049043bf85b923fea499478a7dee72dfb96bf237bfccccd6bdcb9c278cb313e42ba034f1f487f9a86049a2cf3bb48625fab5ddbe157c10a2ed4214ee96c538544e55b09bd08687c8eaa11c9d31d359ab4c421768b02a84442c50b4f5fa292574515eaf07a00ed5443222587ad32cb19507a1e5a96523d2efc9ddf402a1bf14d5ad2dd2110d6d3a4175023260cba56cef535fac1fa6204b91f48f10ea66c11a021c7e5d5c1aa1b8b94dc9bb9af60a6f4bfa92ef63aa12d8a12fe2ca86506384146ed3a4966fade034452d03540e874f56c94443557c614bfc6f1b10b03155a4099b281470d392c418583982aa3521ac576d24331b0854e2aaa8a01f1f176a1aa31dae4dae4f5e2ad99d9dbd80bad08b18924e0873f5a3a428d06fd2e59289406e739e8a336fd81bfa5f6ac16ee8bc80a1df56a16b7bf7b0a9bb1a12714e21c0b437432f2e2464a41304956d5ffe6401e5a5a2e38e5b71475e8b905ef83e30cc11e6163aff325e8335fa46db6b9a5b10d81f272018e15c389059094a850e9c9b0d9d52496d66b6916138f88135b73ba19ac570cd71d8c4af8afc18c0af1ec875635e89177a5dce21ffca74fdce472df1d3404f5e1228228ebbca6a8da34879a8d4c840a7d36bcfd56abaaffa5190ea33059635c72e6da6cfb8e23f149d94c11392b4817f62e74b3f71f27ffedcc9c56ec8ce7f52850067a63df244fa20e2bfb0787485304eaea943ea0425528921f1c947e0d9c1a9d7014bacbdf9bcb8fad82bce847d32106116cafe324c308d56078cf6ac79e23f2353e26629ce64c8e5fe45fe80aef895f6b623c990a6149bdab113496281f2926bf279b09efd9103fd101e0676e86168487f70ebf7d21bdce7b110867cd94efacbfe344101966d681fad3f3c795318149fdb0498d9fbd8853995c196c27b115eea76597fa34ce617faf08ff0ef750c9df8608d992b19b6f1837874c2a575f1c8a5e2134e4f7f69f8f86da24232ef57ff21fd67c0dd22e560d0fa0eaf75adea0df73ebf9e48afb29b11a4c0e0336846d59ba7e745bb149fdf4200b067f161a1258233dc34010369649de4c88b472cdb6d27b821f307addef12b520baa0b63e9db60864b73cdceaba3eca505381a856f3156b83590d9c04dca3f492ff512c7d3ae72ad123a1a43fc61e2fb10271fc1eab6d1e86c3a9fab7899e99256b323b4c900e9d960cc69afc52b06f55530f7b03042f095cc164d5b7e4bd48929b1557e5b570beca7415acab7ae65271f8424070cbdd2e6f994abc30556259f4e1f931abe930c5084c0b3ec6d27a6f949f9d9f1a936c28e8a5e1511ace57cfcd53492d304680f3fbe182a8a11f42250895ad8e075242729170d942bea03540845c1695207385b598ec1ca27a7f3fc6c07ac02be1b50c4889ff796c9e469d6b23e865100da1f994b32e35d7bc4bea7b7640ef009dcfef4a432a7a8ffd2b1928fb708daa63f048fb573eb5d9450266ad326d3eab33754ab36f10523c7203b8d1fab9c6de1b3ddd7267118d0ed5de28b53dbe377912abaf9b11e05b91820c62751c4dfa67146ea1e78255e7e9acc5b599a0bca38540377aa2dc365f1bb39e71dcf3c360ab95908433b4189100a137824ff57ad2e878ebd6dd6ebda8d8b580eb5f11ecbfd07462f11b54d2263108beb546b9ecfcd8bafb44930191467c78848d9ba43ab7bcb8314283b3f285ba715a9f59b034b1df33b4de77f2bb6eb4566f8a532d6053327db40235b6b19a4029409b19345bf158167a71360f268bda3ade188be02ca27131c06c71e0843447de1df5965a22efc5e9dd37f26e45efc146c48361b790984e2d282e107f3822612f7ca1e34d1e9f732a56001f776510d42f5212079839c81d4c12e926ad539b4d56232df4e00de05b4b74f85be6b2c2d70cda0e33cbacd4518b7aceed6e62009227dbeaaefdc0c0c82de6da23f6b2d0b5d8cf8ae6444162e223064fef5a191339c5e268d230757bb7aeab0c079cc1b4a5ed553c253f469740136006a8010051e89ec3b09c6193d8de7be18187defedcedca9747dab1ec184978c998eaafc83c42df38e3d2eeb3b5bac0e74a9f4528d83d9f2e9331f4c58ca794a47398fc08681a3f3cc20c5b7fb0c3fe5ad271cf016dcaa58b9a900b3d9dad31574f79821a5552aca53dbd1b8dbbbd14adf95517c1d55f0625edc2f9a340101c6ad123e3f0fe90e098f98c07552eaf907f9abf81588ae11164bd364f63a3cff6a01ba90b84079b536f28d2826865b9d2585b732616c02993f39e41ed452dfdfd3509ab8a2c9a7f12f7457474aabd62117ab51217d8e1fdbd30f4d61f7b7b24b866e23162ac8c15c84f7ccd5382fca6576db9aeffac45854d8ec4638bf75396e57c2d631929d09a84060a69e376bfb9ebc30b28986c91e3e4f148ccea6c0aed4d2dd903edb6e889b37020e88755716870e36c6510fed3ffe14105e7a64f5f4b5b452b0eb7e6397975217e98acc7be05936b81d256a4d11d9b1a9be3e91b403536ff662753f53276795ad2547cf816589885ea411ac886ddd73a30e1e7d33a73fe6721bd579d8c56a9a58f9df7bb7283d4eae2c3df52a544f06afc26fc6a87ac53a2a541612b98a431bc7df19230bbca3a67e61adf975e32696beb090f24e9977a3eca3c076a6e9e479989f874dd0b07cb253777e169fdd143a6690d150cf8da9a3f8b244a3a4a117a5f2441e4befea58ab88669968380bb67ea4704f71ba048b9409456f29af9abb86b83b4717c429f0bddc81415dbf0dd648239d616b7d84b24bab0798a98fec9cfcf90369dab2428d42741cfb6be7cc1493e667539fa47946eb0d2c67e2438a9d24a23366d1206fdf6575cb7c06c8c16ceb146bdef4417c1759a1392d2b88d7fe14bb70d77c1e9cc16b877352620e2fd0dc135844095318f2231609a19471b5606cb1d2f959d9dfb5b390676e62fdb2b854cd77453845317384873eedc377cd481c2674796ad2e85f726247452dee64e2fdc4c893f2fddfd1179d1683524ea0ae7a7190696bad1fe457393d20decb964c4255c839bb4ed17729c591b68d00ade7a3d32605243bc995a24ff1c8cc52b5b76379563a5887ee545966181ed9e1ee41a80bcd97d5cc572a114b3ca7dc2c49d9f46bd60f99f6a4fd415794230b05b13d4aa06ae80d429f9b5e9ccc8527c96ac0ab495bfb218cfdc8fc658b47c42d44500b60bba0836a09f02186fd272c3b97628a6adbf3db0b8ec7a23ba65e190f7001cd92b3a34af0df39480c2abff74ac62712a18916982bf26e9efbc64fc1eaa967d3eb9cce9b1fdb2628e968188ed36fca71ca2b37ef4e8e9407637be5d1fa9504cf3d5744c0199e672ba1ada83ad5517ff2da65052e6d265856d5d786985555f990220c971458876730bcafc30bc02c135289900e9c13ed0557720eb6f9a33630a53b3443f1e48c1f26560386e1e250b3966542ecae9f0004bff76603815695d07f43927a46152b94d3bb131194bd088500599bbfe56f44fb16b40bb34ec510c27293f223e04a735650b8d6abc3e91aeba4da71bbb79beb429411e16f29c9e010b2f067a7ea0be4a95062fef37fcfe3c2f57cb02d5a88f59dfa67f626d6c7f61e1ac5b1f2b704fb4ba3237d041d27e5b8256af41f21cea32be44fa5d44ee4e6c320160a64c8dab834e3bbf731378dfe3d4d3b3f3c721566c63454514b5b1971946ca530fd575f2ef309d3e081ad936680193b1b4c853d30f80965cfd83012d4653b62b2e123cb2f91e0ca283a94c725320de86616eb2c4aab7e395d4334c12098c42482e9e77cc8a196bee070b3ab5b8bfd1d816d89225710a76443c6fdaf2b6cda0adfadbf97fe7366063c94f1e539929547d6857825e64332e93e6660346c82f790c2076d05549b3554d5e97ee41253173acdae72b2c29c1ce26f64ac70d0bebecae096f681308e9286d9adc2df804489092ac02ed9603e0f6981d8d46e118ccec21386fab2b206e9360fd2521fa0eb89f1d54be85b023ca33847880acf65305890520162c06a01c8b0d4cd9db9a4920c7c122bf0c6a3b4996f02bb5f7bde0a9d08dbc2a67c05884c317b7e86f37cfbfe47980b08e626d02fb031fa911e953413cddf663c657779053324c722f739e707c5784a0c1539ce8da619ea243e2ef91da9b70236c6537294e652ec16a38b9263f05c72387610d00511a4b26b48b02bc855614186278a83b2550c7e9c4e2e1d463f0f0d1ae5ef55483e8dd4e947dfc9b5a1dfeadd008d17ffe1ac49268d48be0b879f5f1a5a0bab0e430acf8db515b88e4c7dbf92fed2e8f31f685047fc24662401b78f35f685ef85f9895b0457afff871b8370d65a6e33f9227b1596ddf311e56981f9f63eaec9bbf5e95d9763e2127f7c15b5955bb252f579e40a7224bb090bca4b0a9c4d03ff12a920fe967eca57827423fc37d56ff4179862818b423ed3864e36364b9c1afff0425752457c1297c1b03a4f100432caf4acb44f2177d6ba9e07ec0034df905bc8aa0873ab09ba5afd12294124c54a1d8984d85178237b7c345ce62a179c8d87c7e631ae068838f83794eeb4d1666a1aa4e5935245d1c9ca66e4a1e67fb72093e8812d3d9070b46a80f82133d84a77cf1f7178229c0f7aedb21bb8cb16", @nested={0x278, 0x6c, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @u32=0x5}, @typed={0x3a, 0x80, 0x0, 0x0, @binary="e666ff7268fe7003ae77263469ecf6c18e7b413eea45475da0fb96bc9da01d3788dc4a025feaa2a871eefe4adae41d91df6842aab6f9"}, @nested={0x4, 0x34}, @typed={0x5b, 0xd9, 0x0, 0x0, @binary="e2dd17c35460ad3552d697137e5e987137ef9ccf0c959ad430e9fda20336ff14aa72e5679c8896fc22ab1340d5023b35bf1f87a82f4af1094ec09fe0580c9d77a62d509bc7d60f3d1a08c77ae38c8b3f37cd562e198510"}, @typed={0xd, 0x25, 0x0, 0x0, @str='\x9f/\xca\\:F,+\x00'}, @generic="2ff8422e4812180475395b9d60cb0897976a1eee926a9a40f1a2493b8596d989fe3f00a9fdecb400b20ea11f062c13096836513f2e6d6dc1cf59b482b52e90af3e8011c95c1589b22a849678c320079fe726487efc23d39d82ca81af6993c16b7142078c480af5e92727616c1e57624545ca0cbd873940ebee9db5258d9ea9077b8b7b963811bc618f0f475c3a8d174a6fe31d0bad44ca0da1d9ad0714e3aeb4761693ca6f98c65ef91f5dac0e54f8e6189e4c917e5d65364fe746a8", @generic="b4f996fca59cc39ef2022d9b0e25f7a71d3cfa0c74f077bc917cef0dcb7a0b29b467bb476a28c11d141c1096a934b31945e77a1fb0fbccc12b467f26019c4794a4e483467fbddc52f8d0cf80f459ef2455ce593a67f39330a1894e8ad4c1db473df47d94368a1ff1622622504fc4bd8f101decf3d210670758e64660e6f1d0f67aed0a1dd0f64f005542fd9645f36a99", @generic="b3e913d4e4a824a3a633883d0ebabb9ff15ea5a72e24faa7ab8cf68fa0a4fae3c8e37044ab5fd8dce5dc545e6b3754ffd1efa796b38d21d404b598f69d1a0a2902a1caa2feb3231e8a889a24d25ea810dfb3c84ae4e8442ab6f80a74cd515de7", @generic="497ce3f0d8889f57c54e45334326b3e9762c9a9a"]}, @typed={0xc, 0x14d, 0x0, 0x0, @u64=0x7f}]}, 0x1298}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x400dc2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x40, 0x7fff7ffd}]}) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4b}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000380)={0x401, 0x880, &(0x7f0000000180)="7468b04d1e13c13eaec6028d6616261cf266dab5660aa2bea56001e09101d5fa514fef4f979a2052abc4520cf33d9945764c63b2ace05c4197b87f75c65cdb715f2aa3050b87c64569e7eba1a63c3cb52489455d7a9e3e04c6380fac88022c0f4539ffc4434e21093f07ac", &(0x7f0000000280)="c2662f810b58c4aa91e37ac9ae261f32b9928d929fff1462311b488669682d3895042103ac3c0f61213972f52ff8183930ffc5af2b860973c9b57d922c6c486d95f4716717482461c6e4d64fad7159ffc99ef03f52028c781a5e29a10e93fa2e4723875bf05255f00990ee8af50279ef6b03bf5498025ede22195d1da81f2b3a1201a5c1abacf269d09902ed81933dc92610a176e67717244b3e29b4226b87c9516a2c6048dbeab42ed02078e612ad6fd00a8f26833c4187d38539b4be1f7bf2e132af0f28787e4fdbb82896", 0x6b, 0xcc}) mq_notify(r4, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f00000007c0)={{}, 0xfe}) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32=r2], 0x2dc}}, 0x0) 10.260892796s ago: executing program 3 (id=3967): r0 = userfaultfd(0x80001) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/227, 0xe3}], 0x1, 0x0, 0x0, 0x1800}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0xd0, 0x0, 0x12a0, 0x0, 0xd0, 0x1498, 0x1498, 0x1498, 0x1498, 0x1498, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0xfe}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'pim6reg\x00', 'sit0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'wlan1\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x5, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xff, 0xffffffff, 0xffffff00], 'wg0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x2, 0x5}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, 0x0, 0xe2}) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, 0x0}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) 9.293060245s ago: executing program 3 (id=3969): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd2c, 0x4, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2000000000903, 0x0, 0x0, 0xfffd}, 0x20) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05"], 0x0) 8.531218813s ago: executing program 3 (id=3970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x640000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2001, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e24, 0xfd, @remote, 0x1}, 0x1c, &(0x7f0000000400)}}], 0x2, 0x8801) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x40000) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r8, 0x1000, &(0x7f0000001540)=""/4096}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x87, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r9, &(0x7f00000000c0)="001086d990c97237a45b6616e513b6f7b106000800000000", 0x18, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @loopback, 0xffffffff}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x15) 7.512070491s ago: executing program 2 (id=3971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=@deltfilter={0x12d8, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x12a8, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x9}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x9, 0xd}}, @TCA_FLOW_MASK={0x8, 0x6, 0x7}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_POLICE={0x894, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x8000, 0xfffffff9, 0x2, {0x1, 0x0, 0x1, 0x8, 0x75, 0x400}, {0x6, 0x1, 0x6, 0xfff7, 0x80, 0x6}, 0x10001, 0x1, 0x7ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x5, 0x4, 0xa56, {0xc4, 0x2, 0x2, 0xff7f, 0x5, 0x10}, {0x4, 0x2, 0x1, 0x9, 0x3, 0xffffff7f}, 0xfffffff0, 0x0, 0x6de4dcb2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1c5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x8, 0x8, 0x0, 0x4, 0x3e624ec9, 0x1, 0x1, 0x4, 0x7, 0xd, 0x3, 0x7, 0x3ff, 0xfffffffc, 0x81, 0x1, 0x3, 0xd, 0x9c0, 0x9, 0x3, 0x2, 0x0, 0x7, 0x2, 0x6, 0x1, 0x3d, 0x4, 0x8000, 0x5, 0x1ff, 0x1, 0x6, 0x9, 0x3ff, 0x7000, 0xfba, 0x7, 0x3, 0x200, 0x7, 0x0, 0x3ff, 0x9, 0x3, 0xffffffff, 0x0, 0x8, 0x80000000, 0xc1, 0x9, 0x8, 0x8, 0xffffffff, 0x6, 0x10, 0xfffffffd, 0x0, 0x1000, 0x2, 0x9, 0x6, 0xe76, 0x4, 0x2, 0x7fffffff, 0xf, 0x81, 0x9, 0x4, 0x3, 0x6, 0x80000000, 0x1, 0x2, 0x9, 0x1000, 0x4, 0x1, 0x7, 0x7, 0x6, 0x66, 0x36a, 0x1cf9, 0x4, 0xd, 0x1, 0x7, 0xd, 0x9, 0x7, 0x1ff, 0x5, 0x5, 0xfff, 0x2df4, 0x9, 0x2, 0x80000001, 0xffff, 0x9, 0x9, 0xfff, 0x11, 0x0, 0x800, 0xc, 0x0, 0x7f, 0x1ba7, 0x40, 0x9, 0x47c, 0xe51c, 0x9, 0x94f, 0x0, 0x0, 0x6, 0x1, 0x2, 0x0, 0x2e, 0xe2c, 0x7, 0x7ff, 0x4, 0x3, 0x9382, 0x67b3, 0x6, 0x0, 0x2, 0x800, 0x6, 0x1, 0x800, 0x58f, 0x200, 0x0, 0xffffff00, 0x5e, 0xffffffff, 0x5, 0x0, 0x2, 0x100, 0xf, 0x3ff, 0x23b, 0x1, 0x0, 0x6, 0x4, 0xab, 0x4, 0x7fff, 0x0, 0x401, 0xfa0, 0x401, 0x8be, 0xd, 0x1e19b726, 0x1, 0x1000, 0x0, 0x401, 0x73, 0x4, 0xffffff8a, 0x1, 0x7, 0x3, 0x5, 0xff, 0x7, 0x2, 0x9, 0x4, 0x7fffffff, 0x650, 0xc0000, 0xfffffffa, 0x10001, 0x8, 0x1, 0x573, 0x7, 0x5, 0x4, 0x0, 0x1, 0x880, 0xb05, 0x6, 0x1, 0x6, 0x5, 0x3, 0x7, 0x2, 0x10, 0x200, 0xe, 0x9, 0x592, 0x5, 0x3, 0x5, 0x1, 0x6, 0x3, 0x8, 0x7fff, 0x4, 0x6, 0x5, 0x50, 0x8, 0x401, 0x4, 0x10000, 0x20000000, 0x10001, 0x3, 0x0, 0x9, 0xb, 0x4, 0xf, 0x7, 0x1, 0x94, 0x0, 0xa, 0xa, 0x87, 0x8000, 0x7f, 0x2, 0x8, 0xfe5, 0x4, 0x10000, 0x7, 0x8, 0x2ca8, 0x7, 0x1, 0xfffffff7, 0x7fff, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xffffffff, 0x2, 0x1, 0x3af, 0x7a, 0x5, 0x5, 0x80, 0x8, 0x1000, 0xa, 0x84ef, 0x8, 0x1, 0x8001, 0x8, 0x1, 0x81, 0xa, 0xd, 0x5, 0x3, 0x9, 0x0, 0x1, 0x10, 0x3, 0x1e2, 0x8, 0x4, 0x7, 0x8, 0xa00, 0x4, 0xb6f, 0x3ff, 0x8000, 0x1, 0xa, 0xfffffffa, 0x1, 0x0, 0x20eb0c2b, 0x2, 0x2, 0x5, 0x7, 0x6, 0x6, 0x5, 0x1, 0xf0000000, 0x401, 0x655, 0x101, 0x9, 0x9, 0x80000000, 0x5, 0xfffffffc, 0xbdc, 0x4, 0x2, 0x4, 0x1, 0x10, 0x6, 0x0, 0x4, 0x6, 0x8, 0x4, 0x6, 0x4, 0x101, 0x7960, 0x8, 0x3ff, 0x9, 0x7fff, 0x7, 0x4, 0x0, 0x0, 0x1d59, 0xffffff80, 0x0, 0x0, 0x7fffffff, 0xaa8, 0x1d, 0xffff2559, 0x80000000, 0xfffffffa, 0x2, 0x2, 0x2, 0x6, 0x3, 0x1ff, 0x7c, 0x1, 0x4, 0x0, 0x8, 0x3, 0xc, 0x4, 0x4, 0x8, 0x7, 0x4, 0x186c, 0x2, 0x459, 0x1000, 0x7, 0x8000000, 0x7, 0x1ff, 0x6, 0x4, 0x3, 0x3b, 0x4, 0x5, 0xffff, 0x8, 0x81, 0x0, 0x8, 0xfffffff7, 0xc8, 0x80000001, 0x81, 0x1000, 0xfffffffd, 0x382, 0x6, 0x8, 0xbd, 0x7, 0x8000, 0x86, 0xeb3, 0xffffff26, 0xfffffff9, 0x2, 0x2, 0x2, 0xbd9, 0x3ff, 0x3, 0x219ce1ce, 0xd, 0xd64, 0x2000000, 0x3, 0x7, 0x4, 0x5, 0x7, 0x7, 0x50ac, 0x4, 0x1dc40, 0x3c30, 0xd6, 0xa, 0x8001, 0x0, 0x8, 0x5, 0x2, 0x3, 0x4, 0x4, 0x0, 0x0, 0x1, 0x8, 0x7, 0x0, 0x1, 0xfffffbff, 0x3, 0x80000001, 0xc, 0x2, 0x3ff, 0xe60, 0x4, 0x9, 0xfffffffb, 0x7ff, 0xf8a, 0x6, 0x0, 0x3, 0x1a, 0x81, 0x6, 0x8001, 0x18000, 0x9, 0x10001, 0xb, 0xffff94fd, 0x3ff, 0xffffff57, 0x9, 0x6, 0x9, 0xd, 0x4, 0x4, 0x9, 0xfffffffa, 0xf, 0xdc, 0x40, 0x2, 0x1ff, 0x1ff, 0xb7, 0x7, 0x1, 0x0, 0xffff, 0x1, 0x73, 0xffff8000, 0x7fff, 0x7, 0xfffffffb, 0x9, 0x5, 0x4, 0x1, 0x4, 0x54, 0x4, 0x1, 0x7, 0x7, 0x4, 0x400, 0x3, 0x4, 0xffffffff, 0x200, 0x1ff, 0x1ff, 0xb, 0x8000]}]}, @TCA_FLOW_ACT={0x5b4, 0x9, 0x0, 0x1, [@m_skbedit={0xc8, 0x20, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8ecc, 0x1, 0x0, 0x7fff, 0x80}}]}, {0x7c, 0x6, "e7e20c02eceb4a470b6b7f919739b1b928118fbc968b5e87199a352910fbdfc489a417b6a8c2a1f5a478cb88fa5432194c6600c4dff14fbcb5079475ff736a823be2440a3334af00fa8c10077b6d19c2c404cca309d0e8b84c6401e64b20faa90134d8c14679f2ed5bca42ec237c5d8133ac7db12adbc220"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x68, 0x13, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x4, 0xc, 0x1000}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x5, 0x7ff, 0x8000}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xc8, 0x13, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8, 0xfffffff9, 0x1}, @private=0xa010101, @remote, 0xff}}]}, {0x76, 0x6, "2df0de7ce5e92054a1d264ea5dadb1b458cc297d884e4e1779458385dc6f1b429e6fef579439c915f50749563c1eb0921054683b564c5e96546f3d57014f388e076719a4b720a29ce1352eb9deb43b489e1178302ba9ae7671ffce9a7e45ed7132ba5f526dcaa3cc26656dff04f2083012f0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mirred={0xe0, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x600000, 0x8, 0x0, 0x1}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffe00000, 0x5, 0x4, 0x5, 0x7}, 0x2, r2}}]}, {0x73, 0x6, "0571f14e4999701f9ce99b5e979474282c4e1ea437fa61cf9a070948cad767d656de1017742ff1be87182d9f1231e35d69ef48e5c74cea82dd255c4dd8f22e30ee4527d113930e276a4489ae852f15bae73ba5f9d3b8268554dba5d98740da5ea27107024ac59f0ee386be79e4a769"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x19c, 0xf, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x3, 0x4, 0x2, 0x3ca}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x10001, 0x699daee76aaecb1d, 0xdd, 0x6}, 0x5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xda, 0x7, 0x7, 0x80000001, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x7, 0x3, 0x4, 0x4}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x7, 0x2, 0x4, 0x4}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x5, 0x1, 0x9, 0xf}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x10000000, 0xffffffff, 0x8}, 0x4, r2}}]}, {0x8d, 0x6, "92d037dc1a4012c530489c5ff821f9eba3de2ad775715f5ecf60894f30c15f896ce700ed4744f2f0e05d3353b25117c3073f9b66ce0f60a986678ad531e3600e25b88ce1b9b523da936aea205de8501ab1f14af598f6e07e76d67aa9f2e0105fe8e13596013718fe098cb079beaaadc051c302c5779c0490112f954ee11c02d8211672e4226bd68b65"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x13c, 0x7, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0xfb, 0x6, "8eeac606dee7c1dafed3009c63a10628cc59273c459afb4ddd2e3e5fa2eb77353f84109205262aad3acd29fcbad92b86a30a64daa2bd6ae8b74d65eff92cea10eff16ba341ea56ff8f970f1e048a58760a2f9d3b659496636613896659d577bc0375cb2c07b1e4e843ef27df53756b45632d09fe66fa9b7f6dddbe1aa473a37609decb3347c8539ef6097df8740852493908e30d5aea712574319246a9cd996a7462bf5e04fac74c1baa63a36854aa741326190d2350a4cabfac3987fea37e33dba965c807fb40d53dedbd5eb11ce5923aa7036072fba704bc013d309d0a4591a0b71de0ddda1de7e4acad2de22bef1732aa91e8c65364"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4040615b}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_POLICE={0x424, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe2, 0x8, 0x30, 0xacb, 0x8, 0x9, 0x6, 0x5, 0x3, 0x10001, 0x14b4, 0x508, 0xf, 0xe5a, 0x0, 0x7, 0x5, 0x7, 0xfffffff7, 0x2, 0x2, 0x3, 0xfff, 0x1, 0x12a077c0, 0x3, 0x0, 0xfffffffd, 0xc8ee, 0x7, 0x2, 0x1, 0x8, 0x3, 0x3, 0x854, 0x0, 0x9, 0x7f, 0x5, 0x2, 0x5, 0x9, 0x0, 0x7, 0x1, 0x1, 0x4, 0x7, 0x6, 0x33e4, 0x6, 0x3, 0x1, 0x1, 0x1, 0x101, 0x0, 0x7a33, 0x8, 0xd, 0x7, 0x81c3, 0xec800000, 0x5, 0xf33a, 0x6, 0x6, 0xf, 0x2, 0x2, 0x3, 0xcdbe, 0x5, 0xa656, 0x10001, 0x800, 0x3, 0x1, 0x101, 0x3, 0x81, 0x9, 0x8001, 0x10, 0x4, 0xa2b, 0xfffffffe, 0xce3, 0xf, 0x9, 0x7, 0x7, 0x3, 0x4, 0x2, 0x3, 0xa, 0xe, 0x9, 0x5d0e, 0x2, 0x7, 0x5, 0xa4, 0x8, 0x2, 0xfffffffc, 0x2, 0x9, 0x9, 0x9, 0x2, 0x1800, 0x4, 0x0, 0xffff, 0x7f, 0x1, 0xf2e9, 0xb, 0xdab, 0x7, 0xfffffffa, 0x1, 0xffffffff, 0x9, 0x1, 0x1, 0xf1, 0x9, 0x3, 0x59, 0x0, 0x8, 0x2, 0x0, 0x10, 0x101, 0xa0, 0x2, 0xfffffff7, 0x8, 0x6e1, 0x6, 0xf35, 0x9, 0x1, 0x9, 0x7fffffff, 0x4, 0x9, 0x7fff, 0x1000, 0x6, 0x800, 0xae, 0xc9903eae, 0x7, 0x1, 0x5, 0xffff0001, 0x0, 0x7, 0x7, 0xfffffffb, 0xcd, 0x860c, 0x31, 0x9, 0x0, 0xfffff800, 0x7, 0x6, 0xa0a, 0x7, 0x800, 0x1, 0x8, 0x6, 0x9e, 0x3, 0xd3, 0xf4520000, 0x4, 0x100000, 0xb, 0x6, 0x7, 0x3, 0xfffffffc, 0x641, 0x6, 0x6, 0x2, 0x1, 0x1, 0x8001, 0x4, 0x9, 0xb8bb, 0x201, 0x2, 0x20, 0x4, 0x4, 0x1, 0x2, 0x5, 0xfffffff9, 0x6, 0x7, 0x5, 0x3, 0x5, 0xd8f, 0x101, 0x80000001, 0x200, 0x1000, 0x4, 0x7, 0x8, 0x4, 0x7, 0x2, 0x1, 0xfffffffa, 0x8, 0x5, 0x8b, 0xfffffffc, 0x2, 0x6, 0x1, 0x81, 0x5, 0x4a3144f6, 0x10000, 0x6, 0x4, 0x65, 0x14, 0x2, 0x2, 0x94, 0x80000000, 0x1, 0x4, 0x8, 0xfffffffd, 0x8, 0xadc2, 0x7, 0x2, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x26}]}}]}, 0x12d8}, 0x1, 0x0, 0x0, 0x40000}, 0x20044000) 6.876235612s ago: executing program 2 (id=3972): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x10e0}, {r2, 0x8108}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0xf1af) 6.093333349s ago: executing program 3 (id=3973): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x0, &(0x7f0000006680)=0x1) epoll_pwait2(0xffffffffffffffff, 0xfffffffffffffffe, 0x4b, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x3f, 0x20048885) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x280840, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x90000001}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESDEC=0x0], &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x41e}}, {0x77, &(0x7f0000001080)=@string={0x77, 0x3, "ab9f92de43516ab52d782d2750045370cb4549567de3cbcf5c14815435222ecdbd2ab79e36cd12b00b93fb836f77160a964fa55684ba362b13740acc028a6b2165001120ea7f4c814ec949125bc4c593c0c84e279929bbb1721380e4391521021d0c6a0ab6f9650189543a4f4bbcb29785db5ddea5"}}, {0x102, &(0x7f0000001480)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x83e}}, {0xf2, &(0x7f0000001380)=@string={0xf2, 0x3, "090f611de6d7a992495f962c17a008898a3faeec15134f602800adf0abe99532aaf669bce0c16b363abf094a024c12c2caba82f6ccceea6e9bac3fa2337a337ff5e0726809ee979e748ffdfb54d03adb30d92d11faefe786df069ddc79629773a78a1ba510cce68a7bc3c30d2a0af4445a5cfe6e25cf8e5374cfda4997d49ff3c3905e28e560ee1c203322f9421e2ebceb766d3ff7033386505c6d9ef97d6a9783b032cf7f3fe1804e77c4e0a288cac73980099d12b0fc45d8581e2778e818adb72ab280f76a84fb964e5ebaa1fd3ffe967345a2436cc663ab9138eeb11ca5e597684465f159b2711c360adb8699cf97"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x449}}]}) r7 = dup(0xffffffffffffffff) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="00111600000001"], 0x0, 0x0}) socket$inet6(0xa, 0x800, 0x0) write$UHID_INPUT(r7, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) close(r0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x2000000, @mcast2, 0x59}, 0x1c) nanosleep(&(0x7f0000001200)={0x77359400}, &(0x7f0000000400)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x228000, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x301080, 0x0) 6.092554093s ago: executing program 2 (id=3974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x6, 0x10000, {{0x3f, 0x4, 0x0, 0x1b, 0xfc, 0x68, 0x0, 0xf6, 0x2f, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x1f, 0xb1, [@private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010102]}, @cipso={0x86, 0x70, 0x1, [{0x1, 0xe, "2168f3c6d416bfbf684a0438"}, {0x7, 0x12, "4000339423e63aa1f82946b265555962"}, {0x1, 0x12, "6b5555e7b742848d471fad221c8fb001"}, {0x0, 0x3, "fc"}, {0x5, 0x3, "94"}, {0x5, 0x12, "048814648444dd0c6daff4e6881d895d"}, {0x1, 0x11, "6bef76409573034c76ce7f73b68d51"}, {0x0, 0xf, "98ec24ce775acaede3cdd54d0c"}]}, @timestamp_addr={0x44, 0x54, 0x9a, 0x1, 0x9, [{@loopback, 0x7}, {@multicast1, 0xf}, {@private=0xa010101, 0x540c}, {@multicast1, 0x8}, {@remote, 0x3}, {@rand_addr=0x64010102, 0x1}, {@loopback, 0x1}, {@multicast1, 0x5}, {@loopback, 0x5}, {@loopback, 0xffff8000}]}, @ra={0x94, 0x4}, @noop]}}}}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/timers\x00', 0x0, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000280)='GPL\x00', 0x6, 0x25, &(0x7f0000000080)=""/37, 0x41000, 0x8, '\x00', r4, @fallback=0x18, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x7fffffff, 0x6}, 0x10, 0xffffffffffffffff, r6, 0x1, &(0x7f0000000640)=[r0, r7], &(0x7f0000000680)=[{0x1, 0x1, 0xb, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r9, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) fsmount(r8, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r10, r10, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) close_range(r11, 0xffffffffffffffff, 0x200000000000000) 6.002761812s ago: executing program 6 (id=3975): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x42002, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, &(0x7f0000000080)={0x28, 0x10000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x8ba96}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r5], 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.660917365s ago: executing program 6 (id=3976): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x106547, 0x0, 0x0, 0x80000000, 0x11, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1aa654fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x32ab, 0x10000]}}) (async) r2 = dup(r1) syz_usb_connect(0x2, 0x6b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(r2, &(0x7f0000001c00)={0x2020}, 0x2020) 5.553722118s ago: executing program 5 (id=3977): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x1}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x8}) io_uring_enter(r2, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x8) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r4], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x1}) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x8}) (async) io_uring_enter(r2, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x8) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r4], 0x0) (async) 4.231545683s ago: executing program 5 (id=3978): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp6(0xa, 0x3, 0x2) setuid(0xee01) r1 = socket$isdn(0x22, 0x2, 0x25) close(r1) tkill(0x0, 0x13) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000002900000000"], 0x18}, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x301000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r5) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f8ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000f53e440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c500000057bd81cb2af0b176275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e5b5b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb9134658fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9a958f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f94fefe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e924d6b1594af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e70300000000000000fee18a22da19fcdb4c2890cda1f96b952511e34cb14ea4a10a6f1dbaa69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde20300accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933f638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000003542591d17b5e8d9be772914cf4e3129e7929aa238bd99c3ddd895e33d8cf6c3d6cc883f0319aec94fb4cffde7a6d1fa1bcc03ead3912c2a68ca172adf3f9417207ea83d03a108d2ae15ee38c06dc98a0d1696b7c7fe142440776889154a93888972462439ae33b24c90e13c8f80d4e32716e96825d7bbdd97e4bae368d009b4611619a778f547fa1c92cc656a89728a6a1758b98fd27e1f5e1b446506d8947ca82bac7c2f00"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32, @ANYBLOB="000080000000000018"], 0x38}, 0x1, 0x300}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.983112864s ago: executing program 6 (id=3979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000a00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x1e}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001540)={0x14, r6, 0x715, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022dbd7000fedbdf2503000073797a3000007a320000000014000200776731000000000000000000000000000900030073597a32000000000500040002000000050004000200000000000000000000000000000000857caf8495c904ad6c57fd08da2f4ed6e7876b8725ff173be6c10dd7281e91eef9ee77ed14f71f56ec1d1eb64ce74bb4b450b508101065d4c5aa3afc8e660ddb0f96ac5cc3961d697fd0bd5a4761420e4dd5fc1b4b0f8596ff8237ea76f57844623a59d58adebf6a8881e03be28c7ca1f8a5a7bb4ef84b6f733a105067bc185a17ce7b1973c80de321d22965414ac063f5fbba5189bb6ffc904043f6daa931772b434608d75cbd0a70418bdc3b9bab282fcd9a08be06cac00c6c5efe66bc383665d62a83f04bc0b1c516f4431deb87fd48fe89c8824365601ecda913c6dda39d2a3eea"], 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000804) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000880}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18248}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 2.821557874s ago: executing program 6 (id=3980): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="23130400000001002008e2385bf6cdff89e9d6cda78464d87be8210460b690b4767c6ec3598797d42762f6a161acc05ec4a2bf939d292fb95d6b6b55bcf3bb7af2e1c6c201"], 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003170000001703"], 0x0, 0x0}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x40) (async) recvmmsg(r1, &(0x7f0000003980)=[{{&(0x7f0000000540)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f00000002c0)=""/15, 0xf}], 0x2}, 0xca0f}, {{&(0x7f0000000680)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000700)=""/77, 0x4d}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000880)=""/83, 0x53}, {&(0x7f0000000900)=""/206, 0xce}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x6, &(0x7f0000000a80)=""/192, 0xc0}, 0x7}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b40)=""/232, 0xe8}], 0x1, &(0x7f0000000c40)=""/144, 0x90}, 0x4}, {{&(0x7f0000000d00)=@nfc_llcp, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/179, 0xb3}, {&(0x7f00000030c0)=""/253, 0xfd}, {&(0x7f0000000f00)=""/83, 0x53}, {&(0x7f00000031c0)=""/179, 0xb3}], 0x4, &(0x7f0000002000)=""/48, 0x30}, 0x86c}, {{&(0x7f0000003280)=@generic, 0x80, &(0x7f0000003740)=[{&(0x7f0000003300)=""/240, 0xf0}, {&(0x7f0000003400)=""/224, 0xe0}, {&(0x7f0000003500)=""/107, 0x6b}, {&(0x7f0000002040)=""/59, 0x3b}, {&(0x7f0000003580)=""/6, 0x6}, {&(0x7f00000035c0)=""/32, 0x20}, {&(0x7f0000003600)=""/8, 0x8}, {&(0x7f0000003640)=""/31, 0x1f}, {&(0x7f0000003680)=""/189, 0xbd}], 0x9, &(0x7f0000003800)=""/117, 0x75}, 0x5}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003e40)=""/74, 0x4a}], 0x1, &(0x7f0000003940)=""/41, 0x29}, 0xec}], 0x6, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0}}, 0x40) (async) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x29130e2242425638) (async) readv(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) socket(0xb, 0x3, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x2aa4c0, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000540)=ANY=[]) (async) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x24a19521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) (async) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x4, &(0x7f0000003e00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x80, 0xffffffffffffffff, &(0x7f0000003b00)="6f4d11f775fec7e8dbd5d02acfb63b6a47260d8dd3269a5dda9f70aee1ea5742ab142acd1e1b17c72fa3a1a8d0490b6daceb87b4d7ea36c6a8dbd23aff62de2581b980a2d01c9a784c1f4a228379112646c3cb45cc50e39b88e6ff165fe77dbd7bb3da7c3f475225480449b9688c56e75f4a9c2c6789b02a633027bf24e178e726499b9c4e87f428eec6154488709398e6f8d3b05d55190dbd21481fd560b82d29c1cef820255d870f571389b9507eccfb593d5d493a53e91861fc20a3765ef698671f8d929392ddc2bfc6c1adc29b05a6988cd97fb628ee20d5319df18161632114c087b783f245916707f7697be7b227f625", 0xf3, 0x96, 0x0, 0x1, r4}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x4, r8, &(0x7f0000003c00)="2a2673724cd66c5192c1a4d505793743a57ebcd351222bac9e46241014c784cd2b3f94188e63a705723e07e24dd908db84e861ca52bb92f42ac5856ca7b262636a124d4e2202319dc7bcdf7f238a0e0404f310a3347549757e4fb8302249bef47b9a00ab0fd9821e74b63847fbb5af7c5d6f66c9b564c12951", 0x79, 0x6, 0x0, 0x3, r5}, &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x4, r3, &(0x7f0000003c80)="e304fc76c6ed8f9f5257700bf360a3c721e8566445134c349da5bd8d60a87c14020637538b1b976d9f69cfbb8bacc47794f48e8d8da851370c999731a4a732e46e04791c62e643282d1ff28ab583c145892efdbb0e2b550cc541c13748c83324fbb9543036066ab7c798721415fd4aa511ece80d8d907a4a4d18d36ea7add63c3e", 0x81, 0x3, 0x0, 0x2, r4}, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f0000003d80)="d06fc7c8b5af161eae25476643f9687e8d8e287cbc534dea2c5279afaf63cd575b103c768fcb80f86be017705de5c041582497f07107d8", 0x37, 0x72e, 0x0, 0x1, r5}]) 2.810160041s ago: executing program 3 (id=3981): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 2.450374371s ago: executing program 5 (id=3982): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000000, 0x0, 0x0, 0x1, 0xf, 0x9, 0x1}, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x2) sendfile(r2, r1, 0x0, 0xd) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023893) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x75e4, &(0x7f0000010400)={0x0, 0x86e1, 0x0, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, 0x0, 0x0) mmap(&(0x7f000022d000/0x2000)=nil, 0x2000, 0xa, 0x810, 0xffffffffffffffff, 0xca986000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(r3, 0x0, 0x0) request_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3\x9f*sgrVen:De', 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002f000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f00000002c0)={{0x0, 0x0, 0xfee0, {0x0, 0x1000}}, "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", "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"}) 2.05181522s ago: executing program 2 (id=3983): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) syz_io_uring_setup(0xeec, &(0x7f00000000c0)={0x0, 0x835b, 0x10100, 0x2}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000001c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000480)="1b7491195260aeb9f2eec64c36599ec34515044d0a42d787ee0b454efff1bf95ddd0c87ce556c2a8d19ed374152f988998929fe02dd0902e84be9e2540821a84fc7ddc5bcd36d8bdbbd744082649b2ab3e8b92b4ee48cc547abd81d276ee74d1f1dc690656a1b06739d7557ddca419f523207fe75fa32620def408654c8613b2c379f231efaf85fd614b60036e7d588d49d469dd68f18459013e5e5e8b93eb51dc1c8cef999d44180daf4c75", 0xac}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x8) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0xfffffca6, &(0x7f0000000040)='Pb') r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r10 = dup(r9) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000300)={[0xe2, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0x100, 0x8000004, 0x80, 0x6, 0x794, 0xa, 0x5, 0xc976, 0x3], 0x2, 0x20200}) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write(r6, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd=r0, 0x90, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.237471007s ago: executing program 6 (id=3984): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x1, r1, 0x0, 0x4, 0xd}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x0, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = msgget(0x2, 0x400) msgrcv(r2, &(0x7f0000000540)={0x0, ""/190}, 0xc6, 0x1, 0x2800) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x1, r1, 0x0, 0x0, 0x3}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x500000000000000, 0xf}) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r5, 0x0, 0x20000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000007c0)={0x0, 0x6a1, 0x1, [0x9]}, &(0x7f0000000800)=0xa) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0x200, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1000}}}, &(0x7f0000000900)=0x84) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b757000000400028007000740effafa00140000001100010000000000000000000300000a"], 0x74}}, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000044) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, r3, &(0x7f0000000500)) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x1, r1, 0x0, 0x4, 0x5}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="8a000000c0240000280012800b000100697036746e6c000018000280140003000300"], 0x50}, 0x1, 0x0, 0x0, 0x4004804}, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r1, 0x0, 0x53, 0x1}) 1.182821003s ago: executing program 0 (id=3985): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 731.587508ms ago: executing program 6 (id=3986): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r6, &(0x7f0000000580)=[{&(0x7f00000003c0)="01000000be802235ddfdfe104e76696bbfbe455bee862b7b657ee0a7a64e1c1e3884d355fc20878359", 0x29}, {0x0}], 0x2, 0x7, 0x190b) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x80, 0x0, 0x0, 0x1d}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) accept4$alg(r2, 0x0, 0x0, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128-generic)\x00'}, 0x58) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) 473.520388ms ago: executing program 5 (id=3987): io_setup(0x3f, &(0x7f0000000140)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="68000000000000000000001bcf0000000000f200ff00bdf9096cc6037e6199539302a4801849e9af7dd3c100692aca2b2a7956d44dffb9ae73cde5f07ca5fa992ca080add3ba7578646d31ab8c865163c470bc905baf4606feba1cd7bcc9bed600a187e2f833f4e871a870000000000000004392b912b6cfe529adb1c6d18f89f304d3b858b80a52b9e966646e508b8462b5", @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e00010069703667726574617000000034000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r2, @ANYBLOB], 0x68}}, 0x0) r3 = timerfd_create(0x5, 0x800) unshare(0x28040680) unshare(0x2000980) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) set_mempolicy(0xbfff, 0x0, 0x2) openat$cgroup_subtree(r4, &(0x7f00000002c0), 0x2, 0x0) pidfd_send_signal(r4, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) io_submit(r0, 0x5, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff, r3, 0x0, 0x0, 0x9}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xaec, r3, &(0x7f0000000080)="8c2060c6ae8f31581df14b72e57fa5071cd48e9ccab007123fed864c077b2674bc3587acf6a8beb2781640cee178967745274fe6ce2450c97ac096220c6d3aac210dbcd8febf3625c0392ea521b3035acf3dc06e96b075aff65d68b4b3ce914c05c710a72095c7fd87943794cf703215d36175fd0056c956a03862aa1d33d243", 0x80, 0xd630, 0x0, 0x3}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8001, r3, &(0x7f0000000180)="4ed2d0f35def7e566e95a6cb27557aaed53995eb8c32a2a06dd4f7f2f5e3fded1c811e762bdd5fe580ab1915598ed56bbe3c39909902f9b92ceba86d2f7eadd6438d367fe43eba7e9989b18447de19b0a2d2acfd00522ee7353f0a8544014694f650c9a048e2cb53c8f83a54aa6bde989d2bc8e0bf83a657c82062d06efd4362ed57fe01c255f025310c77cb91a379c3c2c4d01f35a14c74912ec884ef000a463413c2b629c9f2f5c723d151ffe99bb76e4b598cded7267443182eb34abc87e631ffe8c3e49d99e89af56c01", 0xcc, 0x4, 0x0, 0x3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0xa, r4, &(0x7f0000000300)="20561092c2f1ffd0a6a734f040930654823951988fa8a9fc326bd682dda01d63d35490ca5a67361c377e52876d3ddaf17e2adcf0da5c095b8068f3f619800b50e75f8f63aa674000dcf78efc50ab8c0cb11375096d9e15cace4d1f063ac1500240fa8e3c9af988411a1d788e8b3e8bba236b1a3e4a6848f4b003d6cc32650d2acd7d0142f304ff882fe80bfe6eba2bbd8a899846", 0x94, 0x2, 0x0, 0x3, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0xba, r5, &(0x7f00000003c0)="a9d13e2b0931e1573a9aaded185b96454f2ecc08ca39", 0x16, 0x3, 0x0, 0x2, r4}]) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) unshare(0x40000880) 261.306232ms ago: executing program 5 (id=3988): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0xb4}}, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000004c0)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 92.664701ms ago: executing program 3 (id=3989): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f00007a8000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00007b6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000140)={"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"}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x3, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {0x3, 0x0, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0xb8}, {0xfa, 0x0, 0x6}, {}, {0x1, 0x8f, 0xd4, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x6, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xf}, {0x1, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xa, 0x3, '\x00', 0x7}]}}) (async) syz_usb_connect(0x1, 0xd1a, &(0x7f0000001180)={{0x12, 0x1, 0x201, 0x36, 0xee, 0xa2, 0x10, 0x7d1, 0x3e02, 0x60ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd08, 0x3, 0x5, 0xf, 0x80, 0x9, [{{0x9, 0x4, 0x6e, 0xb9, 0x10, 0xff, 0xff, 0xff, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x2}, [@extension_unit={0x9, 0x24, 0x8, 0x2, 0x1, 0x6, "7905"}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x2, 0x6, [0x7, 0x3, 0x8, 0x8, 0x3, 0x3], 0x6a}, @processing_unit={0xa, 0x24, 0x7, 0x1, 0x9326422b146be2a9, 0x9, "e9d395"}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0x4, "42a6e74a8ce7"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x7, 0x6, 0x0, 0x9, 0xff, 0x8}]}, @generic={0x22, 0xe, "6d17c717633691405b6707ba00445922f37bde524687535a71a2436123ede491"}], [{{0x9, 0x5, 0xc, 0x3, 0x40, 0x4, 0xc, 0x40, [@generic={0xbc, 0x22, "51eff999a8d6520d6ca3c9ecd13549fc10672503659d67413db35fb3dddef035bf166bbdca7bcbb40fe6c06d1c98aa2c1d273df55b91239ec7564178710281870934d48a192e935509d427564995c242323443546c9e861cd7905f434e666140e80bbed762a12e14f6966f28e0832cc6fa1621879d5fe3de377bb0e55011d45e09b750626b095530d3d635b5849674ba1151f32b9129669eb5bf4ef55052d300ea222f3d2ccd4206104e9e7b02c159b76c67131da58a091a6615"}, @generic={0xa3, 0xa, "067c51439961b527dcaf6eb8420c16a2332980a7272a32e27745adfa6bad898f4ebcd09f278131ca86c7f2bc5cf4044b235531955ba31393b7c206e6b86c722d5c415b817d242005f978eb19b2789afbb1552be325c177fa7e461adc4a40d06517851dbd28e42fa5a4117bdb6149209ca205c6d724950c7f95c8f756db80e1fe5040edf206c6377b03a656be2d24e45ad49b6497c95aa155164a2ca40e76faa4bc"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x10, 0x5, 0x89, [@generic={0x9c, 0x3, "8a31eaea083eba14f4464eac04fd746bead00c37eae5703e565f46f081147f98a6cc2201966beaf89b20ad60d16c4780a71b15a253ec7f11771f7ba19344f3eefce9b1470bdc2767301aa5d946b9d1cd78698396b9452a2ea9cd27c507dfb1371bb3ecb95bcf6e6054d022d2e2a70ac7c0ebffcbad94c6cc0e896bf4a7c10a355fac6f38522f3272a293d0101181ea3ce81c5dae7d590de0a1b5"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x8, 0x7, 0x6, [@generic={0x8f, 0x24, "2ae89e04f5aba1f84ad91843af02146f7fe2f360a8293e16e8fa84d7ac7f13def37c71b6a535fd6b41e87f75a01ede20a722329781cde705c7134d43cc7b431666d701817f2a1a19b46222b0e7c7d3a700a82806b850c28c03a2ed6c8f48eee87f5f7d3f5a074892411aa2f92c18a481abcce4779deb10f8e91b8862d753f5b773834f8fe662ddf0d0fc99cf19"}, @generic={0xb3, 0xd, "7c6f9ee13ac21b69e5deb79286ae2e768ca8022ded190b73567b21d45e502ca695718510033e8d5bb9918f91fdef14e9b758663ceec12564002edf2b2ff6fec1281f5fe526105b8fe125791ee513aa73371118978b15f0896fb013ca3659c1af38fbb49afabf391bc04c31d097d99a838027a292af44bf8f28969baf5c7efaa8083e58ba50bfd0b0222f71b0db647085c82e378ed4143650467ac4331f6097781c307cb15bc4cab67184f5a5c5df5a7bb1"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x20, 0x5, 0x1, 0x8c}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x44, 0x2, 0x4, [@generic={0x28, 0x1, "ab440046673db3448f81fd023d294e6bc23fa92379d7b7437b83f0e2c8e1d764f2bd07a188cc"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x0, 0x2c, 0x62, [@generic={0x6f, 0x24, "cf5b5b6a5f747bdf42ada576774d5bcdc23bf2b02408112c32ec83f711401ef72bcd7b41af7b9b2d445b1bb7197d3a903e3973e653aea054568fa77c141c53a27a81a44b4113a25e5cd9865c362007a3034004de68ebc8f3a3ee0323c4c341c1ece65ac1b04b943c516e4330e8"}, @generic={0x56, 0x23, "7d417fc9fb8699844b3018c72fb7977c2e1479dd13fa054742cfbb32a4d2b984f489faef680044384506da4e43580b06b4c1b7310c9aa352953ff59a9c7d98689d485ce360cf4e47648348728d419249c75ab581"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x7, 0xdd, 0xe}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x6, 0xff, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x4, 0x8, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0xfffd}, @generic={0x7a, 0x24, "4e12d84e32cf289ce3a8556b601d6cd948d6aa2ddadef343b367d08f53a0ab690c7801b8e4bbd2cb55e30ab34bafde3a0fdd58396d3b91a0f69e4db5daad11123f4449cba08a30b5e9206b4bd30b86439488d5ed8153156886b4a08c12b9ad141af90d269ad15343ec2963a2ee3eb31e610a49640e6dd7ba"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7f, 0x1, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xeb, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf8, 0x2}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x7c, 0xb2, 0x5, [@generic={0xb, 0x23, "4241b5b3685e7142b3"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x6, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x7f, 0xff, 0xd, [@generic={0x4b, 0x21, "3b45df5459073dc72b2b5699c308ad34569f7404f1925986bbe232dae85c5e13b4198a6fc32e387cdf331735f9a89bfca01679ed2c6978c186363c3596b12b6d9a81c7e0d71848b14a"}]}}, {{0x9, 0x5, 0x3, 0xd, 0x8, 0x9, 0x81, 0x0, [@generic={0x6f, 0xf, "82050b3961372cb4f88a3004a246cdd39bb6198ff03941235a2f7b44eabc87c6136820d7189f5d4c28c9e2430ba0a564e0c80dce8247f1f5c3936f22c4e19733d9842f8801757d0be5aa512badd1b7df6be54c080089d9e6a6580be94280da996d750962aec1c455486ff340f1"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0xfc, 0x8, 0x9, [@generic={0x5f, 0x0, "b42125f5eeadb0e4ada8e83138a35851a7c47fffab827eb83c4238c0cac08b145598efb4aab8d8249edb498e1e7860019933cbb28936e438ff75ff041bbf1222180440d62036676de9d2f5c564a6a1d5a58485615e6267349580b7986d"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x3, 0x2, 0xdc, [@generic={0x60, 0x22, "096a6d4287057a193cff4ab083667271a255e5ebcc52d8fb9226f99288b8efaf83365d5ba3d05c94c5aafbd00b9c35802a825120ee6ac839b0f89b67f6f7e3fd44bb8f678102caf94fa838ed93e0613a1551ad9908f869ade308bace5672"}]}}]}}, {{0x9, 0x4, 0x97, 0x8, 0x9, 0x77, 0xe3, 0xa9, 0xb, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x6, 0xf774, 0x2}, {0x6, 0x24, 0x1a, 0xa, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0x9, 0x7}]}, @uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0x1, 0x6, "d1", 'V'}, @as_header={0x7, 0x24, 0x1, 0x8, 0x3, 0x2}]}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0x8, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xac7a}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xe}]}}, {{0x9, 0x5, 0x9d, 0x2, 0x8, 0x7, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xc6, 0x2, 0xe}}, {{0x9, 0x5, 0x2, 0x0, 0x7df, 0x2, 0x3, 0x5, [@generic={0x76, 0x21, "5df64ab1a4f102367961ec4d787ac02f3365583c1892e236c57450116d02d986a7541b8f3cc6db055b565c619b07ba5addf6d353dd716da97928bf640170f65982494280aefabb94c7c511dea14a1a5bc299bb037242f1c88f34cd60bb1ef2433dc1aa278e0deb74cf28066811f85a79d353d65d"}, @generic={0xc3, 0x24, "013698a7f4fb3656528d382faa2bc84af11f30ec8c4ece43d26b7e3c8a5ca3014a508abbb7378f623dccb301a50db8a8c27d97f93e485f832624b8b3f6b4550d582002664772d64e9380bd3a7f6f6088325442afd511a5d8e03bb12dd2dfef8acf56785e98ec749d8978d649c3a397767b3cd02e176c8113302a2b916f562e442c28bfc2e3b5e24f9ce1c49537a79426c08a29d7c2ce6548c0e0ece6b13cea34939110336185203f24b4d51dcf385d021a0171f728875d2b626ff0793c56133081"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xfc, 0xe, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xfaf}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x10, 0x7, 0x8, [@generic={0x6b, 0x3, "ea1e71c7d28f2cab6239a5ee1c6f3654113545933c922e2be4324945e5b54578364e1b24a56ffd6017e0393cbe0109b1471e568755bae3c12e1aa8d3911109fbfd24f2bf764eb29e09789fcad457d2158a6b62b99ebfa523e29b232eaf2a908b5b497cb791d7171e75"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x3f, 0x5, 0x4, [@generic={0xbf, 0x6, "2b204e910bea787a282b907e120e56664edd79a6864a1a1ef8ba6dfa260bf3cd5561587e398e97d8772312171645f96eae93e069100436298f21f897a82983160b4b52131cea1cc220f8ff1dce030c183dc724291bfb6ffcdc336faad4a61deb8c818be1290445f4f5e22cc8605daf2f4f691da9886dfbf5a9615f61ffe44602a54f5a847168a6dd70d3f2a0b9485e5484359dca77336bb696ddea2e760efa94fc888b528bb52a50ff251e4938a628ec3db0957e9e2b5747e29d3fd60f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xb0f2}]}}, {{0x9, 0x5, 0xa, 0x11, 0x8, 0x7, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x59}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x3, 0x0, 0x0, [@generic={0x5a, 0x1, "69fffd6d949c31905db388f415eb8155fc5cfd203704fefdc782e4a34224f09d728a5768b3d5cdb57761e019264dc30a45717aee8367ef960b592049bf6ecd40b932ccad87022681cf80de7b4e06bc82b7cac41609c2f961"}, @generic={0x9d, 0x31, "58bf045a5ed2c370c6dd2453dfe59d4d18f96216b29c9b5776238a72f2f6bb439fbcc1b5d2081723a1377aafe7590d4f3d2a5f820cf1b4335617f0bfccdd40e0d8d1466352d393e844e47a4af6321a2f93245e103ab1f414e04d8da694776f85f095fadcc22fb621b99e11f40f6c07f3c03f8995caac2fcf9b6b6bd6b2c299fa076d96f40168a38d4dfbd1832346a5b63f4c0ed35c7cb93f46e97d"}]}}]}}, {{0x9, 0x4, 0xf8, 0xf7, 0x5, 0xee, 0x2e, 0x89, 0x11, [], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0x1, 0x5, 0x6, [@generic={0x55, 0x21, "0c76677ff0f8228d0167b858ae83bf99a57f017afeed71a7fec265f4175bd82a861b822932749dd540d3cc3f4b198f41e82820d93e5b516e5e76625bf3b0814e2653f67aedf3dde970a5f2018869db195a15d0"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xc, 0x2, 0x8, [@generic={0x7b, 0x8, "86675adc7665addccd7aa7c2b4d3782e4789c9a57ba483d570953203db6b3c7235d1c2445feea3f1a72cd7c6f0a5c51b4e9b9a8062f7bd1e113eaeb413e4d6f887a91c6c3160c4524f4f3334d77742745c5fd5726da77fd06ad27a4f3a0deaa9480df77a66cfd9519b217ae089daef1bf91e1cf13361ec319b"}]}}, {{0x9, 0x5, 0x8c, 0x8, 0x10, 0xb, 0x9, 0x8}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0xd, 0x81, 0x80, [@generic={0x23, 0x23, "3ca716b079ec271ea0c140f4b08367ffce7e07ea02fc21acf24fd3f60fbd68fd47"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x0, 0x6, 0xd, [@generic={0x62, 0x31, "d1ae1c61a5cbf0be6de128d87986249956529a68ae42c8bd7c388648ce9e32e160fda7c3b900a38e5fb25cffdfde1447fd95fe82f48eb135e77d944b9f69473beee94775f9ac12399598b3a207c8bfbb26eea756088c9d3ba42f7b0c2b444fee"}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x35, 0x38, 0x2, 0x10}, 0x30, &(0x7f0000000580)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "1af5dc5a58fc31a2cd6bc6f81e89dc59"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a3c1762b35e1108ff20ab9672365b65f"}]}, 0x7, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x585e}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}, {0x29, &(0x7f0000000640)=@string={0x29, 0x3, "3d0355e89f839b86b47cb8a3140564a2207e7349145fdbde424364ca1e42714bdee793843f0d93"}}, {0xb0, &(0x7f0000000680)=@string={0xb0, 0x3, "bb077bcef47317763fc33f5bb0cb319996929c183a3d9670c24f3edfcab7562af7a6827cbc9d55d3c192394b77a0476808bf4420f17b2bc2564323ec5f5aee060f3f7656da40ee02b0b74cd1ad1072ac39617ee89780c22308f933015d8ddd679b223dd44f5dc5e229c86f9080b545346a69e66a42ea1c6c23a23383c485e2dc6fcf1a5087c57678bef8cd94e1b75bd5fe4d95d162dd43f3e32ab7a2c3b46b90fed438850b91e964e5150fbc3e45"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x820}}, {0x9e, &(0x7f00000009c0)=@string={0x9e, 0x3, "1753ca65c295e381614598341ab0e94508e2c8631811be10434dbbce67c775581134e440921bfd54858485af3a67c904c1889655139311e9d329b1b6a76370dbff8b2f007eeb7b7a972f99697fa8d379f090fbc3cf3ea82bbd049c7ae6c2eb6d4f81a758f8c515643354a180b1351b49e20fa23c95a0d573179ece7a68dc74dbd3943296b17da1b132c4ed57244dd9deb7e9efdc1ec8cf2ee8b9fd7b"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1c09}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r0, 0x2c8ad000) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x20050800) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000305008000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000050006"], 0x48}}, 0x0) (async) fadvise64(r7, 0x5, 0x0, 0x2) 0s ago: executing program 0 (id=3990): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r3, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = eventfd(0xa) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x0, 0x4, 0x0, &(0x7f0000000340)=""/72, 0x0, 0xeeee8000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000a40)) eventfd(0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, &(0x7f0000000140)={'veth0_to_hsr\x00', @ifru_ivalue=0x6}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf25110000e6590008000980"], 0x18}}, 0x0) kernel console output (not intermixed with test programs): force 3-1:0.0: usb_submit_urb failed: -32 [ 1260.728681][T16459] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1260.729021][T16459] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1260.729500][T16459] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1260.729955][T16459] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1260.730295][T16459] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1260.730701][T16459] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1260.731029][T16459] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1260.731375][T16459] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1260.738906][T22074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3563'. [ 1260.751611][T16459] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1260.751751][T16459] input input125: Timeout waiting for response from device. [ 1261.105560][T16459] usb 1-1: USB disconnect, device number 119 [ 1261.885997][T16457] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1262.049020][T16457] usb 1-1: Using ep0 maxpacket: 32 [ 1262.057987][T16457] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1262.086213][T16457] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1262.114545][T16457] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.123857][T16457] usb 1-1: Product: syz [ 1262.128227][T16457] usb 1-1: Manufacturer: syz [ 1262.147504][T16457] usb 1-1: SerialNumber: syz [ 1262.159592][T16447] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1262.159640][T16457] usb 1-1: config 0 descriptor?? [ 1262.175637][T22076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1262.190270][T16457] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input126 [ 1262.351870][T16447] usb 6-1: config 0 has an invalid interface number: 79 but max is 0 [ 1262.379632][T16447] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1262.391609][T16447] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1262.406296][T16447] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1262.416338][T16447] usb 6-1: config 0 has no interface number 0 [ 1262.427188][T16447] usb 6-1: config 0 has no interface number 1 [ 1262.557975][T16447] usb 6-1: config 0 interface 79 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1262.589236][T16447] usb 6-1: config 0 interface 79 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1262.610238][T16447] usb 6-1: too many endpoints for config 0 interface 119 altsetting 118: 176, using maximum allowed: 30 [ 1262.629944][T16447] usb 6-1: config 0 interface 119 altsetting 118 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 1262.650132][T16447] usb 6-1: config 0 interface 119 altsetting 118 endpoint 0xF has invalid maxpacket 22016, setting to 64 [ 1262.682149][T16447] usb 6-1: config 0 interface 119 altsetting 118 has 3 endpoint descriptors, different from the interface descriptor's value: 176 [ 1262.837530][ T5939] usb 1-1: USB disconnect, device number 120 [ 1262.845083][T16447] usb 6-1: config 0 interface 79 has no altsetting 0 [ 1262.884635][T16447] usb 6-1: config 0 interface 119 has no altsetting 0 [ 1262.915549][T16447] usb 6-1: New USB device found, idVendor=1209, idProduct=1637, bcdDevice=e7.52 [ 1262.927999][T16447] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.939108][T16447] usb 6-1: Product: syz [ 1263.034689][T16447] usb 6-1: Manufacturer: syz [ 1263.039664][T16447] usb 6-1: SerialNumber: syz [ 1263.049086][T16447] usb 6-1: config 0 descriptor?? [ 1263.513882][T21948] team0: Port device team_slave_0 added [ 1263.666597][T16447] usb 6-1: USB disconnect, device number 64 [ 1263.703868][T21948] team0: Port device team_slave_1 added [ 1263.834189][T21948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.864012][T21948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.910362][T21948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.925300][T21948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.934735][T21948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.972255][T21948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1264.085196][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1264.085217][ T30] audit: type=1326 audit(1752692006.674:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22100 comm="syz.6.3575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2816d8e929 code=0x0 [ 1264.459595][T21948] hsr_slave_0: entered promiscuous mode [ 1264.503392][T21948] hsr_slave_1: entered promiscuous mode [ 1264.543074][T21948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1264.667827][T21948] Cannot create hsr debugfs directory [ 1264.680601][T22116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3575'. [ 1265.150935][ T13] IPVS: stop unused estimator thread 0... [ 1266.622800][T22128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.672486][T22128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.767916][T22128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1267.275974][ T5939] usb 3-1: USB disconnect, device number 95 [ 1268.287154][T22155] lo: entered promiscuous mode [ 1268.317786][T22155] tunl0: entered promiscuous mode [ 1268.355651][T22155] gre0: entered promiscuous mode [ 1268.384518][T22155] gretap0: entered promiscuous mode [ 1268.440489][T22155] erspan0: entered promiscuous mode [ 1268.458150][T22155] ip_vti0: entered promiscuous mode [ 1268.479871][T22155] ip6_vti0: entered promiscuous mode [ 1268.499496][T22155] sit0: entered promiscuous mode [ 1268.538878][T22155] ip6tnl0: entered promiscuous mode [ 1268.568252][T22155] ip6gre0: entered promiscuous mode [ 1268.608327][T22155] syz_tun: entered promiscuous mode [ 1268.618588][T22167] xt_hashlimit: size too large, truncated to 1048576 [ 1268.629546][ T30] audit: type=1326 audit(1752692011.204:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22166 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2538e929 code=0x7ffc0000 [ 1268.656780][T16447] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1268.766250][T22155] ip6gretap0: entered promiscuous mode [ 1268.788445][T22155] bridge0: entered promiscuous mode [ 1268.801913][T22155] vcan0: entered promiscuous mode [ 1268.805495][ T30] audit: type=1326 audit(1752692011.204:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22166 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2538e929 code=0x7ffc0000 [ 1268.837528][T22155] bond0: entered promiscuous mode [ 1268.854488][T22155] bond_slave_0: entered promiscuous mode [ 1268.873389][ T30] audit: type=1326 audit(1752692011.204:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22166 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fdd2538e929 code=0x7ffc0000 [ 1268.909344][T16447] usb 6-1: Using ep0 maxpacket: 32 [ 1268.913033][T22155] bond_slave_1: entered promiscuous mode [ 1268.922030][T16447] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 1268.943250][T16447] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1268.952295][T16447] usb 6-1: can't read configurations, error -61 [ 1268.958942][ T30] audit: type=1326 audit(1752692011.204:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22166 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2538e929 code=0x7ffc0000 [ 1268.986045][T22155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1269.012133][T22155] team0: entered promiscuous mode [ 1269.018091][T22155] team_slave_0: entered promiscuous mode [ 1269.030513][T22155] team_slave_1: entered promiscuous mode [ 1269.037492][T22155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1269.045308][T22155] dummy0: entered promiscuous mode [ 1269.062178][ T30] audit: type=1326 audit(1752692011.204:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22166 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdd2538e929 code=0x7ffc0000 [ 1269.112408][T22155] nlmon0: entered promiscuous mode [ 1269.129366][T16447] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1269.231873][T22155] caif0: entered promiscuous mode [ 1269.239715][T22155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1269.308674][ T30] audit: type=1326 audit(1752692011.894:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22166 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2538e929 code=0x7ffc0000 [ 1269.339662][T16447] usb 6-1: Using ep0 maxpacket: 32 [ 1269.349568][T16447] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 1269.375458][ T30] audit: type=1326 audit(1752692011.934:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22166 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2538e929 code=0x7ffc0000 [ 1269.416204][T16447] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1269.454442][T16447] usb 6-1: can't read configurations, error -61 [ 1269.475059][T16447] usb usb6-port1: attempt power cycle [ 1269.796224][T22178] pim6reg: entered allmulticast mode [ 1269.829402][T16447] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1269.849994][T21948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1269.919591][T16447] usb 6-1: Using ep0 maxpacket: 32 [ 1269.921446][T21948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1269.952824][T16447] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 1269.988919][T16447] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1270.056152][T16447] usb 6-1: can't read configurations, error -61 [ 1270.075938][T21948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1270.145838][T21948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1270.199300][T16447] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1270.240658][T16447] usb 6-1: Using ep0 maxpacket: 32 [ 1270.332076][T16447] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 1270.343036][T16447] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1270.351655][T16447] usb 6-1: can't read configurations, error -61 [ 1270.358615][T16447] usb usb6-port1: unable to enumerate USB device [ 1270.814216][T21948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.897892][T21948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.946794][T14941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.953968][T14941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.044884][T22202] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1271.104000][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.111213][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.409795][T21948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.587241][T21948] veth0_vlan: entered promiscuous mode [ 1271.701281][T21948] veth1_vlan: entered promiscuous mode [ 1271.834912][T22221] kvm: pic: non byte write [ 1271.841779][T21948] veth0_macvtap: entered promiscuous mode [ 1271.941331][T16447] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1271.967630][T21948] veth1_macvtap: entered promiscuous mode [ 1272.099697][T16447] usb 3-1: device descriptor read/64, error -71 [ 1272.164017][T21948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.253277][T21948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.314106][T21948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.349592][T16447] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1272.379080][T21948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.408703][T21948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.440922][T21948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.530220][T16447] usb 3-1: device descriptor read/64, error -71 [ 1272.649899][T16447] usb usb3-port1: attempt power cycle [ 1272.739816][T18676] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1272.940117][ T5939] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1273.000444][T16447] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1273.028772][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.040526][T16447] usb 3-1: device descriptor read/8, error -71 [ 1273.069945][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.119735][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 1273.158813][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1273.205146][ T5939] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1273.240028][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.250457][ T5939] usb 1-1: Product: syz [ 1273.256095][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.270011][ T5939] usb 1-1: Manufacturer: syz [ 1273.275128][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.283768][ T5939] usb 1-1: SerialNumber: syz [ 1273.299279][T16447] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1273.308411][ T5939] usb 1-1: config 0 descriptor?? [ 1273.343477][T16447] usb 3-1: device descriptor read/8, error -71 [ 1273.353560][ T5939] hub 1-1:0.0: bad descriptor, ignoring hub [ 1273.377019][ T5939] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1273.426576][ T5939] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input127 [ 1273.474036][T16447] usb usb3-port1: unable to enumerate USB device [ 1274.304342][T22276] random: crng reseeded on system resumption [ 1274.440580][ T5204] usb 1-1: reset high-speed USB device number 121 using dummy_hcd [ 1274.636874][ T5204] usb 1-1: device firmware changed [ 1274.685230][T16457] usb 1-1: USB disconnect, device number 121 [ 1275.110364][T16457] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1275.569961][T16457] usb 1-1: Using ep0 maxpacket: 16 [ 1275.578055][T16457] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.699902][T16457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1275.801303][T16457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1275.833970][T16457] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1275.958517][T16457] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1276.027897][T16457] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1276.063512][T16457] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1276.119305][T16457] usb 1-1: Manufacturer: syz [ 1276.155329][T16457] usb 1-1: config 0 descriptor?? [ 1276.448939][T22305] netlink: 'syz.5.3603': attribute type 2 has an invalid length. [ 1276.729949][T16457] rc_core: IR keymap rc-hauppauge not found [ 1276.766391][T16457] Registered IR keymap rc-empty [ 1276.786903][T16457] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1276.849822][T16457] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1276.910876][T16457] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1276.968125][T16457] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input128 [ 1277.044568][T16457] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1277.109675][T16459] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1277.118300][T16457] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1277.177738][T22323] random: crng reseeded on system resumption [ 1277.259824][T16457] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1277.307848][T16457] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1277.348227][T16459] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1277.362630][T16459] usb 6-1: not running at top speed; connect to a high speed hub [ 1277.371057][T16457] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1277.382350][T16459] usb 6-1: config 24 has an invalid interface number: 219 but max is 0 [ 1277.394830][T16459] usb 6-1: config 24 has no interface number 0 [ 1277.401770][T16457] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1277.410755][T16459] usb 6-1: config 24 interface 219 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1277.422405][T16459] usb 6-1: config 24 interface 219 has no altsetting 0 [ 1277.447190][T16457] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1277.454512][T16459] usb 6-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=2f.c7 [ 1277.464570][T16459] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.472834][T16459] usb 6-1: Product: syz [ 1277.477278][T16459] usb 6-1: Manufacturer: syz [ 1277.481975][T16459] usb 6-1: SerialNumber: syz [ 1277.490362][T22313] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1277.499779][T16457] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1277.531764][T16457] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1277.571079][T16457] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1278.004572][T16457] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1278.028637][T16457] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1278.053581][T16459] usb 6-1: Could not find all expected endpoints [ 1278.139527][T16459] usb 6-1: USB disconnect, device number 70 [ 1278.153940][T16457] usb 1-1: USB disconnect, device number 122 [ 1278.193470][T22338] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1278.819782][T16457] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1279.019341][T16457] usb 1-1: Using ep0 maxpacket: 16 [ 1279.055792][T16457] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 1279.149655][T16457] usb 1-1: config 0 has no interface number 0 [ 1279.205141][T16457] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1279.319397][T22359] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3611'. [ 1279.508992][T16457] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.580620][T16457] usb 1-1: Product: syz [ 1279.580647][T16457] usb 1-1: Manufacturer: syz [ 1279.580666][T16457] usb 1-1: SerialNumber: syz [ 1279.594548][T16457] usb 1-1: config 0 descriptor?? [ 1279.684639][T16457] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1279.882630][T14945] usb 1-1: Failed to submit usb control message: -71 [ 1279.882691][T14945] usb 1-1: unable to send the bmi data to the device: -71 [ 1279.882706][T14945] usb 1-1: unable to get target info from device [ 1279.882720][T14945] usb 1-1: could not get target info (-71) [ 1279.882743][T14945] usb 1-1: could not probe fw (-71) [ 1279.886150][ T5939] usb 1-1: USB disconnect, device number 123 [ 1280.589436][ T5939] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1280.910001][ T5939] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1280.971147][ T5939] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1281.001982][ T5939] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1281.025474][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1281.087219][ T5939] usb 7-1: Product: syz [ 1281.098354][ T5939] usb 7-1: Manufacturer: syz [ 1281.106398][ T5939] usb 7-1: SerialNumber: syz [ 1281.116706][ T5939] usb 7-1: config 0 descriptor?? [ 1281.167067][ T5939] usb 7-1: selecting invalid altsetting 0 [ 1281.202219][T22391] PKCS7: Unknown OID: [5] (bad) [ 1281.207875][T22391] PKCS7: Only support pkcs7_signedData type [ 1281.263904][T16457] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1281.419766][T16457] usb 3-1: Using ep0 maxpacket: 8 [ 1281.429208][T16457] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1281.454063][T16457] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 1281.499257][T16447] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1281.515183][T16457] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1281.548643][T16457] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.582122][T22396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.598735][T22396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.702428][T16459] usb 7-1: USB disconnect, device number 45 [ 1281.795090][T16457] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 1281.813875][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.866567][T16457] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1281.997044][T16447] usb 4-1: Using ep0 maxpacket: 16 [ 1282.015885][T16457] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1282.089573][T16447] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 1282.126546][ T5939] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1282.129220][T16457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.169960][T16447] usb 4-1: config 0 has no interface number 0 [ 1282.385514][T16447] usb 4-1: config 0 interface 161 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1282.430990][T16457] usb 3-1: config 0 descriptor?? [ 1282.948715][T16447] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 1282.978555][T16447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.333215][T16447] usb 4-1: Product: syz [ 1283.353546][T16447] usb 4-1: Manufacturer: syz [ 1283.393637][T16447] usb 4-1: SerialNumber: syz [ 1283.681384][T16447] usb 4-1: config 0 descriptor?? [ 1285.077975][T16457] usbhid 3-1:0.0: can't add hid device: -71 [ 1285.112288][T16457] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1285.172323][T16457] usb 3-1: USB disconnect, device number 100 [ 1285.241676][T16447] usb 4-1: can't set config #0, error -71 [ 1285.249058][T16447] usb 4-1: USB disconnect, device number 98 [ 1285.450762][ T5939] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1285.650753][T16457] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1285.662932][ T5939] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1285.677426][ T5939] usb 6-1: not running at top speed; connect to a high speed hub [ 1285.703227][ T5939] usb 6-1: config 24 has an invalid interface number: 219 but max is 0 [ 1285.724146][ T5939] usb 6-1: config 24 has no interface number 0 [ 1285.731378][ T5939] usb 6-1: config 24 interface 219 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1285.752222][ T5939] usb 6-1: config 24 interface 219 has no altsetting 0 [ 1285.762555][ T5939] usb 6-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=2f.c7 [ 1285.772340][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.780640][ T5939] usb 6-1: Product: syz [ 1285.784957][ T5939] usb 6-1: Manufacturer: syz [ 1285.790125][ T5939] usb 6-1: SerialNumber: syz [ 1285.801721][T22431] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1285.849280][T16457] usb 3-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 1285.875645][T16457] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1285.899677][T16457] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1285.908896][T16457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.924658][T16457] usb 3-1: config 0 descriptor?? [ 1285.970875][T16457] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1286.021458][ T5939] usb 6-1: Could not find all expected endpoints [ 1286.048858][ T5939] usb 6-1: USB disconnect, device number 72 [ 1286.609299][T22459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.640494][T22459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.969376][ T5169] Bluetooth: hci2: command 0x0405 tx timeout [ 1287.639570][T16459] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1287.791845][T16459] usb 6-1: Using ep0 maxpacket: 16 [ 1287.817414][T16459] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1287.861680][T16459] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1287.883204][T16459] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.916621][T16459] usb 6-1: Product: syz [ 1287.932845][T16459] usb 6-1: Manufacturer: syz [ 1287.958099][T16459] usb 6-1: SerialNumber: syz [ 1287.995992][T16459] usb 6-1: config 0 descriptor?? [ 1288.030045][T16459] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1288.097998][T16459] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1288.267934][T16457] usb 3-1: USB disconnect, device number 101 [ 1288.444970][T22483] random: crng reseeded on system resumption [ 1288.726955][T16459] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1289.135046][T16447] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1289.374188][T22472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.384653][T22472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.806590][T16447] usb 3-1: Using ep0 maxpacket: 8 [ 1289.867302][T16447] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1289.936073][T16447] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 1289.952542][T16447] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1289.966241][T16447] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.983834][T16447] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 1290.034456][T16447] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1290.068148][T16447] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1290.085970][T16447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.142753][T16447] usb 3-1: config 0 descriptor?? [ 1290.251172][T16459] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1290.262522][T16459] em28xx 6-1:0.0: board has no eeprom [ 1290.385495][T16459] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1290.424705][T16459] em28xx 6-1:0.0: dvb set to bulk mode. [ 1290.448638][T16457] em28xx 6-1:0.0: Binding DVB extension [ 1290.839605][T16457] em28xx 6-1:0.0: Registering input extension [ 1291.198493][T22500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3635'. [ 1291.572152][T22505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3638'. [ 1291.669378][T16444] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1291.789365][ T5939] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1291.819508][T16444] usb 7-1: Using ep0 maxpacket: 32 [ 1291.848884][T16444] usb 7-1: no configurations [ 1291.862675][T16444] usb 7-1: can't read configurations, error -22 [ 1291.949316][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 1291.965923][ T5939] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1291.983071][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.991760][ T5939] usb 1-1: Product: syz [ 1291.996118][ T5939] usb 1-1: Manufacturer: syz [ 1292.001434][T16444] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1292.010486][ T5939] usb 1-1: SerialNumber: syz [ 1292.025962][ T5939] usb 1-1: config 0 descriptor?? [ 1292.037540][ T5939] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1292.132117][T16459] usb 6-1: USB disconnect, device number 73 [ 1292.139684][T16459] em28xx 6-1:0.0: Disconnecting em28xx [ 1292.145226][T16459] em28xx 6-1:0.0: Closing input extension [ 1292.169400][T16444] usb 7-1: Using ep0 maxpacket: 32 [ 1292.175881][T16444] usb 7-1: no configurations [ 1292.198145][T16444] usb 7-1: can't read configurations, error -22 [ 1292.224011][T16459] em28xx 6-1:0.0: Freeing device [ 1292.228233][T16444] usb usb7-port1: attempt power cycle [ 1292.458342][T16447] usbhid 3-1:0.0: can't add hid device: -71 [ 1292.464680][T16447] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1292.497387][T16447] usb 3-1: USB disconnect, device number 102 [ 1292.522595][T22510] macvlan2: entered promiscuous mode [ 1292.543666][T22510] macvlan2: entered allmulticast mode [ 1292.599439][T16444] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1292.610021][T16459] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1292.640089][T16444] usb 7-1: Using ep0 maxpacket: 32 [ 1292.651824][T16444] usb 7-1: no configurations [ 1292.658931][T16444] usb 7-1: can't read configurations, error -22 [ 1292.672702][T22514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1292.700374][ T5939] gspca_ov534_9: reg_w failed -71 [ 1292.799439][T16444] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1292.813094][T16459] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1292.832764][T16459] usb 6-1: not running at top speed; connect to a high speed hub [ 1292.839610][T16444] usb 7-1: Using ep0 maxpacket: 32 [ 1292.845261][T16459] usb 6-1: config 24 has an invalid interface number: 219 but max is 0 [ 1292.846997][T16444] usb 7-1: no configurations [ 1292.859361][T16444] usb 7-1: can't read configurations, error -22 [ 1292.866315][T16444] usb usb7-port1: unable to enumerate USB device [ 1292.868390][T16459] usb 6-1: config 24 has no interface number 0 [ 1292.889605][T16459] usb 6-1: config 24 interface 219 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1292.906431][T16459] usb 6-1: config 24 interface 219 has no altsetting 0 [ 1292.917624][T16459] usb 6-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=2f.c7 [ 1292.936879][T16459] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.948708][T16459] usb 6-1: Product: syz [ 1292.957080][T16459] usb 6-1: Manufacturer: syz [ 1292.965532][T16459] usb 6-1: SerialNumber: syz [ 1292.980907][T22512] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1292.999348][ T5939] gspca_ov534_9: Unknown sensor 0000 [ 1292.999440][ T5939] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1293.020663][ T5939] usb 1-1: USB disconnect, device number 124 [ 1293.201760][T16459] usb 6-1: Could not find all expected endpoints [ 1293.251146][T16459] usb 6-1: USB disconnect, device number 74 [ 1293.431189][T22525] C: renamed from team_slave_0 [ 1293.450536][T22525] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3644'. [ 1293.649196][T16444] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1293.875512][T16444] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.919407][T16444] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1293.940818][T16444] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1293.968054][T16444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.030095][T16444] usb 1-1: config 0 descriptor?? [ 1294.177194][T22540] batman_adv: batadv0: Adding interface: macsec1 [ 1294.198283][T22540] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.230468][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3648'. [ 1294.244566][T22540] batman_adv: batadv0: Interface activated: macsec1 [ 1294.403742][T22547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.470957][T22523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1294.513702][T22547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.516746][T22523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.559886][T22523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.571463][T22547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.581471][T22549] syzkaller1: entered promiscuous mode [ 1294.587000][T22549] syzkaller1: entered allmulticast mode [ 1294.609745][T16459] usb 6-1: new low-speed USB device number 75 using dummy_hcd [ 1294.635663][T16444] kye 0003:0458:5013.0040: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1294.641906][T22547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.672783][T22550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.690795][T16444] kye 0003:0458:5013.0040: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 1294.713778][T22550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.740018][T16444] kye 0003:0458:5013.0040: tablet-enabling feature report not found [ 1294.759927][T22547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.779339][T16459] usb 6-1: Invalid ep0 maxpacket: 32 [ 1294.789165][T16444] kye 0003:0458:5013.0040: tablet enabling failed [ 1294.823010][T22547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.896149][T22549] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 1294.919338][T16459] usb 6-1: new low-speed USB device number 76 using dummy_hcd [ 1294.988782][T22559] netlink: 161716 bytes leftover after parsing attributes in process `syz.6.3653'. [ 1295.028957][T22559] netlink: zone id is out of range [ 1295.049075][T22559] netlink: zone id is out of range [ 1295.059596][T22559] netlink: zone id is out of range [ 1295.069455][T22559] netlink: zone id is out of range [ 1295.082533][T22559] netlink: zone id is out of range [ 1295.088138][T22559] netlink: zone id is out of range [ 1295.096616][T22559] netlink: zone id is out of range [ 1295.107652][T22559] netlink: zone id is out of range [ 1295.134225][ T5947] kworker/0:5 (5947) used greatest stack depth: 15928 bytes left [ 1295.219318][T22559] netlink: zone id is out of range [ 1295.421697][T16444] usb 1-1: USB disconnect, device number 125 [ 1295.909434][T16457] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1296.129401][T16444] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1296.242924][T16457] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1296.250290][T16457] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1296.276692][T16457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.314099][T16444] usb 4-1: config 0 has no interfaces? [ 1296.321961][T16444] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1296.335822][T16444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.344363][T16444] usb 4-1: Product: syz [ 1296.348626][T16444] usb 4-1: Manufacturer: syz [ 1296.357277][T16444] usb 4-1: SerialNumber: syz [ 1296.359248][T16457] usb 3-1: config 0 descriptor?? [ 1296.380243][T16444] usb 4-1: config 0 descriptor?? [ 1296.622658][T22590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.643698][T22590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.847170][T16457] uclogic 0003:28BD:0075.0041: interface is invalid, ignoring [ 1298.040150][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3664'. [ 1298.691600][ T5851] usb 3-1: USB disconnect, device number 103 [ 1298.818994][T16447] usb 4-1: USB disconnect, device number 99 [ 1298.922657][T22594] delete_channel: no stack [ 1299.480770][T22634] hsr0: entered promiscuous mode [ 1299.544008][ T5851] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1299.699837][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 1299.750740][ T5851] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1299.790158][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.924850][ T5851] usb 3-1: config 0 descriptor?? [ 1300.259952][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.267812][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.829767][ T5851] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1301.857051][ T5851] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1301.882973][ T5851] usb 3-1: USB disconnect, device number 104 [ 1302.402740][T22662] netlink: 'syz.6.3677': attribute type 9 has an invalid length. [ 1302.410778][T22662] netlink: 212160 bytes leftover after parsing attributes in process `syz.6.3677'. [ 1303.596481][T22632] hsr0: left promiscuous mode [ 1303.789813][T18676] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1303.966955][ T30] audit: type=1326 audit(1752692046.554:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22677 comm="syz.5.3681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0553f8e929 code=0x0 [ 1303.989749][T18676] usb 1-1: Using ep0 maxpacket: 32 [ 1304.030424][T18676] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1304.052387][T18676] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1304.071629][T18676] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1304.107900][T18676] usb 1-1: Product: syz [ 1304.123131][T18676] usb 1-1: Manufacturer: syz [ 1304.127805][T18676] usb 1-1: SerialNumber: syz [ 1304.173716][T18676] usb 1-1: config 0 descriptor?? [ 1304.181376][T22674] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1304.233028][T18676] hub 1-1:0.0: bad descriptor, ignoring hub [ 1304.263941][T18676] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1304.412734][T22684] vivid-000: disconnect [ 1304.465554][ T30] audit: type=1326 audit(1752692047.054:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.5.3682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0553f8e929 code=0x0 [ 1304.541506][T18676] usb 1-1: USB disconnect, device number 126 [ 1304.794530][T22675] vivid-000: reconnect [ 1305.161918][T18676] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1305.331874][T18676] usb 1-1: Using ep0 maxpacket: 32 [ 1305.359586][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3682'. [ 1305.395027][T18676] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1305.437224][T18676] usb 1-1: string descriptor 0 read error: -22 [ 1305.466708][T18676] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1305.780799][T18676] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1305.803891][T18676] usb 1-1: config 0 descriptor?? [ 1305.945418][T16457] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1306.027565][T22674] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1306.103611][T18676] hub 1-1:0.0: bad descriptor, ignoring hub [ 1306.110613][T18676] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1306.166640][T16457] usb 7-1: Using ep0 maxpacket: 32 [ 1306.252948][T16457] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1306.262183][T16457] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 1306.271230][T16457] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.301780][T16457] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1306.330868][T22674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.387959][T22674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.479587][T16457] usb 7-1: config 128 has no interface number 0 [ 1306.509835][T16459] usb 1-1: USB disconnect, device number 127 [ 1306.525414][T16457] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1306.604203][T16457] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1306.721862][T16457] usb 7-1: config 128 interface 127 has no altsetting 0 [ 1306.747303][T16457] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1306.756644][T16457] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.775238][T16457] usb 7-1: Product: syz [ 1306.802092][T16457] usb 7-1: Manufacturer: syz [ 1306.815985][T16457] usb 7-1: SerialNumber: syz [ 1306.899371][T22704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3688'. [ 1307.077729][T22711] net_ratelimit: 682 callbacks suppressed [ 1307.077752][T22711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1307.108062][T16457] usb 7-1: USB disconnect, device number 50 [ 1307.135203][T22711] binder: BINDER_SET_CONTEXT_MGR already set [ 1307.155218][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1307.174453][T22711] binder: 22710:22711 ioctl 4018620d 200000000040 returned -16 [ 1307.198661][T22711] binder: 22710:22711 ioctl c0306201 200000000240 returned -11 [ 1307.229268][ T5939] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1307.240772][T16459] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1307.381305][ T5939] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1307.390366][ T5939] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1307.391434][T16459] usb 6-1: config 3 has an invalid interface number: 168 but max is 0 [ 1307.401274][ T5939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1307.414612][T16459] usb 6-1: config 3 has no interface number 0 [ 1307.425750][T16459] usb 6-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1307.428516][ T5939] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1307.442292][T16459] usb 6-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 1307.448034][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.463994][T16459] usb 6-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1307.466459][ T5939] usb 4-1: Product: Ð [ 1307.476577][T16459] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1307.480565][ T5939] usb 4-1: Manufacturer: Ð [ 1307.480582][ T5939] usb 4-1: SerialNumber: syz [ 1307.499413][T16459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.513863][T22708] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1307.579515][T16447] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1307.757067][T16447] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.786945][T16447] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1307.799691][T16447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.813532][T16447] usb 1-1: Product: syz [ 1307.817732][T16447] usb 1-1: Manufacturer: syz [ 1307.823302][T16447] usb 1-1: SerialNumber: syz [ 1307.831343][T16459] usb 6-1: string descriptor 0 read error: -71 [ 1307.838499][T16459] keyspan 6-1:3.168: Keyspan 2 port adapter converter detected [ 1307.895934][T16459] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 1 [ 1307.913537][T16459] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 84 [ 1307.924208][ T5939] usb 4-1: 0:2 : does not exist [ 1307.939898][T16459] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 2 [ 1308.014244][T16459] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1308.084692][T16459] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 88 [ 1308.095541][T16459] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 6 [ 1308.152563][T16459] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1308.367142][T16459] usb 6-1: USB disconnect, device number 77 [ 1308.587737][ T5939] usb 4-1: USB disconnect, device number 100 [ 1308.613656][T16459] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1308.713767][T16459] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1308.741942][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.775151][T16459] keyspan 6-1:3.168: device disconnected [ 1308.866431][T16447] cdc_ncm 1-1:1.0: failed to get mac address [ 1308.896749][T16447] cdc_ncm 1-1:1.0: bind() failure [ 1308.913680][T22726] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3696'. [ 1308.976393][T16447] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1308.998369][T16447] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1309.007997][T16447] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1309.025496][T16447] usb 1-1: USB disconnect, device number 2 [ 1309.150532][T22734] PKCS7: Unknown OID: [5] (bad) [ 1309.157520][T22734] PKCS7: Only support pkcs7_signedData type [ 1309.190633][T22734] usb usb8: usbfs: process 22734 (syz.6.3698) did not claim interface 0 before use [ 1309.252845][T22745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3702'. [ 1309.316389][ T30] audit: type=1326 audit(1752692051.904:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22753 comm="syz.0.3703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd2538e929 code=0x0 [ 1309.473357][T22761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3700'. [ 1309.709390][ T5939] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1309.909446][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 1309.918025][ T5939] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 1309.927873][ T5939] usb 6-1: config 0 has no interface number 0 [ 1309.938521][ T5939] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1309.948545][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.957306][T22764] lo: entered promiscuous mode [ 1309.962783][ T5939] usb 6-1: Product: syz [ 1309.967814][ T5939] usb 6-1: Manufacturer: syz [ 1309.989246][ T5939] usb 6-1: SerialNumber: syz [ 1309.998008][T22764] tunl0: entered promiscuous mode [ 1310.005534][ T5939] usb 6-1: config 0 descriptor?? [ 1310.015929][T22764] gre0: entered promiscuous mode [ 1310.027233][T22764] gretap0: entered promiscuous mode [ 1310.040611][T22764] erspan0: entered promiscuous mode [ 1310.047054][T22764] ip_vti0: entered promiscuous mode [ 1310.056872][ T5939] hub 6-1:0.145: bad descriptor, ignoring hub [ 1310.119719][T22764] ip6_vti0: entered promiscuous mode [ 1310.131520][ T5939] hub 6-1:0.145: probe with driver hub failed with error -5 [ 1310.168408][ T5939] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.145/input/input130 [ 1310.186656][T22764] sit0: entered promiscuous mode [ 1310.297871][ T5939] input: failed to attach handler mousedev to device input130, error: -2 [ 1310.338363][T22764] ip6tnl0: entered promiscuous mode [ 1310.359885][ T5939] usb 6-1: USB disconnect, device number 78 [ 1310.371514][T22764] ip6gre0: entered promiscuous mode [ 1310.391924][T22764] syz_tun: entered promiscuous mode [ 1310.462929][T22764] ip6gretap0: entered promiscuous mode [ 1310.501716][T22764] bridge0: entered promiscuous mode [ 1310.531112][T22764] vcan0: entered promiscuous mode [ 1310.542431][T22764] bond0: entered promiscuous mode [ 1310.551332][T22764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.561963][T22764] team0: entered promiscuous mode [ 1310.571567][T22764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.580332][T22764] nlmon0: entered promiscuous mode [ 1310.586612][T22764] caif0: entered promiscuous mode [ 1310.592225][T22764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1310.711101][T16459] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1310.899739][T16459] usb 1-1: Using ep0 maxpacket: 32 [ 1310.907307][T16459] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1310.916923][T16459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.928734][T16459] usb 1-1: config 0 descriptor?? [ 1310.957103][T16459] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1311.035777][T16441] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1311.214991][T16441] usb 3-1: config 0 has an invalid interface number: 202 but max is 0 [ 1311.225638][T16441] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.242377][T16441] usb 3-1: config 0 has no interface number 0 [ 1311.248539][T16441] usb 3-1: config 0 interface 202 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1311.266732][T16441] usb 3-1: config 0 interface 202 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1311.313633][T16441] usb 3-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 2.38 [ 1311.327587][T16441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.361899][T16441] usb 3-1: Product: syz [ 1311.376659][T16441] usb 3-1: Manufacturer: syz [ 1311.399217][T16441] usb 3-1: SerialNumber: syz [ 1311.413898][T16441] usb 3-1: config 0 descriptor?? [ 1311.422425][T22799] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3715'. [ 1311.428524][T16441] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 1311.445461][T16441] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1311.453833][T16441] dvb-usb: bulk message failed: -22 (2/0) [ 1311.478718][T16441] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1311.504926][T22799] tipc: Enabled bearer , priority 0 [ 1311.525446][T16441] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 1311.543543][T22799] syzkaller0: entered promiscuous mode [ 1311.557614][T22802] fuse: Unknown parameter 'groÿp_id' [ 1311.558183][T22799] syzkaller0: entered allmulticast mode [ 1311.586597][T22798] tipc: Resetting bearer [ 1311.668280][T22798] tipc: Disabling bearer [ 1311.696640][ T5939] usb 3-1: USB disconnect, device number 105 [ 1311.791388][T22806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3717'. [ 1311.833004][T22806] netlink: 'syz.5.3717': attribute type 1 has an invalid length. [ 1311.881417][T22811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3719'. [ 1311.950601][T22806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1311.950990][T16459] gspca_sunplus: reg_w_riv err -71 [ 1311.962808][T16459] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1311.974843][T16459] usb 1-1: USB disconnect, device number 3 [ 1312.249819][ T5939] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 1312.530809][T22822] vivid-000: disconnect [ 1312.616673][ T5939] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1312.625520][ T5939] usb 7-1: not running at top speed; connect to a high speed hub [ 1312.635686][ T5939] usb 7-1: config 24 has an invalid interface number: 219 but max is 0 [ 1312.646239][ T5939] usb 7-1: config 24 has no interface number 0 [ 1312.657147][ T5939] usb 7-1: config 24 interface 219 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1312.677077][T22807] vivid-000: reconnect [ 1312.681787][ T5939] usb 7-1: config 24 interface 219 has no altsetting 0 [ 1312.700419][ T5939] usb 7-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=2f.c7 [ 1312.713548][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.734240][ T5939] usb 7-1: Product: syz [ 1312.743537][ T5939] usb 7-1: Manufacturer: syz [ 1312.754328][ T5939] usb 7-1: SerialNumber: syz [ 1312.800165][T22813] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1312.803280][T22834] netlink: 'syz.0.3723': attribute type 10 has an invalid length. [ 1313.027644][ T5939] usb 7-1: Could not find all expected endpoints [ 1313.067560][ T5939] usb 7-1: USB disconnect, device number 51 [ 1313.842253][ T30] audit: type=1326 audit(1752692056.374:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0553f8e929 code=0x7ffc0000 [ 1313.882201][ T30] audit: type=1326 audit(1752692056.374:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0553f8e929 code=0x7ffc0000 [ 1313.935585][ T30] audit: type=1326 audit(1752692056.374:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0553f8e929 code=0x7ffc0000 [ 1314.094755][ T30] audit: type=1326 audit(1752692056.374:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0553f8e929 code=0x7ffc0000 [ 1314.109679][T16459] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1314.128940][T22861] vivid-000: disconnect [ 1314.190558][ T30] audit: type=1326 audit(1752692056.374:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0553f8e929 code=0x7ffc0000 [ 1314.213355][ T5939] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1314.325073][T22836] vivid-000: reconnect [ 1314.369244][ T30] audit: type=1326 audit(1752692056.384:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0553f8e929 code=0x7ffc0000 [ 1314.392306][ T5939] usb 1-1: device descriptor read/64, error -71 [ 1314.414241][ T30] audit: type=1326 audit(1752692056.384:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0553f90847 code=0x7ffc0000 [ 1314.508827][ T30] audit: type=1326 audit(1752692056.384:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0553f907bc code=0x7ffc0000 [ 1314.509930][T16459] usb 6-1: Using ep0 maxpacket: 32 [ 1314.597036][ T30] audit: type=1326 audit(1752692056.394:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0553f906f4 code=0x7ffc0000 [ 1314.641062][ T5939] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1314.669058][T16459] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1314.745681][ T30] audit: type=1326 audit(1752692056.394:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0553f906f4 code=0x7ffc0000 [ 1314.810484][T16459] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1314.824291][ T30] audit: type=1326 audit(1752692056.394:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0553f8d58a code=0x7ffc0000 [ 1314.855886][T16459] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1314.871326][ T5939] usb 1-1: device descriptor read/64, error -71 [ 1314.884697][ T30] audit: type=1326 audit(1752692056.394:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0553f8e929 code=0x7ffc0000 [ 1314.911158][ T30] audit: type=1326 audit(1752692056.394:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0553f8e929 code=0x7ffc0000 [ 1314.989673][ T5939] usb usb1-port1: attempt power cycle [ 1315.076491][T16459] usb 6-1: Product: syz [ 1315.092222][T16459] usb 6-1: Manufacturer: syz [ 1315.096883][T16459] usb 6-1: SerialNumber: syz [ 1315.098453][ T30] audit: type=1326 audit(1752692056.404:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0553f8e963 code=0x7ffc0000 [ 1315.164540][ T30] audit: type=1326 audit(1752692056.404:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22846 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0553f8e929 code=0x7ffc0000 [ 1315.200173][T16459] usb 6-1: config 0 descriptor?? [ 1315.208192][T22855] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1315.299818][T16441] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1315.391822][ T5939] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1315.429517][T16441] usb 7-1: device descriptor read/64, error -71 [ 1315.436733][ T5939] usb 1-1: device descriptor read/8, error -71 [ 1315.749523][ T5939] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1315.757210][T16441] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1315.790976][ T5939] usb 1-1: device descriptor read/8, error -71 [ 1315.842127][T16457] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1315.899343][T16441] usb 7-1: device descriptor read/64, error -71 [ 1315.911303][ T5939] usb usb1-port1: unable to enumerate USB device [ 1316.034649][T16457] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1316.044521][T16457] usb 4-1: config 0 has no interface number 0 [ 1316.052114][T16441] usb usb7-port1: attempt power cycle [ 1316.059781][T16457] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1316.128665][T16457] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1316.184095][T16457] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1316.206462][T16457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.258811][T16457] usb 4-1: Product: syz [ 1316.273787][T16457] usb 4-1: Manufacturer: syz [ 1316.284246][T16457] usb 4-1: SerialNumber: syz [ 1316.289540][ T5939] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1316.335643][T16457] usb 4-1: config 0 descriptor?? [ 1316.348979][T22870] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1316.358472][T16457] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1316.425959][T16457] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1316.449210][T16441] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1316.500582][T16441] usb 7-1: device descriptor read/8, error -71 [ 1316.572365][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 1316.598390][ T5939] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1316.644910][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1316.673214][ T5939] usb 3-1: Product: syz [ 1316.685598][ T5939] usb 3-1: Manufacturer: syz [ 1316.698722][ T5939] usb 3-1: SerialNumber: syz [ 1316.718096][ T5939] usb 3-1: config 0 descriptor?? [ 1316.819274][T16441] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1316.859764][T16441] usb 7-1: device descriptor read/8, error -71 [ 1316.997838][ T5939] usb 6-1: USB disconnect, device number 79 [ 1317.010919][T16441] usb usb7-port1: unable to enumerate USB device [ 1318.361581][T22899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1318.397773][T22899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.415270][T22899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.613286][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805744f800: rx timeout, send abort [ 1318.624265][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805744f800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1318.657581][T22903] vivid-000: disconnect [ 1318.953694][T16457] usb 3-1: USB disconnect, device number 106 [ 1319.008414][T22898] vivid-000: reconnect [ 1319.533283][T22917] random: crng reseeded on system resumption [ 1320.159293][ T5939] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1320.502178][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 1320.523093][ T5939] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 1320.534732][ T5939] usb 3-1: config 2 has no interface number 0 [ 1320.553511][ T5939] usb 3-1: config 2 interface 31 has no altsetting 0 [ 1320.614609][ T5939] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1320.625813][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.669169][ T5939] usb 3-1: Product: syz [ 1320.673409][ T5939] usb 3-1: Manufacturer: syz [ 1320.705040][ T5939] usb 3-1: SerialNumber: syz [ 1320.782584][ T5939] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 1321.878987][T16441] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1322.043368][T16441] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1322.058073][T16441] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1322.162251][T16441] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.191788][T16441] usb 7-1: config 220 has no interface number 2 [ 1322.206119][T16441] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1322.245221][T16441] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1322.272179][T16441] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1322.289247][T16441] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1322.307879][T16441] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1322.320979][T16441] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.329506][T16441] usb 7-1: Product: syz [ 1322.333952][T16441] usb 7-1: Manufacturer: syz [ 1322.383535][T16441] usb 7-1: SerialNumber: syz [ 1322.644351][T22938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.655642][T22938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.020431][T22946] lo: entered promiscuous mode [ 1323.026133][T22946] tunl0: entered promiscuous mode [ 1323.115979][T22946] gre0: entered promiscuous mode [ 1323.209912][T22946] gretap0: entered promiscuous mode [ 1323.248855][T22946] erspan0: entered promiscuous mode [ 1323.352047][T22946] ip_vti0: entered promiscuous mode [ 1323.360625][T22946] ip6_vti0: entered promiscuous mode [ 1323.367286][T22946] sit0: entered promiscuous mode [ 1323.395128][T22946] ip6tnl0: entered promiscuous mode [ 1323.416940][T22946] ip6gre0: entered promiscuous mode [ 1323.424104][T22946] syz_tun: entered promiscuous mode [ 1323.452791][T22946] ip6gretap0: entered promiscuous mode [ 1323.460127][T22946] bridge0: entered promiscuous mode [ 1323.466160][T22946] vcan0: entered promiscuous mode [ 1323.472181][T22946] bond0: entered promiscuous mode [ 1323.477350][T22946] bond_slave_0: entered promiscuous mode [ 1323.483616][T22946] bond_slave_1: entered promiscuous mode [ 1323.491476][T22946] team0: entered promiscuous mode [ 1323.497073][T22946] team_slave_0: entered promiscuous mode [ 1323.504464][T22946] team_slave_1: entered promiscuous mode [ 1323.546759][T22946] dummy0: entered promiscuous mode [ 1323.575878][T22946] nlmon0: entered promiscuous mode [ 1323.598566][T22946] caif0: entered promiscuous mode [ 1323.605736][T22946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1324.558086][T16441] usb 7-1: selecting invalid altsetting 0 [ 1324.565218][T16441] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1324.601126][T16441] usb 7-1: No valid video chain found. [ 1324.651791][T16441] usb 7-1: selecting invalid altsetting 0 [ 1324.663052][T16444] usb 3-1: USB disconnect, device number 107 [ 1324.694670][T16441] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1324.756942][T16441] usb 7-1: USB disconnect, device number 56 [ 1324.895799][T22956] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1325.120636][T22960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1325.171520][T22964] batadv0: entered promiscuous mode [ 1325.180046][T22964] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1325.193151][T22964] hsr1: entered allmulticast mode [ 1325.198307][T22964] bond0: entered allmulticast mode [ 1325.204724][T22964] bond_slave_0: entered allmulticast mode [ 1325.212286][T22964] bond_slave_1: entered allmulticast mode [ 1325.219509][T22964] batadv0: entered allmulticast mode [ 1325.231363][T22964] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1327.393007][T22980] program syz.6.3759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1327.919171][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1327.919205][ T30] audit: type=1326 audit(1752692070.494:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.2.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d718e929 code=0x7ffc0000 [ 1327.964159][T22993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3760'. [ 1328.019226][T16444] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1328.027128][ T30] audit: type=1326 audit(1752692070.494:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.2.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f25d718e929 code=0x7ffc0000 [ 1328.277657][ T30] audit: type=1326 audit(1752692070.494:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.2.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d718e929 code=0x7ffc0000 [ 1328.305395][T16444] usb 6-1: Using ep0 maxpacket: 32 [ 1328.322148][T16444] usb 6-1: config 0 has an invalid interface number: 70 but max is 0 [ 1328.333386][T16444] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 1328.365884][T16444] usb 6-1: config 0 has no interface number 0 [ 1328.385414][ T30] audit: type=1326 audit(1752692070.494:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.2.3760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f25d718e929 code=0x7ffc0000 [ 1328.441026][T16444] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1328.466039][T16444] usb 6-1: New USB device strings: Mfr=6, Product=0, SerialNumber=3 [ 1328.535654][T16444] usb 6-1: Manufacturer: syz [ 1328.559223][T16444] usb 6-1: SerialNumber: syz [ 1328.580130][T16444] usb 6-1: config 0 descriptor?? [ 1328.868479][T23004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1328.917907][T16444] quatech2 6-1:0.70: Quatech 2nd gen USB to Serial Driver converter detected [ 1329.028781][T16444] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1329.052600][T16444] quatech2 6-1:0.70: probe with driver quatech2 failed with error -71 [ 1329.076293][T16444] usb 6-1: USB disconnect, device number 80 [ 1329.652294][T23021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.661994][T23021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.686399][T23019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1330.056057][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'. [ 1331.011564][T23033] ALSA: mixer_oss: invalid OSS volume '' [ 1332.603116][T23050] vivid-000: disconnect [ 1332.837445][T23042] pim6reg: entered allmulticast mode [ 1333.190836][T23038] pim6reg: left allmulticast mode [ 1333.233020][T23035] vivid-000: reconnect [ 1333.398941][ T5169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1333.410107][ T5169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1333.421466][ T5169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1333.449276][ T5169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1333.457166][ T5169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1333.659146][T23060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.668923][T23060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.804142][T23062] lo: left promiscuous mode [ 1333.812888][T23062] tunl0: left promiscuous mode [ 1333.819022][T23062] gre0: left promiscuous mode [ 1333.859270][T23062] gretap0: left promiscuous mode [ 1333.917941][T23062] erspan0: left promiscuous mode [ 1333.940804][T23062] ip_vti0: left promiscuous mode [ 1333.947643][T23062] ip6_vti0: left promiscuous mode [ 1333.966322][T23062] sit0: left promiscuous mode [ 1333.998626][T23062] ip6tnl0: left promiscuous mode [ 1334.018581][T23062] ip6gre0: left promiscuous mode [ 1334.050451][T23062] syz_tun: left promiscuous mode [ 1334.058299][T23062] ip6gretap0: left promiscuous mode [ 1334.103248][T23062] vcan0: left promiscuous mode [ 1334.119015][T23062] bond0: left promiscuous mode [ 1334.124966][T23062] bond_slave_0: left promiscuous mode [ 1334.133468][T23062] bond_slave_1: left promiscuous mode [ 1334.159880][T23062] team0: left promiscuous mode [ 1334.165304][T23062] C: left promiscuous mode [ 1334.175822][T23062] team_slave_1: left promiscuous mode [ 1334.203452][T23062] dummy0: left promiscuous mode [ 1334.227684][T23062] nlmon0: left promiscuous mode [ 1334.244268][T23062] caif0: left promiscuous mode [ 1334.287316][T23062] gretap1: left promiscuous mode [ 1334.295705][T23062] gre1: left promiscuous mode [ 1334.300894][T23062] gre1: left allmulticast mode [ 1334.327009][T23062] batman_adv: batadv0: Interface deactivated: macsec1 [ 1335.001931][T23056] chnl_net:caif_netlink_parms(): no params data found [ 1335.529433][ T5169] Bluetooth: hci3: command tx timeout [ 1335.725510][T16459] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1335.817048][T23056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.891117][T23056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.946432][T23056] bridge_slave_0: entered allmulticast mode [ 1335.968340][T23056] bridge_slave_0: entered promiscuous mode [ 1335.991159][T23056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.018795][T23056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.067879][T23056] bridge_slave_1: entered allmulticast mode [ 1336.122102][T23056] bridge_slave_1: entered promiscuous mode [ 1336.561686][T23056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.662986][T23056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.990592][T23056] team0: Port device team_slave_0 added [ 1337.056378][T23056] team0: Port device team_slave_1 added [ 1337.503457][T23056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.545077][T23056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.571005][ C1] vkms_vblank_simulate: vblank timer overrun [ 1337.638149][ T5169] Bluetooth: hci3: command tx timeout [ 1337.649964][T23056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.663834][T23056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.675516][T23056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.707462][T23056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.818464][T23056] hsr_slave_0: entered promiscuous mode [ 1337.835096][T23056] hsr_slave_1: entered promiscuous mode [ 1337.874225][T23056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1337.894517][T23094] netlink: 'syz.3.3784': attribute type 21 has an invalid length. [ 1337.906860][T23056] Cannot create hsr debugfs directory [ 1338.086842][T23111] lo: entered promiscuous mode [ 1338.113090][T23111] tunl0: entered promiscuous mode [ 1338.135739][T23111] gre0: entered promiscuous mode [ 1338.155250][T23111] gretap0: entered promiscuous mode [ 1338.215473][T23111] erspan0: entered promiscuous mode [ 1338.222967][T23111] ip_vti0: entered promiscuous mode [ 1338.232467][T23111] ip6_vti0: entered promiscuous mode [ 1338.240604][T23111] sit0: entered promiscuous mode [ 1338.311845][T23111] ip6tnl0: entered promiscuous mode [ 1338.346669][T23111] ip6gre0: entered promiscuous mode [ 1338.364273][T23111] syz_tun: entered promiscuous mode [ 1338.415010][T23111] ip6gretap0: entered promiscuous mode [ 1338.455421][T23111] bridge0: left promiscuous mode [ 1338.462272][T23111] bridge0: entered promiscuous mode [ 1338.574587][T23111] vcan0: entered promiscuous mode [ 1338.600888][T23111] bond0: entered promiscuous mode [ 1338.606725][T23111] bond_slave_0: entered promiscuous mode [ 1338.650197][T23111] bond_slave_1: entered promiscuous mode [ 1339.070010][T23111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.168019][T23111] team0: entered promiscuous mode [ 1339.178483][T23111] C: entered promiscuous mode [ 1339.201364][T23111] team_slave_1: entered promiscuous mode [ 1339.245616][T23111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.323165][T23111] dummy0: entered promiscuous mode [ 1339.339076][T23111] nlmon0: entered promiscuous mode [ 1339.353339][T23111] caif0: entered promiscuous mode [ 1339.362540][T23111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1339.514219][T23121] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1339.531600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1339.702360][ T5169] Bluetooth: hci3: command tx timeout [ 1339.970375][T23126] FAULT_INJECTION: forcing a failure. [ 1339.970375][T23126] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.983913][T23123] wireguard0: entered promiscuous mode [ 1339.995499][T23123] wireguard0: entered allmulticast mode [ 1340.014186][T23126] CPU: 1 UID: 0 PID: 23126 Comm: syz.3.3791 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1340.014215][T23126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1340.014229][T23126] Call Trace: [ 1340.014239][T23126] [ 1340.014247][T23126] dump_stack_lvl+0x189/0x250 [ 1340.014274][T23126] ? __pfx____ratelimit+0x10/0x10 [ 1340.014308][T23126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1340.014330][T23126] ? __pfx__printk+0x10/0x10 [ 1340.014360][T23126] ? __pfx___might_resched+0x10/0x10 [ 1340.014385][T23126] should_fail_ex+0x414/0x560 [ 1340.014432][T23126] should_failslab+0xa8/0x100 [ 1340.014461][T23126] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1340.014486][T23126] ? ep_ptable_queue_proc+0x5c/0x200 [ 1340.014513][T23126] ep_ptable_queue_proc+0x5c/0x200 [ 1340.014536][T23126] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1340.014559][T23126] mousedev_poll+0x9c/0x1b0 [ 1340.014585][T23126] ? __pfx_mousedev_poll+0x10/0x10 [ 1340.014607][T23126] ep_insert+0x1161/0x19e0 [ 1340.014640][T23126] ? __pfx_ep_insert+0x10/0x10 [ 1340.014680][T23126] ? __pfx___mutex_lock+0x10/0x10 [ 1340.014699][T23126] ? rcu_is_watching+0x15/0xb0 [ 1340.014727][T23126] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1340.014763][T23126] do_epoll_ctl+0x7f4/0xe90 [ 1340.014791][T23126] __x64_sys_epoll_ctl+0x163/0x1a0 [ 1340.014815][T23126] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1340.014835][T23126] ? rcu_is_watching+0x15/0xb0 [ 1340.014865][T23126] ? do_syscall_64+0xbe/0x3b0 [ 1340.014888][T23126] do_syscall_64+0xfa/0x3b0 [ 1340.014905][T23126] ? lockdep_hardirqs_on+0x9c/0x150 [ 1340.014932][T23126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.014950][T23126] ? clear_bhb_loop+0x60/0xb0 [ 1340.014972][T23126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.014992][T23126] RIP: 0033:0x7f2f7a98e929 [ 1340.015013][T23126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1340.015029][T23126] RSP: 002b:00007f2f7b84c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1340.015050][T23126] RAX: ffffffffffffffda RBX: 00007f2f7abb5fa0 RCX: 00007f2f7a98e929 [ 1340.015063][T23126] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1340.015074][T23126] RBP: 00007f2f7b84c090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.015086][T23126] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1340.015097][T23126] R13: 0000000000000000 R14: 00007f2f7abb5fa0 R15: 00007f2f7acdfa28 [ 1340.015124][T23126] [ 1340.081683][T23128] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3792'. [ 1340.087118][ C1] vkms_vblank_simulate: vblank timer overrun [ 1340.293113][T23129] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3792'. [ 1340.312858][T23129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3792'. [ 1340.369268][T23128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3792'. [ 1341.059565][T23140] netlink: 'syz.5.3795': attribute type 4 has an invalid length. [ 1341.080430][T23140] netlink: 'syz.5.3795': attribute type 2 has an invalid length. [ 1341.219025][T23139] binder: 23138:23139 ioctl c018620c 200000000380 returned -22 [ 1341.799473][ T5169] Bluetooth: hci3: command tx timeout [ 1342.179470][T16441] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1342.351153][T23056] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1342.393996][T23056] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1342.439388][T16441] usb 6-1: Using ep0 maxpacket: 32 [ 1342.470863][T23056] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1342.481956][T16441] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1342.499853][T16441] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1342.524613][T16441] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1342.557919][T23056] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1342.610712][T16441] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1342.671448][T16441] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.717191][T16441] usb 6-1: config 0 descriptor?? [ 1342.760854][T23148] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1342.822960][T16441] hub 6-1:0.0: USB hub found [ 1343.019317][T23162] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 67108897, id = 0 [ 1343.049379][T16441] hub 6-1:0.0: 2 ports detected [ 1343.253364][T23147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.262874][T23147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.330509][T23056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1343.477457][T23056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1343.563166][T14941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.570396][T14941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1343.627689][T14941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.634929][T14941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.697466][T23167] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3801'. [ 1343.972059][T23056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.093421][T16441] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 1344.107278][T16441] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 1344.132334][T16441] usbhid 6-1:0.0: can't add hid device: -32 [ 1344.139781][T16441] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1344.164174][T23056] veth0_vlan: entered promiscuous mode [ 1344.226133][T23056] veth1_vlan: entered promiscuous mode [ 1344.309017][T23056] veth0_macvtap: entered promiscuous mode [ 1344.323578][T23056] veth1_macvtap: entered promiscuous mode [ 1344.391624][T23056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.411913][T23056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.430755][T23056] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.439956][T23056] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.448947][T23056] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.460155][T23056] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.669387][T16441] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1344.711108][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.731659][T18676] usb 6-1: USB disconnect, device number 82 [ 1344.741799][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.819294][T16441] usb 3-1: Using ep0 maxpacket: 16 [ 1344.843603][T16441] usb 3-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 1344.902020][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.910575][T16441] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1344.917349][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.929828][T16441] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1344.946534][T16441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.956087][T16441] usb 3-1: Product: syz [ 1344.975612][T16441] usb 3-1: Manufacturer: syz [ 1344.982523][T16441] usb 3-1: SerialNumber: syz [ 1345.018936][T16441] usb 3-1: config 0 descriptor?? [ 1345.249041][ C1] raw-gadget.4 gadget.2: ignoring, device is not running [ 1345.257059][ C1] raw-gadget.4 gadget.2: ignoring, device is not running [ 1345.264592][ C1] raw-gadget.4 gadget.2: ignoring, device is not running [ 1345.272712][ C1] raw-gadget.4 gadget.2: ignoring, device is not running [ 1345.280836][ C1] raw-gadget.4 gadget.2: ignoring, device is not running [ 1345.290556][T16441] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1345.296815][T16441] gspca_stv06xx: st6422 sensor detected [ 1345.630870][T16441] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 1345.689018][T16441] usb 3-1: USB disconnect, device number 108 [ 1346.074706][T16457] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1346.123748][T23188] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3808'. [ 1346.240201][T16457] usb 6-1: Using ep0 maxpacket: 16 [ 1346.247225][T16457] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1346.269680][T16457] usb 6-1: config 0 has no interface number 0 [ 1346.285901][T16457] usb 6-1: too many endpoints for config 0 interface 31 altsetting 57: 181, using maximum allowed: 30 [ 1346.311062][T16457] usb 6-1: config 0 interface 31 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 181 [ 1346.389155][T16457] usb 6-1: config 0 interface 31 has no altsetting 0 [ 1346.431373][T16457] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1346.457850][T16457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.473049][T16457] usb 6-1: Product: syz [ 1346.477867][T16457] usb 6-1: Manufacturer: syz [ 1346.484450][T16457] usb 6-1: SerialNumber: syz [ 1346.520625][T16457] usb 6-1: config 0 descriptor?? [ 1346.763975][T16457] ftdi_sio 6-1:0.31: FTDI USB Serial Device converter detected [ 1346.774741][T16457] usb 6-1: Detected FT232H [ 1346.787144][T16457] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 1346.826855][T16457] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 1346.834648][T16457] ftdi_sio 6-1:0.31: GPIO initialisation failed: -71 [ 1346.864864][T16457] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1346.919552][T16457] usb 6-1: USB disconnect, device number 83 [ 1346.971100][T16457] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1347.033123][T16457] ftdi_sio 6-1:0.31: device disconnected [ 1347.058697][ T30] audit: type=1326 audit(1752692089.644:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23199 comm="syz.6.3811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde32f8e929 code=0x0 [ 1347.610860][T23210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3811'. [ 1348.357100][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3814'. [ 1349.703184][T23237] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3818'. [ 1349.937501][T23241] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3818'. [ 1350.869944][T23250] openvswitch: netlink: Flow key attribute not present in set flow. [ 1350.902039][T23250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.011972][T23250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.276051][T23260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1351.341290][T23261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.411505][T23260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1351.467739][T23261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.520180][T23260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1351.643345][T23261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.662392][T23260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1351.679645][T23261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.695087][T23261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.706597][T23261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.750471][T23261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.766229][T23260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1351.793578][T23261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.814823][T23260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1351.844806][T23261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.865536][T23260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1351.884005][T23261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.895776][T23260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1351.905346][T16441] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1351.924024][T23261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.939615][T23260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1351.956704][T23261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.970006][T23260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1352.069365][T16459] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 1352.073736][T16441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1352.109559][T16441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.120925][T16441] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1352.175187][T16441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.231267][T16441] usb 3-1: config 0 descriptor?? [ 1352.296311][T16459] usb 6-1: config 7 has an invalid interface number: 252 but max is 0 [ 1352.305431][T16459] usb 6-1: config 7 has no interface number 0 [ 1352.319368][T16459] usb 6-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 1352.339385][T16459] usb 6-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 1352.358185][T16459] usb 6-1: config 7 interface 252 has no altsetting 0 [ 1352.380349][T16459] usb 6-1: string descriptor 0 read error: -22 [ 1352.386781][T16459] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1352.411438][T16459] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.458516][T16459] idmouse 6-1:7.252: Unable to find bulk-in endpoint. [ 1352.589619][T16441] usbhid 3-1:0.0: can't add hid device: -71 [ 1352.621458][T16441] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1352.654462][T16459] usb 6-1: USB disconnect, device number 84 [ 1352.736108][T16441] usb 3-1: USB disconnect, device number 109 [ 1352.985958][T23288] random: crng reseeded on system resumption [ 1355.758953][T23313] ip6gretap1: entered allmulticast mode [ 1356.557157][T23323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.602554][T23323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.731779][ T5851] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1356.790100][T16441] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1356.891723][ T5851] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 1356.900269][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.927160][ T5851] usb 3-1: config 0 has no interface number 0 [ 1356.939603][T23330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.950408][ T5851] usb 3-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 1356.964282][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.992093][T23330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.012346][ T5851] usb 3-1: config 0 descriptor?? [ 1357.021582][T23330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.038901][ T5851] rndis_host 3-1:0.9: More than one union descriptor, skipping ... [ 1357.058308][ T5851] usb 3-1: bad CDC descriptors [ 1357.068698][ T5851] cdc_acm 3-1:0.9: More than one union descriptor, skipping ... [ 1357.091155][T23333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.164410][T23333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.483169][T23342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.501685][T23342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.638479][ T30] audit: type=1326 audit(1752692100.214:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23332 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a98e929 code=0x7fc00000 [ 1357.695623][ T30] audit: type=1326 audit(1752692100.214:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23332 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f2f7a98e929 code=0x7fc00000 [ 1357.805481][ T30] audit: type=1326 audit(1752692100.214:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23332 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a98e929 code=0x7fc00000 [ 1357.909718][ T30] audit: type=1326 audit(1752692100.214:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23332 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a98e929 code=0x7fc00000 [ 1357.968695][T23347] vivid-000: disconnect [ 1358.189420][ T30] audit: type=1326 audit(1752692100.214:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23332 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a98e929 code=0x7fc00000 [ 1358.298948][T23336] vivid-000: reconnect [ 1358.500742][ T30] audit: type=1326 audit(1752692100.214:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23332 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a98e929 code=0x7fc00000 [ 1358.597788][ T30] audit: type=1326 audit(1752692100.214:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23332 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a98e929 code=0x7fc00000 [ 1358.729594][ T30] audit: type=1326 audit(1752692100.214:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23332 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a98e929 code=0x7fc00000 [ 1358.779024][ T30] audit: type=1326 audit(1752692100.214:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23332 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a98e929 code=0x7fc00000 [ 1358.802054][ T30] audit: type=1326 audit(1752692100.214:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23332 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a98e929 code=0x7fc00000 [ 1359.339293][T23364] random: crng reseeded on system resumption [ 1359.788052][T16441] usb 3-1: USB disconnect, device number 110 [ 1360.159621][T23371] loop6: detected capacity change from 0 to 524287999 [ 1360.817362][ T5169] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 1361.019687][T16459] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1361.262180][T16459] usb 3-1: Using ep0 maxpacket: 32 [ 1361.279832][T16459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.311764][T16459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.359176][T16459] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1361.377118][T16459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.411983][T16459] usb 3-1: config 0 descriptor?? [ 1361.465370][T23398] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1361.697759][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.705868][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.916288][T16459] ft260 0003:0403:6030.0042: unknown main item tag 0x7 [ 1362.081171][T16459] ft260 0003:0403:6030.0042: chip code: 6424 8183 [ 1362.151022][T23403] __nla_validate_parse: 60 callbacks suppressed [ 1362.151042][T23403] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3857'. [ 1362.283606][T16459] ft260 0003:0403:6030.0042: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1362.300539][T23403] vlan2: entered promiscuous mode [ 1362.481425][T16459] ft260 0003:0403:6030.0042: failed to retrieve status: -32, no wakeup [ 1362.564966][T23409] sctp: [Deprecated]: syz.6.3858 (pid 23409) Use of int in maxseg socket option. [ 1362.564966][T23409] Use struct sctp_assoc_value instead [ 1362.707492][T16444] usb 3-1: USB disconnect, device number 111 [ 1363.523070][T23418] xt_hashlimit: max too large, truncated to 1048576 [ 1363.532301][T23418] xt_bpf: check failed: parse error [ 1365.659428][T23439] usb usb8: usbfs: process 23439 (syz.6.3867) did not claim interface 0 before use [ 1366.008069][T23446] netlink: 'syz.6.3869': attribute type 10 has an invalid length. [ 1366.062080][T23446] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1366.121591][T23446] team0: Port device virt_wifi0 added [ 1366.192760][T23458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3871'. [ 1366.459281][T16459] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1366.649293][T16459] usb 6-1: Using ep0 maxpacket: 32 [ 1366.704428][T16459] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1366.780465][T16459] usb 6-1: config 0 has no interface number 0 [ 1366.831404][T16459] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1366.872325][T16459] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1366.881665][T16459] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.897821][T16459] usb 6-1: Product: syz [ 1366.953510][T16459] usb 6-1: Manufacturer: syz [ 1366.960220][T16459] usb 6-1: SerialNumber: syz [ 1366.973110][T16459] usb 6-1: config 0 descriptor?? [ 1367.011245][T16459] smsc75xx v1.0.0 [ 1367.036551][T16459] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1367.078297][T16459] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1367.949252][T16459] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1368.111725][T16459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.123677][T16459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.133896][T16459] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1368.143948][T16459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.155231][T16459] usb 3-1: config 0 descriptor?? [ 1368.582625][T16459] cm6533_jd 0003:0D8C:0022.0043: unknown main item tag 0x0 [ 1368.605482][T16459] cm6533_jd 0003:0D8C:0022.0043: unknown main item tag 0x0 [ 1368.620931][T16459] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0043/input/input131 [ 1368.652365][T23495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.673222][T23495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.685567][T16459] cm6533_jd 0003:0D8C:0022.0043: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1368.778658][T16444] usb 3-1: USB disconnect, device number 112 [ 1368.837422][T23497] fido_id[23497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1369.088087][T16459] usb 6-1: USB disconnect, device number 86 [ 1369.527502][T23504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.589768][T23504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.655932][T23504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1369.671118][T23504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1369.856790][T23513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3885'. [ 1369.994993][T23515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3883'. [ 1371.004380][T23510] loop6: detected capacity change from 0 to 524288000 [ 1371.099631][T23510] support for the xor transformation has been removed. [ 1371.744280][T23523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.821643][T23523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.863607][T23523] fuse: Bad value for 'fd' [ 1371.970851][T16441] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1372.066926][T16444] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1372.291225][T16444] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1372.305142][T16444] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1372.318782][T16444] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1372.330534][T16444] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.358469][T23537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1372.386433][T16444] usb 7-1: config 0 descriptor?? [ 1372.626633][T16444] ath6kl: Failed to submit usb control message: -71 [ 1372.679686][T16444] ath6kl: unable to send the bmi data to the device: -71 [ 1372.734201][T16444] ath6kl: Unable to send get target info: -71 [ 1372.770520][T16444] ath6kl: Failed to init ath6kl core: -71 [ 1372.777670][T16444] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1372.991351][T16444] usb 7-1: USB disconnect, device number 57 [ 1374.016545][T20233] Bluetooth: hci1: command 0x0406 tx timeout [ 1374.598788][T23562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3897'. [ 1374.630543][T23562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3897'. [ 1374.929202][T16444] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1375.094349][T16444] usb 3-1: config 0 has an invalid interface number: 206 but max is 1 [ 1375.113294][T16444] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.156570][T16444] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1375.222010][T16444] usb 3-1: config 0 has no interface number 0 [ 1375.259026][T16444] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1375.328767][T16444] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1375.383429][T16444] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1375.446945][T16444] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0x8C has invalid maxpacket 255, setting to 64 [ 1375.497885][T16444] usb 3-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 1375.547011][T16444] usb 3-1: config 0 interface 206 has no altsetting 0 [ 1375.577652][T16444] usb 3-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 1375.606056][T16444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.659165][T16444] usb 3-1: Product: syz [ 1375.678957][T16444] usb 3-1: Manufacturer: syz [ 1375.723504][T16444] usb 3-1: SerialNumber: syz [ 1375.761684][T16444] usb 3-1: config 0 descriptor?? [ 1375.791130][T23562] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1375.809841][T23562] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1376.036445][T16444] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1376.802837][T16444] usb 3-1: USB disconnect, device number 114 [ 1377.082985][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1377.403523][T23593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3903'. [ 1377.499237][T16444] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1377.739326][T16444] usb 6-1: Using ep0 maxpacket: 32 [ 1377.747601][T16444] usb 6-1: config index 0 descriptor too short (expected 1060, got 36) [ 1377.807108][T16444] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 1377.881477][T16444] usb 6-1: config 0 has no interfaces? [ 1377.924474][T16444] usb 6-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1377.997211][T16444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.013075][T16444] usb 6-1: config 0 descriptor?? [ 1378.227387][T23587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.247877][T23587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.328427][T16444] usb 6-1: string descriptor 0 read error: -71 [ 1378.357950][T16444] usb 6-1: USB disconnect, device number 87 [ 1378.426928][T23600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.471144][T23600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.505705][T23600] loop7: detected capacity change from 0 to 16384 [ 1378.746877][T23601] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3907'. [ 1381.743339][T16451] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1381.899194][T16451] usb 6-1: Using ep0 maxpacket: 8 [ 1381.915224][T16451] usb 6-1: config 162 has an invalid descriptor of length 1, skipping remainder of the config [ 1381.944386][T23633] netlink: 'syz.2.3916': attribute type 27 has an invalid length. [ 1381.952529][T16451] usb 6-1: config 162 has 0 interfaces, different from the descriptor's value: 2 [ 1381.968077][T16451] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e [ 1381.997679][T16451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.028004][T16451] usb 6-1: Product: syz [ 1382.041423][T16451] usb 6-1: Manufacturer: syz [ 1382.055753][T16451] usb 6-1: SerialNumber: syz [ 1382.469572][T16457] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1382.632728][T16457] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1382.671935][T23623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.697603][T23623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.717276][T16457] usb 3-1: not running at top speed; connect to a high speed hub [ 1382.759488][T16457] usb 3-1: config 24 has an invalid interface number: 219 but max is 0 [ 1382.774985][T16451] usb 6-1: USB disconnect, device number 88 [ 1382.785877][T16457] usb 3-1: config 24 has no interface number 0 [ 1382.802808][T16457] usb 3-1: config 24 interface 219 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1382.832322][T16457] usb 3-1: config 24 interface 219 has no altsetting 0 [ 1382.925894][T16457] usb 3-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=2f.c7 [ 1382.955696][T16457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.986375][T16457] usb 3-1: Product: syz [ 1383.000499][T16457] usb 3-1: Manufacturer: syz [ 1383.015459][T16457] usb 3-1: SerialNumber: syz [ 1383.029730][T23633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1383.048303][T23637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.068857][T23637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.099602][T23637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3918'. [ 1383.184004][T23637] macvlan2: entered promiscuous mode [ 1383.253387][T23637] vlan0: entered promiscuous mode [ 1383.283747][T16457] usb 3-1: Could not find all expected endpoints [ 1383.336822][T16457] usb 3-1: USB disconnect, device number 115 [ 1384.333893][T23656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3921'. [ 1384.740981][T23662] loop2: detected capacity change from 0 to 7 [ 1384.766233][T23662] loop2: [ 1384.779221][T23662] loop2: partition table partially beyond EOD, truncated [ 1384.908619][T23661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.301805][T23666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3922'. [ 1385.343610][T23660] vivid-000: disconnect [ 1385.588236][T23640] vivid-000: reconnect [ 1388.048420][ T30] kauditd_printk_skb: 1094 callbacks suppressed [ 1388.048441][ T30] audit: type=1326 audit(1752692130.614:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23686 comm="syz.3.3928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f7a98e929 code=0x0 [ 1388.860100][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3928'. [ 1389.039384][T16441] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1389.192046][T16441] usb 7-1: Using ep0 maxpacket: 32 [ 1389.226660][T16441] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1389.269039][T16441] usb 7-1: config 244 has an invalid interface number: 68 but max is 0 [ 1389.560924][T16441] usb 7-1: config 244 has no interface number 0 [ 1389.590224][T16441] usb 7-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 1389.626863][T16441] usb 7-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1389.684147][T16441] usb 7-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1389.780091][T16441] usb 7-1: config 244 interface 68 has no altsetting 0 [ 1390.009668][T16441] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 1390.019701][T16441] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.028390][T16441] usb 7-1: Product: syz [ 1390.034547][T16441] usb 7-1: Manufacturer: syz [ 1390.039304][T16441] usb 7-1: SerialNumber: syz [ 1390.059047][T23699] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1390.350340][T16441] comedi comedi5: Endpoint has wrong direction [ 1390.469197][T16441] dt9812 7-1:244.68: driver 'dt9812' failed to auto-configure device. [ 1390.528382][T16441] usb 7-1: USB disconnect, device number 58 [ 1391.302717][T16441] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1391.540653][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3935'. [ 1391.602718][T16441] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1391.672887][T16441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1391.700047][T16441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1391.710658][T16441] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1391.733641][T16441] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1392.087538][T16441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.130317][T16441] usb 3-1: config 0 descriptor?? [ 1392.552716][T16441] plantronics 0003:047F:FFFF.0044: ignoring exceeding usage max [ 1392.659495][T16441] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1392.816580][T16441] usb 3-1: USB disconnect, device number 116 [ 1392.986336][T23732] fido_id[23732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1393.107751][T23735] vivid-000: disconnect [ 1393.355379][T23728] vivid-000: reconnect [ 1393.968328][T23740] netlink: 'syz.2.3937': attribute type 2 has an invalid length. [ 1394.124600][T23740] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3937'. [ 1394.619253][T16459] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1394.781122][T16459] usb 3-1: device descriptor read/64, error -71 [ 1395.181642][T23753] tipc: Enabling of bearer rejected, failed to enable media [ 1395.210000][T16459] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1395.930534][ T30] audit: type=1326 audit(1752692138.494:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23755 comm="syz.0.3941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd2538e929 code=0x0 [ 1396.119171][T16441] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1396.269218][T16459] usb 3-1: device descriptor read/64, error -71 [ 1396.326374][T16441] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 1396.335975][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3941'. [ 1396.349554][T16441] usb 6-1: config 2 has no interface number 0 [ 1396.355758][T16441] usb 6-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1396.390221][T16459] usb usb3-port1: attempt power cycle [ 1396.393968][T16441] usb 6-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 1396.492565][T16441] usb 6-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1396.758467][T16441] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1396.759380][T16459] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1396.775805][T16441] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.787210][T16441] usb 6-1: Product: syz [ 1396.815639][T16441] usb 6-1: Manufacturer: syz [ 1397.099537][T16441] usb 6-1: SerialNumber: syz [ 1398.039598][T23786] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 1398.226602][T16441] usb 6-1: can't set config #2, error -71 [ 1398.335282][T16441] usb 6-1: USB disconnect, device number 89 [ 1398.741827][T16459] usb 3-1: device descriptor read/8, error -71 [ 1399.237027][T23791] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3947'. [ 1399.268144][ T60] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1400.288026][T23809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3950'. [ 1400.975466][T23819] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3953'. [ 1401.383278][ T5851] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1401.590099][T23827] random: crng reseeded on system resumption [ 1401.778056][ T5851] usb 7-1: Using ep0 maxpacket: 32 [ 1401.857604][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.869250][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.879392][ T5851] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1401.900623][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.942118][ T5851] usb 7-1: config 0 descriptor?? [ 1401.965332][ T5851] hub 7-1:0.0: USB hub found [ 1402.581359][T23839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.597701][T23839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.272378][T23845] team_slave_0: left promiscuous mode [ 1403.356537][T23845] team0: Port device team_slave_0 removed [ 1403.369311][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1403.460418][T23845] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1404.468406][ T5851] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1404.498451][ T5851] usbhid 7-1:0.0: can't add hid device: -71 [ 1404.518131][ T5851] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1404.600646][T23859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.614313][ T5851] usb 7-1: USB disconnect, device number 59 [ 1404.636340][T23859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.831022][T16444] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1405.015487][T16444] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1405.041497][T23863] binder_alloc: 23857: binder_alloc_buf, no vma [ 1405.063822][T16444] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1405.102785][T16444] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1405.151454][T16444] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1405.186074][T16444] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1405.409789][T16444] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1405.478159][T16444] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1405.488631][T16444] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1405.502730][T16444] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1405.532716][T16444] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1405.623702][T16444] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1405.679247][T16444] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1405.749601][T16444] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1405.810608][T16444] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1405.894614][T16444] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1405.973049][T16444] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1406.006750][T16444] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1406.092897][T16444] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1406.184494][T16444] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1406.230164][T16444] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1406.277949][T16444] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1406.308440][T16444] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1406.327349][T16444] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1406.345946][T16444] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1406.418885][T16444] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1406.441416][T16444] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1406.454154][T16444] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1406.463954][T16444] usb 3-1: Product: syz [ 1406.475551][T16444] usb 3-1: Manufacturer: syz [ 1406.537205][T16444] usb 3-1: SerialNumber: syz [ 1406.590717][T16444] usb 3-1: config 0 descriptor?? [ 1406.617295][T16444] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1407.021713][T23858] netlink: 668 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1407.031023][T23858] netlink: 668 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1407.115734][T23882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.153414][T23882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.629590][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 1408.691325][ T5851] usb 3-1: USB disconnect, device number 121 [ 1408.700186][ T5851] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1409.657180][T23899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1409.833244][T23898] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3972'. [ 1410.569578][T23906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.610702][T23906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.661307][T23906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.737284][T23906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.898177][T23916] random: crng reseeded on system resumption [ 1410.969347][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1411.190051][T16459] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1411.285011][T16444] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1411.412824][T16459] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1411.422308][T16459] usb 7-1: not running at top speed; connect to a high speed hub [ 1411.448698][T16459] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 1411.467452][T16444] usb 6-1: Using ep0 maxpacket: 16 [ 1411.469143][T16459] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.477810][T16444] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1411.533980][T16459] usb 7-1: config 4 has no interface number 0 [ 1411.552041][T16459] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1411.561668][T16459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.573393][T16459] usb 7-1: Product: syz [ 1411.573391][T16444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.573418][T16444] usb 6-1: Product: syz [ 1411.589231][T16459] usb 7-1: Manufacturer: syz [ 1411.599271][T16459] usb 7-1: SerialNumber: syz [ 1411.666283][T16444] usb 6-1: Manufacturer: syz [ 1411.691149][T16444] usb 6-1: SerialNumber: syz [ 1411.728839][T16444] usb 6-1: config 0 descriptor?? [ 1411.785999][T16444] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 1411.851985][T16459] usb 7-1: Found UVC 0.02 device syz (04f2:b746) [ 1411.859364][T16459] usb 7-1: No streaming interface found for terminal 6. [ 1412.007929][T16459] usb 7-1: USB disconnect, device number 60 [ 1412.121486][T16444] usb 6-1: USB disconnect, device number 90 [ 1412.245591][T23932] delete_channel: no stack [ 1412.455991][T23936] binder: 23935:23936 ioctl c0306201 2000000003c0 returned -14 [ 1413.800256][T16441] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1413.918346][T23942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.926054][T23942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.993852][T16441] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.047008][T16441] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.073212][T16441] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1414.247232][T16441] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.340294][T16441] usb 7-1: config 0 descriptor?? [ 1414.410416][T23942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1414.553317][T23942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1414.719309][T16444] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1414.881318][T16444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.907245][T16444] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1414.950506][T16444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.992392][T16444] usb 3-1: config 0 descriptor?? [ 1415.028728][T16441] uclogic 0003:256C:006D.0045: failed retrieving Huion firmware version: -71 [ 1415.067545][T16441] uclogic 0003:256C:006D.0045: failed probing parameters: -71 [ 1415.117397][T16441] uclogic 0003:256C:006D.0045: probe with driver uclogic failed with error -71 [ 1415.197336][T16441] usb 7-1: USB disconnect, device number 61 [ 1415.220398][T16444] usbhid 3-1:0.0: can't add hid device: -71 [ 1415.250996][T16444] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1415.283484][T23955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1415.306443][T16444] usb 3-1: USB disconnect, device number 122 [ 1415.366654][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3984'. [ 1415.393856][T23942] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.448080][T23942] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.469425][T23942] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.479491][T23942] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.493896][T23942] vlan0: left promiscuous mode [ 1415.759585][T16444] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1415.907289][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3987'. [ 1415.919688][T16444] usb 3-1: Using ep0 maxpacket: 16 [ 1415.931510][T16444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.951327][T16444] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1415.962398][T16444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.980119][T16444] usb 3-1: config 0 descriptor?? [ 1416.179370][T16441] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1416.364389][T16441] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1416.404108][T16441] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1416.448595][T16444] mcp2221 0003:04D8:00DD.0046: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1416.466113][T16441] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1416.482677][T16441] usb 7-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1416.492589][T16441] usb 7-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1416.501021][T16441] usb 7-1: Manufacturer: syz [ 1416.518245][T16441] usb 7-1: config 0 descriptor?? [ 1416.533476][T16441] smsusb:smsusb_probe: board id=9, interface number 0 [ 1416.639921][T16441] smsusb:siano_media_device_register: media controller created [ 1416.710726][T16441] ------------[ cut here ]------------ [ 1416.716276][T16441] usb 7-1: BOGUS urb xfer, pipe 3 != type 1 [ 1416.765732][T16441] WARNING: CPU: 1 PID: 16441 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc82/0x1890 [ 1416.776138][T16441] Modules linked in: [ 1416.781100][T16441] CPU: 1 UID: 0 PID: 16441 Comm: kworker/1:1 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1416.793842][T16441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1416.794849][T23980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3990'. [ 1416.804447][T16441] Workqueue: usb_hub_wq hub_event [ 1416.818456][T16441] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 1416.824142][T16441] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 40 44 34 8c 4c 89 f6 4c 89 fa e8 0f d8 62 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 90 31 de 8e e8 a5 [ 1416.843834][T16441] RSP: 0018:ffffc90003b46ad0 EFLAGS: 00010246 [ 1416.850037][T16441] RAX: 1143e8a902043500 RBX: ffff88814d2f9800 RCX: 0000000000100000 [ 1416.858063][T16441] RDX: ffffc9001243c000 RSI: 0000000000025f89 RDI: 0000000000025f8a [ 1416.866207][T16441] RBP: 0000000000000000 R08: ffffc90003b467e7 R09: 1ffff92000768cfc [ 1416.874401][T16441] R10: dffffc0000000000 R11: fffff52000768cfd R12: ffffffff8c34422c [ 1416.882476][T16441] R13: dffffc0000000000 R14: ffffffff8c34ad20 R15: ffff88802872c6e0 [ 1416.891177][T16441] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 1416.900608][T16441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1416.907240][T16441] CR2: 000000110c240498 CR3: 000000005064c000 CR4: 00000000003526f0 [ 1416.915365][T16441] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 1416.923625][T16441] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1416.931694][T16441] Call Trace: [ 1416.935028][T16441] [ 1416.938012][T16441] smsusb_start_streaming+0x22/0x340 [ 1416.943409][T16441] smsusb_probe+0x18f6/0x2060 [ 1416.948189][T16441] ? __pfx_smsusb_probe+0x10/0x10 [ 1416.953299][T16441] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1416.958914][T16441] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1416.964900][T16441] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1416.971375][T16441] ? __pm_runtime_set_status+0x785/0xa50 [ 1416.977086][T16441] usb_probe_interface+0x641/0xbc0 [ 1416.982324][T16441] ? __pfx_usb_probe_interface+0x10/0x10 [ 1416.988430][T16441] really_probe+0x26a/0x9a0 [ 1416.993426][T16441] __driver_probe_device+0x18c/0x2f0 [ 1416.998786][T16441] driver_probe_device+0x4f/0x430 [ 1417.003996][T16441] __device_attach_driver+0x2ce/0x530 [ 1417.009457][T16441] bus_for_each_drv+0x251/0x2e0 [ 1417.014376][T16441] ? __pfx___device_attach_driver+0x10/0x10 [ 1417.020399][T16441] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1417.025863][T16441] __device_attach+0x2b8/0x400 [ 1417.030780][T16441] ? __pfx___device_attach+0x10/0x10 [ 1417.036143][T16441] ? do_raw_spin_unlock+0x122/0x240 [ 1417.041456][T16441] bus_probe_device+0x185/0x260 [ 1417.046371][T16441] device_add+0x7b6/0xb50 [ 1417.050830][T16441] usb_set_configuration+0x1a87/0x20e0 [ 1417.056386][T16441] usb_generic_driver_probe+0x8d/0x150 [ 1417.061988][T16441] usb_probe_device+0x1c4/0x390 [ 1417.066909][T16441] ? __pfx_usb_probe_device+0x10/0x10 [ 1417.072358][T16441] really_probe+0x26a/0x9a0 [ 1417.076938][T16441] __driver_probe_device+0x18c/0x2f0 [ 1417.082333][T16441] driver_probe_device+0x4f/0x430 [ 1417.087431][T16441] __device_attach_driver+0x2ce/0x530 [ 1417.093518][T16441] bus_for_each_drv+0x251/0x2e0 [ 1417.098424][T16441] ? __pfx___device_attach_driver+0x10/0x10 [ 1417.104935][T16441] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1417.110510][T16441] __device_attach+0x2b8/0x400 [ 1417.115356][T16441] ? __pfx___device_attach+0x10/0x10 [ 1417.120784][T16441] ? do_raw_spin_unlock+0x122/0x240 [ 1417.126415][T16441] bus_probe_device+0x185/0x260 [ 1417.131384][T16441] device_add+0x7b6/0xb50 [ 1417.135795][T16441] usb_new_device+0xa39/0x16c0 [ 1417.140671][T16441] ? __pfx_usb_new_device+0x10/0x10 [ 1417.145960][T16441] ? _raw_spin_unlock_irq+0x23/0x50 [ 1417.151259][T16441] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.156552][T16441] hub_event+0x2941/0x4a00 [ 1417.161153][T16441] ? __pfx_hub_event+0x10/0x10 [ 1417.165979][T16441] ? process_scheduled_works+0x9ef/0x17b0 [ 1417.171779][T16441] ? _raw_spin_unlock_irq+0x23/0x50 [ 1417.177045][T16441] ? process_scheduled_works+0x9ef/0x17b0 [ 1417.182910][T16441] ? process_scheduled_works+0x9ef/0x17b0 [ 1417.188709][T16441] process_scheduled_works+0xae1/0x17b0 [ 1417.194936][T16441] ? __pfx_process_scheduled_works+0x10/0x10 [ 1417.201475][T16441] worker_thread+0x8a0/0xda0 [ 1417.206173][T16441] kthread+0x70e/0x8a0 [ 1417.210508][T16441] ? __pfx_worker_thread+0x10/0x10 [ 1417.215713][T16441] ? __pfx_kthread+0x10/0x10 [ 1417.220470][T16441] ? _raw_spin_unlock_irq+0x23/0x50 [ 1417.225770][T16441] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.231092][T16441] ? __pfx_kthread+0x10/0x10 [ 1417.235761][T16441] ret_from_fork+0x3fc/0x770 [ 1417.240510][T16441] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.245692][T16441] ? __switch_to_asm+0x39/0x70 [ 1417.250538][T16441] ? __switch_to_asm+0x33/0x70 [ 1417.255365][T16441] ? __pfx_kthread+0x10/0x10 [ 1417.260065][T16441] ret_from_fork_asm+0x1a/0x30 [ 1417.264926][T16441] [ 1417.268008][T16441] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1417.275310][T16441] CPU: 1 UID: 0 PID: 16441 Comm: kworker/1:1 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1417.287488][T16441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1417.297622][T16441] Workqueue: usb_hub_wq hub_event [ 1417.302699][T16441] Call Trace: [ 1417.306008][T16441] [ 1417.308965][T16441] dump_stack_lvl+0x99/0x250 [ 1417.313609][T16441] ? __asan_memcpy+0x40/0x70 [ 1417.318238][T16441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1417.323484][T16441] ? __pfx__printk+0x10/0x10 [ 1417.328103][T16441] panic+0x2db/0x790 [ 1417.332043][T16441] ? __pfx_panic+0x10/0x10 [ 1417.336490][T16441] ? ret_from_fork_asm+0x1a/0x30 [ 1417.341476][T16441] __warn+0x31b/0x4b0 [ 1417.345489][T16441] ? usb_submit_urb+0xc82/0x1890 [ 1417.350469][T16441] ? usb_submit_urb+0xc82/0x1890 [ 1417.355449][T16441] report_bug+0x2be/0x4f0 [ 1417.359828][T16441] ? usb_submit_urb+0xc82/0x1890 [ 1417.364820][T16441] ? usb_submit_urb+0xc82/0x1890 [ 1417.369820][T16441] ? usb_submit_urb+0xc84/0x1890 [ 1417.374816][T16441] handle_bug+0x84/0x160 [ 1417.379099][T16441] exc_invalid_op+0x1a/0x50 [ 1417.383631][T16441] asm_exc_invalid_op+0x1a/0x20 [ 1417.388512][T16441] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 1417.394085][T16441] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 40 44 34 8c 4c 89 f6 4c 89 fa e8 0f d8 62 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 90 31 de 8e e8 a5 [ 1417.413716][T16441] RSP: 0018:ffffc90003b46ad0 EFLAGS: 00010246 [ 1417.419814][T16441] RAX: 1143e8a902043500 RBX: ffff88814d2f9800 RCX: 0000000000100000 [ 1417.427807][T16441] RDX: ffffc9001243c000 RSI: 0000000000025f89 RDI: 0000000000025f8a [ 1417.435813][T16441] RBP: 0000000000000000 R08: ffffc90003b467e7 R09: 1ffff92000768cfc [ 1417.443849][T16441] R10: dffffc0000000000 R11: fffff52000768cfd R12: ffffffff8c34422c [ 1417.451940][T16441] R13: dffffc0000000000 R14: ffffffff8c34ad20 R15: ffff88802872c6e0 [ 1417.459984][T16441] smsusb_start_streaming+0x22/0x340 [ 1417.465325][T16441] smsusb_probe+0x18f6/0x2060 [ 1417.470055][T16441] ? __pfx_smsusb_probe+0x10/0x10 [ 1417.475123][T16441] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1417.480703][T16441] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1417.486620][T16441] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1417.492989][T16441] ? __pm_runtime_set_status+0x785/0xa50 [ 1417.498678][T16441] usb_probe_interface+0x641/0xbc0 [ 1417.503831][T16441] ? __pfx_usb_probe_interface+0x10/0x10 [ 1417.509487][T16441] really_probe+0x26a/0x9a0 [ 1417.514035][T16441] __driver_probe_device+0x18c/0x2f0 [ 1417.519371][T16441] driver_probe_device+0x4f/0x430 [ 1417.524438][T16441] __device_attach_driver+0x2ce/0x530 [ 1417.529857][T16441] bus_for_each_drv+0x251/0x2e0 [ 1417.534739][T16441] ? __pfx___device_attach_driver+0x10/0x10 [ 1417.540669][T16441] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1417.546069][T16441] __device_attach+0x2b8/0x400 [ 1417.550852][T16441] ? __pfx___device_attach+0x10/0x10 [ 1417.556188][T16441] ? do_raw_spin_unlock+0x122/0x240 [ 1417.561442][T16441] bus_probe_device+0x185/0x260 [ 1417.566329][T16441] device_add+0x7b6/0xb50 [ 1417.570714][T16441] usb_set_configuration+0x1a87/0x20e0 [ 1417.576227][T16441] usb_generic_driver_probe+0x8d/0x150 [ 1417.581707][T16441] usb_probe_device+0x1c4/0x390 [ 1417.586580][T16441] ? __pfx_usb_probe_device+0x10/0x10 [ 1417.591990][T16441] really_probe+0x26a/0x9a0 [ 1417.596547][T16441] __driver_probe_device+0x18c/0x2f0 [ 1417.601872][T16441] driver_probe_device+0x4f/0x430 [ 1417.606920][T16441] __device_attach_driver+0x2ce/0x530 [ 1417.612328][T16441] bus_for_each_drv+0x251/0x2e0 [ 1417.617210][T16441] ? __pfx___device_attach_driver+0x10/0x10 [ 1417.623123][T16441] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1417.628538][T16441] __device_attach+0x2b8/0x400 [ 1417.633319][T16441] ? __pfx___device_attach+0x10/0x10 [ 1417.638638][T16441] ? do_raw_spin_unlock+0x122/0x240 [ 1417.643878][T16441] bus_probe_device+0x185/0x260 [ 1417.648744][T16441] device_add+0x7b6/0xb50 [ 1417.653106][T16441] usb_new_device+0xa39/0x16c0 [ 1417.657977][T16441] ? __pfx_usb_new_device+0x10/0x10 [ 1417.663214][T16441] ? _raw_spin_unlock_irq+0x23/0x50 [ 1417.668449][T16441] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.673684][T16441] hub_event+0x2941/0x4a00 [ 1417.678219][T16441] ? __pfx_hub_event+0x10/0x10 [ 1417.683021][T16441] ? process_scheduled_works+0x9ef/0x17b0 [ 1417.688818][T16441] ? _raw_spin_unlock_irq+0x23/0x50 [ 1417.694064][T16441] ? process_scheduled_works+0x9ef/0x17b0 [ 1417.699830][T16441] ? process_scheduled_works+0x9ef/0x17b0 [ 1417.705576][T16441] process_scheduled_works+0xae1/0x17b0 [ 1417.711184][T16441] ? __pfx_process_scheduled_works+0x10/0x10 [ 1417.717217][T16441] worker_thread+0x8a0/0xda0 [ 1417.721857][T16441] kthread+0x70e/0x8a0 [ 1417.725954][T16441] ? __pfx_worker_thread+0x10/0x10 [ 1417.731119][T16441] ? __pfx_kthread+0x10/0x10 [ 1417.735740][T16441] ? _raw_spin_unlock_irq+0x23/0x50 [ 1417.740994][T16441] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.746235][T16441] ? __pfx_kthread+0x10/0x10 [ 1417.750872][T16441] ret_from_fork+0x3fc/0x770 [ 1417.755498][T16441] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.760675][T16441] ? __switch_to_asm+0x39/0x70 [ 1417.765478][T16441] ? __switch_to_asm+0x33/0x70 [ 1417.770281][T16441] ? __pfx_kthread+0x10/0x10 [ 1417.774925][T16441] ret_from_fork_asm+0x1a/0x30 [ 1417.779727][T16441] [ 1417.783163][T16441] Kernel Offset: disabled [ 1417.787508][T16441] Rebooting in 86400 seconds..