last executing test programs: 6.735532202s ago: executing program 3 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="401201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xc8, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x9, 0xf0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffc, 0x9}, [@feature_unit={0x13, 0x24, 0x6, 0x1, 0x4, 0x6, [0x7, 0x8, 0xa, 0x4, 0x6, 0x5], 0x6b}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x1, 0x6}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x1}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x3, 0x3, "3304"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x7, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x3, 0x5, 0x3}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x10, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5a, 0x2, 0x7f, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0xbc, 0x3, {0x7, 0x25, 0x1, 0x1, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x4, 0x1002}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x9, '\f'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xeb, 0x6, 0x3, {0x7, 0x25, 0x1, 0x80, 0x9e, 0x3}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x3, 0x20, 0x1e, 0x780d146339913aa4, 0xb}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "8e7335d15a6905fdddf9407461a2024b"}]}, 0x4, [{0x83, &(0x7f0000000500)=@string={0x83, 0x3, "4ee4725fdc4ed112a28b307eb00631c2443f67bbdaac6df4550ff90d7ad991c254bc2fe8a503ab5fcfa94237edc38ca986d8fb4f22035c5674285fcea88a1813ee467fabbe6ae2b43323d54bf55396c35714fe93711d3c51945f625e87ee01dcf3527ff6987ca699d868e5faa731c4d4fd09713754c4b1b92e063255dab7f8deff"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x801}}, {0x31, &(0x7f00000005c0)=@string={0x31, 0x3, "5dbb7bf0d4b27ccd1eb064b5277e1d4dca5dc6d56076380bfc16c0d134d9021d88b13938900a83a9f244e9b682ca28"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1c0a}}]}) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4000804) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x18, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0x6e, 0x2, 0x7, 0x1, 0x3, 0xb0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2c, 0xfa, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x8, 0xb2}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x9, 0x8, 0x9, 0x0, 0x3}, 0x26, &(0x7f0000000740)={0x5, 0xf, 0x26, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x5, 0xf00, 0x1114, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x8, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0x1, 0x3}]}, 0x2, [{0xe, &(0x7f0000000780)=@string={0xe, 0x3, "22e976074ecafc8388b0ea31"}}, {0x27, &(0x7f00000007c0)=@string={0x27, 0x3, "205e31754d4a6b0034cdc524af98d05976e2abd7bd3c88209b7f81bd3f4a4312bea97d1dcd"}}]}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x18, 0x3b, 0x301, 0x70bd29, 0x25dfdbf7, {0x7}, [@typed={0x4, 0x11a, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) 5.679414518s ago: executing program 1 (id=648): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012002daf08d08981490a00f480102030109021b00010755e00109043a03024ed82c5c09050efd"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 4.143560983s ago: executing program 1 (id=656): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x141182) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201"], 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000800250000000005000000", 0x29}], 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x8a, 0x76, 0x88, 0x40, 0x1776, 0x501c, 0xf10d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x10, 0x4, [{{0x9, 0x4, 0xee, 0x1, 0x0, 0x5e, 0x10, 0x4e, 0x5}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x141182) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201"], 0x0) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000800250000000005000000", 0x29}], 0x1) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x8a, 0x76, 0x88, 0x40, 0x1776, 0x501c, 0xf10d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x10, 0x4, [{{0x9, 0x4, 0xee, 0x1, 0x0, 0x5e, 0x10, 0x4e, 0x5}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x1) (async) 4.072278501s ago: executing program 3 (id=658): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) (rerun: 32) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') read$FUSE(r0, &(0x7f0000003940)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000080c0)={0x2020}, 0x2020) (async, rerun: 32) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x8, 0xffff, &(0x7f0000000000)="0cbc03ec62a76191a479e1a1c2dd9de0c2807843cd1ad4007d9e04a387b80fb78e165763450cdd95c3b41af7091462f660058bbfc88d12395c7772e260f7d1d20ccdc31f0ec1b7f74a2ad321e7faa71c9f9108681f507e7ec07813cb706234f71a3bf75725382947f6287b6683820c3c3ba1ddc90f91b6530dacf0c0588097d622029498046bca7046b4fadea26e7af279ba71057b1f69690082c8a777a92cd39377c64cfcbf4ae5366e8a1c2f4d868dd59a97bdc1bcab21661044eb8c6048d523b73829072b0711763352c617ab5c2209a84f8beaa8afbe4fed9bfc1c92d2345485d523a8f1ff43"}) (rerun: 32) 3.923918051s ago: executing program 3 (id=659): syz_usb_connect(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x8c, 0xf8, 0x2d, 0x20, 0x1410, 0xa005, 0x37bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x81, 0x81, 0x90, 0x4, [{{0x9, 0x4, 0x3, 0x80, 0x2, 0xdd, 0x49, 0x97, 0x6, [], [{{0x9, 0x5, 0xf, 0x0, 0x400, 0x2, 0x8, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x3f7, 0x2, 0x5, 0x2}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xbe, &(0x7f00000000c0)=@string={0xbe, 0x3, "561a117338aad0cfe84925a1be0ed79c9dc171e8ac9975eda3c954b900c0ec9a7777c465bf1a4f8972d431402541e330ccbf7a11cfec37734398aa870bfbaf3f564e05677cc53892642502c57ffd01ecb2484113f651328da24d6520b0b3695bce6eaa2a7d90c953f014ac5b15753e004d5c9194ca0a89eedc3f955d6a90ee563c7888167d6b1c0e6a535036034eb93ff3ca16990e9473a1618f58b1e184515dad5c99ae4829d2e22041bd3f488fe022a95e662882de0378fc9e81bd"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x1c07}}, {0xbb, &(0x7f0000000180)=@string={0xbb, 0x3, "8d685b4c127de482eae606627fa543266af89845448f5ad5a18f19a77c6f21a96ce706ead277c3c621c2376bc3bc988a5b824d37a61902a71606f6fd4967fa581c0d2dbc07025d7379e00c8df5b4eef702d70f78fab943b5a34c2be77654f826537f6345e72bc21891bb781a95005d08f303a6917e86c09b40faad9cf0f47cac948ba5d74782d2f7db694eed34b6b9ea6dc9b9d31272e8902e3766bcc47cf4d13529153367161bbca26e422f1a310a8f7215209221e844b82f"}}]}) 3.388315956s ago: executing program 1 (id=661): unshare(0x20020000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000008c0)=[{0x16}]}) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc9) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000080)) 3.386517903s ago: executing program 3 (id=662): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008ef"], 0x178}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x40, 0x14, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0x95, 0x0, 0x1, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x40}}, 0x20000000) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c64030005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.27968987s ago: executing program 3 (id=663): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff8000/0x7000)=nil, 0x7000, &(0x7f0000000040)='[W\x9fDm\xd3-\x9b\x19\x10\x01\xd8\xb3\"\x98\v\x01\x00\x15\x00\xd2\xa2\x00\x00\x00\x00\x00\x00\x00\x00') r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201bee276f086d74562057a0000010203010902040001000000000904000000ff054900"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x800000, 0x10}}) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x101, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRES64=r1], 0x20}}, 0x24048851) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r6 = userfaultfd(0x1803) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000200)={&(0x7f000049b000/0x3000)=nil, &(0x7f000059e000/0x2000)=nil, 0x3000, 0x7}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf250a00000004000280180001801400020076657468305f746f5f7465616d00000014000280080002001500000a0400010004000100"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="4017110000000a"], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.262935036s ago: executing program 2 (id=664): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r3 = dup(r2) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x9}}, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.732867892s ago: executing program 3 (id=665): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000f112bd2d87c200000000000109022400010000d0010904000002030001000921000008012207000905810300002600fc"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221c"], 0x0}, 0x0) 2.419770667s ago: executing program 1 (id=666): syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e01020301090212"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf", 0x3f}, {&(0x7f0000001400)}], 0x2}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.415753038s ago: executing program 2 (id=667): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000500)={0xa, @raw_data="3aee44a9c226a51c91d96d057945493d62731d82b7b243ac2b8c09e616fac25ae19d22dde9f23f852c3c3ccc3a9bd805898c9b2332eefd90a8a3ec23a13d253cf99691b813d8bfe75bfd83c66b56546b67a6d49ef1aa41cd5fb1faa24fd3f04c0551ed1ce90da7f3c55d1722a954283520a13b98bbbda5d490614b0b944b44d09086680a995a0ef055c7b45c50f7096e53c69a5af5d8af27a799d80635b87bb98d78c265cc91f11d80f3215cb8e27902ded8695717e1bc25acbcb5f28d2e5cddcd7b000000009cae"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xeeee0000, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x1, 0x4, 0x0, 0x4, 0x9, 0x14}, {0xcccff001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0xdddd0000, 0x0, 0x11, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0xeeee0000, 0x8, 0x3, 0xc, 0x0, 0x2, 0x0, 0x7, 0x10, 0x80}, {0xdddd1000, 0x100000, 0xa, 0x6, 0x0, 0x0, 0x2, 0x4, 0x10}, {0x8080000, 0x3000, 0x0, 0x1, 0x7f, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xfd}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x1, 0x70, 0x0, 0x0, 0x5000, [0xfffffffffffefff9, 0x0, 0x1, 0xfffefffffffffffc]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.484727417s ago: executing program 2 (id=668): add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffe4e, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x0, 0x140043}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f5101007f51010049f4e34e86f469eb"}, @NFTA_MATCH_NAME={0xb, 0x1, 'ipcomp\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0xda, 0xad5a55f, 0x80000001, 0x1000000, 0x3, 0xfc01}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x12c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x118, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x26, 0x1, 'system_u:object_r:dhcpd_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x26, 0x1, 'system_u:object_r:policy_src_t:s0\x00'}, @NFTA_SECMARK_CTX={0x24, 0x1, 'system_u:object_r:hald_log_t:s0\x00'}, @NFTA_SECMARK_CTX={0x28, 0x1, 'system_u:object_r:clock_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x28, 0x1, 'system_u:object_r:power_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x26, 0x1, 'system_u:object_r:auditd_etc_t:s0\x00'}, @NFTA_SECMARK_CTX={0x28, 0x1, 'system_u:object_r:nvram_device_t:s0\x00'}]}}, @NFT_MSG_NEWSET={0x268, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0x34, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0x1ec, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9d}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x88, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3a7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x96c6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb59b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b63}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffbff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x67f32c7a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x25}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1e2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x21f8, 0xe, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x21c4, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x94, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5a8}]}, {0x270, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6875}, @NFTA_SET_ELEM_USERDATA={0xc5, 0x6, 0x1, 0x0, "761186d5284ff9babb28d00aa73ccfd2a742c06e2a4ed46239e67441233a616cd80e2fe101e157fb69842418a7f1b636f9839cfb62c54a04daf66e12104d95321fb98148a313ab01b494120d414382957902bfb5d66a3043dfbce34c73cb50cab87d9254f56873a23a29568704b4bf0bedf998483a0a79ba98563ae15af47851864069daab758aedc51c4a8b4b40e24c0e61f54ac3a529b38f99c11de4c5b347973337191901860eb24830f27d73a23d0b3da4e3129fe21752cbf3f7d4da127c62"}, @NFTA_SET_ELEM_DATA={0x180, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "46e0f4201db8de9a9d3457399871b6481fc7ff4992340a40702f1d1821f34f6a1b9e459f49b504e07e2880ff2d6238d21b6a752ac8fc1af749840ed5c560d9b1dd3051d95c20f634fe0696612af16c7305709278a7c47ee339ffa0b799a4330838591755129b421c7d4748e5000c58174c742864a2f0adcffa8e936cea7d0e89a95e44b70233557503dc7cba41a6840a4c5e42e26384d0edc8cf0b972dd3d9bc3b42f90296cf0384180a83ad4a6e2e3af54cce9ac85bc73dd1c6cc75f1623a467af5c9"}, @NFTA_DATA_VALUE={0x57, 0x1, "6ec14bd5ad55e4299abee206e26444bea2807283c2f0b6114c6b481cf285a250b9100f895e68241e235bf2f50826d8c3bd528489f53ad2bc7f144f36d79f57ba9998fe7cbe57207a052528941a75bca92641f5"}]}]}, {0xdf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x154, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xc7, 0x1, "784bf870fa180288da125a21f1205240c19afc0a33e14743866dfadd8e5c4fc26405792956dab15ccf113e9efac414b6c6debdc77c26b7caad41c4f1fb110b16673b19366996aca0a160efd6b642529be9708b29edf488c568a0a3b97fb02e432aa7e8caad34090a16e9bdfec43bfd0d0b13194c94c7b0aaac1b7f637e9d913acd97ee6b09723eae6f91886209791b348d9508a442165f930ba8276a6ab3c087e3d07526119633a99dfa0d8cb7fa63451ee481882f95f3dd80c06538360987ea496585"}, @NFTA_DATA_VALUE={0x84, 0x1, "ab8d832c9c7461c3076e91d72079a4b6b5265f9c729d6974c77e3a6d647b3fdcefd3474a95fc695975ccca8f060b872a0660b81f4256b4bac6a26e84b50a4484f4c895a172f007d4535b3872be20643084be15e05f16b2124ae582351d58702f4a6ecd6552a330b684223208f078e6b408aaaf5442e4dbb61070f2d1bd96e6e7"}]}, @NFTA_SET_ELEM_KEY_END={0x360, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd2, 0x1, "3a4915d420a18d510f895dbd1014388744e43e0dd43e650493308d5e94040408c1e13310a17714af6a37416d9f84bbddcb7701b04b63b5249686d5eb5222a98aad25ef86f6549294ba21c68f5df238f8521111ed277892a579f45c1fcc9ad2a87c87990f25583bb311c147c288004806581c5ec3e917ed3811f344cae34cfb544d2719426f2df5fcb16691c1305dcfc95815f13f712ca68999e3ed9333254e26a9fab7ea0128c5819c2fbf96273c7baf2fd4c5ae089d8922a8d554a32003e294f42705c354947e26fdc6901362c6"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x49, 0x1, "79807b2d3a563169797cd980e53e5528a5f554767ee73dd1f0e67bc37f7261c91f570d1e6c688c27c47ace1cf461e3f2f2640e2e5ae3723e0221df150e737eed074c5d4b38"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "54e40eb57c7b0074de7ba9c4ab4522b2456e6dd5c02c2fbf9d08a54d85952c13856fe217aac27228541bd0582084d8ef3793dd14aa27ed1c8f5c469cef219dccb5e1dd7411c221ef261f22a9a844b34cc5a488612bb3b7deff3f23eab1f06176ee6e446e21582e5dfdf9508de83d07a20274a591a3de8814db693d8f5389c1fd560ee89c82470414a8768741364b5b58f20acb8f6951585aa317bc4f1df59b69297556"}, @NFTA_DATA_VALUE={0xfd, 0x1, "42aa3a935c362de63274383ad235c9cdc4387060092be7abb8f4cfc541e306cc8ccabc2661109633260d92c138307d6ed7927f1854d0b9126f948e12f2ab8e80350a5b662ab612ccdc668c49203c5cf8118f315424f1a6d0757a3d10069978376b3651c8e856ecc9ac20c1c73ec2c2fddfc3b01cc8a4e69b5d5ca6e7b471f9a3ea04fa9bacaf6e83b365dec811533358b1ea9ab135761761633a67ad8d14804fb5ab6d45e9d888cddea65e104082b717639ad2d87d096155622eaa0901075aff0221b8ded9f525ca82ec6a6ce8e842bfc342b5ec34bee559b88159e156fa1edc3deafab1e062b20683d515c10814ad6a878fc4e9fbe5fa809b"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x8, 0x1, 'cpu\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xb4, 0x6, 0x1, 0x0, "6356ddec5ce12eb41f2ffb6b349aa88b92b83d213febd0b72f4e7a06e5ac0321b1d60d15999e2d9f7f258fafc505d8c77c8ae2835a74a209c1278237437b42645495ac738a91b4fd7b69de73fff9fa4ca307f8e5e4f7010b2a218d2d6cdc9423da11b56032c1274617fa2f4ed0c338efd738c1a563a450a74e0aec7b94ac99962dde103d5d901b633ac524f67937cc2c81ce728a7b22d9d91b4fad1794e3f8e6d8e2f83bcc8d3038089c48ab9f08fc42"}, @NFTA_SET_ELEM_EXPRESSIONS={0x568, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x47c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x46c, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x238, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x71, 0x1, "5e9bca4e861b3fc01e05bff401e95b5b2601882b5f262279b3edd77a6deb42819820aab095518ebe4b17a624286a6ecd76bf0aae0aa8f7193fe4ad2df33ec559e1537cec2b1d46f34fdfa11f5993eab9271862b964d0093477394e14a9078c8491f2a58419c308216d0fafe979"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "b49e7aba954fc23f268f1ec3f3d77af63b4209275a9a109e675f08b512fe9d0dceb30543f602709832b7e7d0dc2d8fd06f94ddff7c7608ff4348c8d6250fcce91c13d5f0cd528cb5a8591b16904df00bd460d85f45e22965db"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "a8d9023a706196dd1ded4185933a2b7bef3b7921f9119a17014b2ae5692f4890b9529cbf690f450680191d480ff6a1e189ce8ac3e49e579f4910cc4e47814dc825bf33011c586be2627d4f86b3cde3381cd844499205cac3905fbf1b21d278176d86f302ddae4f3170b26d516d95f16a9e6ba6d084f4e6aa85cc8dd832716012d635bceb705ee0f854f49cfaa245a6367824dc7e54004281b37a33ba4032b940502143568a5e1d1addbbccd1c6ae7603e560ce6145bd8a3e049b6515e8d905f2bc57c13c6a06c2bb10b9d4991ba6828dfb1b8804b64894a46357cdaf8e82746ac4a8e2d404ba38bb5780afb69514bfa3360295"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_FROM_DATA={0x98, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d124"}, @NFTA_DATA_VALUE={0x8a, 0x1, "ef7167da73bc2e0b34ca8d95aba0efc968c566773ac4384f42cfd6df971d025ba043824a701f610f7ca3a14a68a3644fb7bfe649c38cad3ff97da0d23b2b746afb00b6fd39a0ec5ed904020d2ee4d8418b2e4fc3fd6db400d340829a0ec9c318ebb8fc1ab3e641a3083085ec9f986fb38840493f8aff646fad0ec2e785f1a93ba6d84c244965"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x188, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "8002e3cb4e030a253a4ea7fbd0f4e5c1baee90fbc2440bbc32e5b00dfbcb6560d271682bcdb4d42d036b2d86bbc8ccae43cd79a81cc4e73f326a80753ca230032af32597f33fad4668413e9e1d170de29355"}, @NFTA_DATA_VALUE={0xce, 0x1, "d1a1d40f632e2fbaa43c1c31732dda5a41f7e43e26a911024e9b98d6711e7c5d148034c390d003fc011c1a4a54f90be0f91356830f2411af87b1ff4473d40849f839f578a5dff4487fd31834fb2027ded7f3d10cadc99d8694abe4a91fb4bc5ea4d9b937aa02833cf6f14492c11f03bd7b6ac8e5f67f4e17d58bad8077f90ba9a40a98da1df586a98849a335af8f1095120fd4036e9ebb0ef61e8f36cd73f704cb977f2666bd5edf45ef3a802c82a0e383ec8a71a05c8022e3dfc2feec207c2193c141a9d97f4317316d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x29, 0x1, "f8ed96898595287c3427c04f2239e5c58da2af3270355520b96ebf40a2321a4d33cc1799b9"}]}]}}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd9}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x27c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x67, 0x1, "e29eb184b24ee84b6ad44208e97ddda1d2da4c6bee5005fa354b724576975c956004dff47ee75dd5ce256e5c7133b43db466dc5d13e1d15ab1cb672bde69c9affcd57e6e605c168e9139dee704fffced61f80f29bbd76f82c15d9135c265c8020174b4"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xd2, 0x1, "f660a3382cfefb1fc4f1cce1346478e35be9b633bcb6ad12119052aeafc84c021023d2a6fc7e0efcfc5031a2d21e33379d8c5791093c255e690911f22d32edb310636e34a930c5104b98bf4ecf1e13965b921eeb673159e3cc19f10b676ac626507cdf884a263892a6b96f1c80391f1cda9fba6fc6be8f9c70e16f87edbbc9332e5059f44f43c2dbc05d361caf28d3d9597b55d262aee2cdb6942608d74cb0a10d9355e575a529f6f0f033025962a194228e68a6d2da5c42c28c696585d11e2a2677849ec8d3f7719e354fce5562"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x524, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xd7, 0x6, 0x1, 0x0, "af6efada0b26a921cd4456d5fc32d1e3914cb2efe2e9f5d64704caf2933a791c806293b206bc0c57b2a5fb07db06f6338099d4e81ceeae98e7f77cb9d91e9e77efc154cfaf8c17bee7abce7cd0f5f8b07021dd7a054734783adb09c0355ce95d2e4242ed9988271052d4d917fac444ff6c0003df25e8e88312b1b9151ac86ae48b4e003940323701466ebaf5d939d1decdb3d35976c503ce014b4a3f9353c2e3846c89c302cda9ae2d292eda4368d29d3ac343f03f68db659c75b744ab833be63c10fe27a72b2527cd95679796a7b3dbb893be"}, @NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "0bfe7ecfc4237371fc4932b9aa9a82f66dce7461"}, @NFTA_DATA_VALUE={0x89, 0x1, "e8c8677333437af6dd8a1ba8c9d4bcb76da0fe09144060143dc01aa7a13bdc0e709f8d7cb6fb8992b2e0e4f4229f619faa35f8e66bd671ee12497519d193368525ef43f53ffc8d11172b559c8aabc7164edb62a94a65b0620ae4afc28780a29fcda0ae1a79c9bae4024edc7d8913e8e26f0d5bc8b7bb920a5c947b04e7b15f6ed3a843eaf1"}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}, @NFTA_SET_ELEM_DATA={0x12c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xec, 0x1, "851ce96905115ac2c38d57871c9f9562dadc30c375a5db95a12fb4397db8d374a08c1c656e3ed1bb92d5ad1dc41460c72ca8761186068b13fa550c7e7bac847160cc7c0ac00f30738655ffa1325ec4932ce18192fb1a62bb036d989690f6d74f19a946f380ee5b8c6788714640c81f55cb8f3c83a7e10bd50d6c0412b26f3b66a750e50abcc60644945982b5176bd4f84493b51c2deae5b045f797f9441d928ba3cf18d69057b1dad0bb5b803d4994854a3da5d1968ac9e6d686beec2a831d16de447745618fffd132a5745dec941dbd618cc949ef6df2704fc6edb6e5df292f79f6d1d746555f93"}, @NFTA_DATA_VALUE={0x19, 0x1, "dd9799b71b7a2b5be9e6f96a4fd4ecd47a44368b78"}, @NFTA_DATA_VALUE={0x1f, 0x1, "e3cd02d47a07f8b834a90028ecbc293e948350388dc072dddf2365"}]}, @NFTA_SET_ELEM_KEY={0xf0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "51905e9499b74528141e766207fb84aba1feb40b077deb69608fd07f001298eca3a68560fc66acfa97c15b79146360121c76f0a2ae178a66aaf043e37b8b62460bf718e84457c21ab8f040f8ee80398d4e7c0a32895c6ddb2a003590cffe9248e3d9ef22fa5ff9bc437567be68910488ec01d2812adaa7489f2fbccdd589f99acf256d390abe0c61cd644907d24df2d295b117446aa4403246e335789435599970fd68d66c24"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_USERDATA={0x44, 0x6, 0x1, 0x0, "b19601879a580249af436686e42396d22cb516d45abf4f30c004673c785f3320199b93ac75d10dbd8860b2a1f2b145edd28d7f84ed7332417947fbc1f38d71a9"}, @NFTA_SET_ELEM_USERDATA={0x98, 0x6, 0x1, 0x0, "04c566c94079c1e8ac6f1563ec741c661c2a3c9207dcafd03e144c8903ec2f81e52e736aaa5f13c8b5574442b80abc1c7e1e7358511826366bed7d5fe0060a583c1962fde3c3dacb329455632a73ca75d40984b5636755d9055e95b7aaadcfe082c0dcb74230b9e57085ed2b5488d753cd4e44e0cb7865df16b84239f443b7a06ede4aae3899b4fcfaa04c8c79ed4e8c2a53bb1d"}]}, {0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x188, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_DATA={0x174, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "20fcc9eb114f715f80f03c11a507fa8368a6d804387cc743bfc2d2f83ab8896299ea8cca9fded55cc63eaf24b3b5d9ad5af999267c31ee919a7b705c39295030211ce674e987b200d3e0297d5393683ed07bfe7f4b3971d31b9ad7a5881e255c0089546f7a28edd311cc785ddb8fad97c59e7456b31f75aa6b3366c246569ca8ed5cde3e1c68004c419b0a58b256bab78dbdafba2272de02e9bbcdcebe045595937141dd244b9a00b79544775708742b6cce3fd55005e2ff1ac842a534e99a46128967037ebcd8be49befb5759e211ef7ce6d87266f1945c3cdc95f81398ac0dd8e05aa06269a49f8c0984ca0d"}, @NFTA_DATA_VALUE={0x1f, 0x1, "609692616c34377a1363780e60cb67c6a0a4c4e2f94709eef69a82"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x74a}]}, {0x5d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x70, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe6}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xd4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc5, 0x1, "8cbc6d564e16743cb531915f23c3ecae39bcf6595fdc6295259fabc2d421a9726eb710318760fea2a94ce52b0d554504e98095bae0cf0f96b04e623d4475df2abebf5e37ac21680982d66c9d05ee5374aea925451c01fb4ce8b6216e2a3d6c9d1e031ea00b1fef34c0fa065a15adc23b4d394ce8d65ef9eed60326354a5776ad3452d5039101e46d3eaf2f14d8b9bf389abdc1b517d3f4492d17e569ea5d57be54467c586e9a8790004073815d62cf1079ff25cf7e986defa86cb8658b1145e0da"}, @NFTA_DATA_VALUE={0x6, 0x1, "7df4"}]}, @NFTA_SET_ELEM_KEY={0x1b0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "c6c97fd050db7a0e60d3e954f3cf390baa05d3abe9519a0bf9cc111a086a18a700a6f5084eea5465338525c7619467adb90730ca33f8fc6dca28cae8312233c6dd32381e5a71ca1a072875d9a51be3783f33b42f8b3b43fd7394b9d9ed633c09fcdcc737f8620414da89c357bd7c102469cb97231feab619b77525c4c0d1dedefb28693a0cd7847837520ece401a917a238951cad679c1317c3810cf9169001537d192db4f4ba26895081225c736a6100d23b2497310d1df262a7e15f8353718f4a9e6fc0d279114cb4d4b48868fcf2bda96b730eacca469bcd03073ebddaca67b1fdf07a2"}, @NFTA_DATA_VALUE={0x9b, 0x1, "7a651f505aedab7c7c3f1a908a401dcc95795d49074b4f8640511f3ac77a78d25742521e43c7f494d2702377c2423bea05837b30913a882cb1695b6ed6580d496b241ffcba7a9fe40593a38c84d391a431957e7a9bef7147adf3a783758f1eea82c28a1d5d67d9264e5bbaadea4e826dea18179e6d1afc8c6c4e25d8d6e53d6d01d5aeeff876532adeac351836a539ac87446bb6cd1ac2"}]}, @NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "3bfcd5342752cc1e6896722c3f5fcce47ba8c6fb4b6456abab5f3119b4e74fbbeb0c40b2e62aff796d9db082960e333f5948e947a609746507adf1cbebdfed05286afc0ed4876fe327e7aa7729d6c90ebd37d761b952224973eda776bee831d1a2f758756bed55ef9e6b5c79c9009a4bbbcb010e1bab196fd44b"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x100, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfc, 0x1, "0bd1ca8a67d44dbf5339a28286a5d23785ed24e91aef9d2698735d25de63a4ef11bfb48ded43eb25a6687efac23f61f3cb37d8bbb91a9aa1980b4aa73d5bdde9e35cd2a09f10d12cbf89dfec637c9567a7d08f8371ef1c55856edd5ffd968d964608e11cf98006eff8b1f96912250587fe60f6ef75a6c5e9ed170b66be551c1d65d83fd1315c1b34f351da124f6818d8e53c77c51953aa2f7f13e2af20cf3734567b104741fc15ae529f2a466ec747cdf5637b146a08705e4219833f8d08e817ad4bddfceb67b2b8fc9fd95c26716a18aa22b84dc29e58fa074d3dd3af9dc36b2fe219728231f559ca680426aa4097b35f873bef6f8d0d30"}]}]}, {0x3e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7e}, @NFTA_SET_ELEM_DATA={0xf0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "ef454c0596483288bb556ec884a7d33ee253457b3adee3be3c7b50a32bc69da7ad7f3889d12f8cc1d86840eabe8bc71fa60b3ae63bedbf450c01a65af30febf147841d54a1ed6cc6"}]}, @NFTA_SET_ELEM_USERDATA={0x3f, 0x6, 0x1, 0x0, "c6a20ae7c89f2d2724b84baf90d2212dcf0ac78f5d3c37a00b03c3270bb14cfec850c43c06ce94eb58a190c0f666c5de42bc6cf93a7d24f0f933c8"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x220, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xf3}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x120, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x110, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x2d}, @NFTA_INNER_EXPR={0xc4, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0xb0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_IMMEDIATE_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xf9}]}}}, {0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc3687e3d0a506b3c}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x6c, 0x6, 0x1, 0x0, "9a34f490d0b27a23d27d1b82fdbb13dce2fe5fd9b802d8bb09661299435aba901377b96c0f637ee3243770c7364e5065213bd596a38818c6079a40e8fe571d591792ced7f1d7597df8503b3d8e0bd1e189e09c96babe034faf9ccd462962826858d714526a7640a8"}]}]}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x2268, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8b4, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}, {0x300, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x2d4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "1d9b8d9615294215c00bdef326d90f1a3333baf4d0025a74297bdc67d28f3a5045f846466e3d4bf84c190f610e2c271433a47709a9e4596ec0cd00ad7597f084619e35e8747fa72a5c21ed440ee97d629707ec62666152419c6cb059670a1f38379fdc4d0e4f6096d3fb7c14fe12e5e58ee224c9038bcf1d12544108d1d201805053169c9e4f53bb5056899e644e93b720215d253fe5f1665c636a0400bcc71298b9374a04fbbb382c2228db7cb0e14dd8ade91296c53badeff43eac6a4bcda6732be06575d9f64dc3dd080e2f7632077b227c66759ca1bbd2d32ee559"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "18d16f4bc02117f4ef0cba46670df8a553e9defc376517ab6494f7b92e744f02328bd74ee794284b1b5336e4cbe0768dd4031827f71de88e06d812b0bec9f55a5d06fa7201bb6ec02a4441564c75a48670d5e0c1edd7a81479395fdbd6c7d597141c262ea0f6e11e253642ceea3e2a476a668e9c67bc2152d3450828cb2066d13e502878888bd6d2f703d00ca9ba11ed3d912c7d9f5d1fb17f689a24ac8d5e71ca988473d11459f6c074c31f2747d0e0c506dcdce3639774c105ec"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd94}]}, {0x50c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x354, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "8d3fbeeaf40ada704de3e162f4cc3f83ec881d68a1f957399001959102d03c8c3a08e501212c5d7b1802d3a194996bc141b2b7d6feba29c7fcb79ffdc8419fc0d322f61b785e10515c1299e9593320bd367b71af45d7b7ce934ae5f0ea2319bc7a552c2cf0e1ebb58043b49c218b799c4c60fdb809b1e06ab987cef9cfb0a79f01249f7697c2fb1a9fc55198f89983258d54812a31bda79a4b9c961de9cee7"}, @NFTA_DATA_VALUE={0xaa, 0x1, "d00fb14d3840e1a8df36a64bafea7decbcd0438885a36b501c856947847997401cb5eaa7ee34f39bb349cac4e88a836457b2036f2bdaef6fe1c992710ee9f51c80d1a0dc388a3d4680f6426faee4b5fa032d6405bcf202908c359aab1796dbef9a2e402b2d4fae74485246999a11b53598de80e8b4e10f7ea4f0648898ade622e3981bb013a3a3b5682e688b1fcdf8b2e7d37857e641322004567dd66df0320d91abffcbfa8f"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9e, 0x1, "5eb17b7b4c85c2b881482b55d781dc4ad514d009b520eca37a9be1d9e9b460c7d040672b65ed3669b1b356c0dc589dce75b4ec96c81ab4758459dd5db7743d51a99984936b25f40e8bce8c590134348f52f2c92e39ad7100f07c69d75d50b2be560abb95937d03a219c9bbc66be6c43073141f9a446c961635b35ed6da6e73cbe8b2dc73770066cafeada3263e2b95e8265996019462516cac80"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "13b7b6683f8f28724fd0337b9c06ad9e32022995c6fe4992bd5c5983aa113a1e859e7168fd21c9d3a43defc1db106b924a4c7a6566c45b492f2cbed99f83e18dbabc5892de175466349a747879284812004c9381246656ef13642cb044edf8499ba833e1bdb60aa56d52"}]}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe2, 0x1, "2fa88bc8066d7a3980a624845bd4f024d3b2cb16f4074c8fa467195fcf84c15852e6783be47945be905151f961ed0e41827fe954915a31c74832f01e7e8c17c7a91fb0ef1e569c01658d9c9b02347038fa96f63bd0463ba59a40305a62a8e1f57657ede979542182370fa586b9c12d44ea2e5894d24c498e1631ff50cdb76a52cd175a3edead7be58f368f5779613fcc834bfaff7138f0de594308f63384af1b2663a0ca3612669ca15c2b74a0f25ba357aa495db8eb2f3ec2b7a015b8dea067e3fcb15da83368ad260397ce8c4a33ec7d92ef00c71a023c7d5c905d21da"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1960, 0x3, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0x79, 0x6, 0x1, 0x0, "c00d50e9480a59d587088bf34ca41b045953af28e93837dcacc4d6f258b6976829d5e46586e21dcc510c4256c58fc0193bfb1f582cfd18b82589874c6e085b576f49322f80371352c352bda6b60b6c19af5fca9fce3ef72b29b5c3c3e8c7ed6be9ec18feba28f74297d17ed2fde231b570c801e530"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}, {0x1698, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x12f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "a56162a2fab6238c5a5223977bcaa87b2622ae3bbca2ff6cc6cd631759a043a90e9f8dcbc02803a39ca48fb1c47e184644982771bf5eedf1f25dd290bb19d0bc0a2cc043ee8ff5c7a888027bf4a4071fa40bc51dda46c4f345afd3330e2f4e612791dea4649a3c09a6583fbce34d060cfbab772cec63d904c42b64a58f468dfcf7b1f5af3d282c887095cd8c552d0e42ced69a181db3fb3877ed"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xce, 0x1, "8e5d2160f8f008f2a0e95bc8f90b02bbfd570b99aecc4a08830fea9847efc4625adae3152655f6dc253a09dac0c297f59dfcffe26d94bc2a98c53c0c748c449dc74e3c0e39a49f79e1285e7450f12ca99d8b68ab3386a94153819b48dd79a7fa3d417be2257356a3760b8dfb5fc83fafcea18d475518398316cffafef097fce7e6d07f0d8a4791328e3903d1dd8a48f862dd89aef86bf6b8fd70122868d33f6f35c0eb588dcceecae26762d95342fe75f4eafe1b75f766df347b4257da4fb59702aadd2059d27473126d"}, @NFTA_DATA_VALUE={0xbd, 0x1, "529a30cc625426bfa5176d285189eb86b4deb985dc32266d0af97afb00065c4b3dde4ea38b071d8b0d08d693d71f9f79a0bfe953b22c16b86101b29a8ffdaefb78497bcf579082f55ce33b007f348c81d60bdefbaa7bc15312a68f908f1aad80f0e3e5a66b74a10a3348c745ee129a0404419e96d5fae0f82bb336eb37956126f609167d55bcf0219f239afad54d3c1243a157319ff5c892de2c7880caa79483c0c449f608de3da50dedb24ac4972506683b1c0d1469fbb99d"}, @NFTA_DATA_VALUE={0x88, 0x1, "cbc246a39d0cf78cac6efa013bd2d339d6c52328c60a797595f5b67c8c75c7621df0ca3248c91538199c9d9be0a9a04310058c339eb04e3554f69d5a5282bb66e0979f201b37b532d330188bf944ab0185ae3812baf201335ca3160777f9c860cea57fbca2736eb0dc02534cb4ee1d24746395effc4b85ec806477d90a2b1777cee1d459"}]}, @NFTA_SET_ELEM_KEY={0x340, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "dfb6e6eee82fc9d3940be4232314dfb59a1e5993c749256d5e88a8aee2a6eac55a5c5d16b1f8689ad97e21ef00a67b45a77d33317afbd3a6893a2168b4d10fd560f083186a0f6d5eaf910afaeb9406d70839694f3a05fde9fe4ba2c8c5bf6f8f09ee5ea4d9704cffbb63df17c8720d5c8cc303671e89a2d094947fdaea10b2b2a54c1afe54dc42ac706dd5cc6e522cfe7dd6612ece5b4cb3bbc81691fe59051dc19f5e6cad57bc20b9ae252a98faa8e94f12b292d488b7e9d14b24f19b4bea7fa24cb116adab62c8e7c10d34e969848da3636338e60a25e9ba31ccb53e704a3838958e90d8496f61389343652c"}, @NFTA_DATA_VALUE={0x63, 0x1, "62b065f3b26521fba6ceb35ae1af7a79bef5b30b6b568d65b4431d7f00a6315116ba4b83f0923a23524c759ecb3b4efc1319a37c4bda688122aae3ad4710983aacb93c008625e787f883d8c61abe483d1d842c28ea5fea3bd40244cfbed1d9"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "449f6910c178b85f6e50154699f58e11c9009aa08264a863b536fac6c69cd7755c91ceefb74ecea0e8f2b3a36f29c0170a536f4a649254b3b9a2ef7556bb0e6fbc3dbd6369878bfef0849a7eafe84841b437ad55285fc1d9a25fa77bd530df45d6403afc98a5920161b328065bbe56f9506fc0c246199ada2d683d3f86a5f1ae88c88186556a63d1ad4cb74c36512bc9453dfe99e0ceb8b58c122d28ddbbced79800d1bb742d29a804c2ed068a5e6002afef3de89f1d97567b0fa3e1a82abdcb3831ae75b7c723"}, @NFTA_DATA_VALUE={0x3c, 0x1, "30985ad92062b1b2720c927052de46e4bed4d7431a357a6d10833cb3dfbe6c2bdeac4dd8fc2c2594c17f9dd19a0cbdeb28fc87d5f806045c"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x68, 0x1, "62e731f666125d4a2329619cbaba94c49756e64ba440639440e7a247d2f84db4940d1995c31856a000c9daeebf8f4caf2a791bb84b85742a4d5aa1e3cf110d735cc7453df650fe4cbb8f5a32156be5e98d506ef79606e819eb909b147d75942871a70225"}]}]}, {0x1fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xc4, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x34}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}]}}}, {0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1a}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x75}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x878}, @NFTA_SET_ELEM_KEY={0xf0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "91fa07c1bc689da221b68a6472040980a6628a4e1614d69486d278dd082e1126f9f556ccea1c62791e28f1ff2a5e19d513de7e2461bd0ae9bfb69a1317fb50ad6f1631eff9e8836e6f8c60e62e7ce3f14ad2d6c89b15ed0b2b6a"}, @NFTA_DATA_VALUE={0x49, 0x1, "8cc03a531c86c1d33c1372d309ac6a72a1ee76a77741ed2fbd57c2f7df8a4ea26706d50d1b94b4113fb2bb2f21ed0e7fd987f906e7fa89b5cbe3bcc80651843c6bc35bd8e5"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r5, 0xb15e6000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0xfffffffffffffffb, 0x4, 0xe691, 0x4, 0x0, 0x100000000000002, 0x40c, 0x29c, 0x0, 0x8007ff, 0x1, 0x3ff, 0x9, 0x0, 0x4], 0x80a0000, 0x6f84}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fd514ceb05ad854b00009e173610ef171e7206de0102030500000000010000000009"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x40, 0x5, 0x4, "0e7b0cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.191566092s ago: executing program 0 (id=669): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="174f970c975f9d8dddb30521eb57bc60", 0x10) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r0, 0x4068aea3, &(0x7f00000000c0)={0xed, 0x0, 0xc0bb}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0x100, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x3}, @exit_looper, @release, @request_death, @increfs_done={0x40106308, 0x1}], 0xa5, 0x0, &(0x7f0000000280)="46d2abb170e40b4ddef73379df4da8d1a9adf235c5ab5bdef49291a996192ebe7507c90ad27bc5c74851766c7dfbc91b7ff832de79afb8b78a2ec9623883483f49a74daaffb9525eaa4628acad718ecb89b74a0fb475231554678e849972d6b17dd1553c587ea5fd58e88649b748d73ff5085a076eb18c5ab0e39cc02e0f94b39314288c546e78b7b3ef88129bf2e6bbd80863dbc0cf4a382236c138b6b1a51f860e3f8a73"}) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000400)=""/4096, &(0x7f0000001400)=0x1000) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001440)=""/217, &(0x7f0000001540)=0xd9) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000001580)={'filter\x00', 0x0, [0x3, 0x7, 0x4]}, &(0x7f0000001600)=0x44) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000001640)=0x17, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x58, 0x0, 0x11, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040010}, 0x4000080) read$FUSE(r0, &(0x7f0000001800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003880), r0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f8b86bd330c932fc91877529a8"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r2, &(0x7f0000003980)) clock_gettime(0x0, &(0x7f0000003a00)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000039c0), 0x0, 0x80, &(0x7f0000003a40)={r4, r5+60000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003a80)={0x73622a85, 0xa, 0x3}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000003ac0), &(0x7f0000003b00)=0x4) r7 = msgget$private(0x0, 0x3a6) msgctl$MSG_STAT_ANY(r7, 0xd, &(0x7f0000003b40)=""/136) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000003c00)) r8 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) close(r8) msgrcv(r7, &(0x7f0000003c40)={0x0, ""/148}, 0x9c, 0x0, 0x800) ioctl(r6, 0x5, &(0x7f0000003d00)="3a6be738cbe46101b6fc7931c3341bb6ccf7449116698e2cbb6db9315032271db9519a9db9b617a7") r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_SHORT(r9, 0x82307202, &(0x7f0000003d40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.190970855s ago: executing program 1 (id=670): pipe(&(0x7f0000000040)) r0 = open(0x0, 0x591002, 0x8bff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "4bd92170f8c475a5", "ce1a42c4c09fb9eaab93f61d07cf31827bf1152b2b0865a300505d81f8dbab1b", 'w/.n', "82a9cb3a16240f91"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) write$binfmt_elf32(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46680609ff040200000000000002003e0000000050a50000003800000021030000080000000100200002000e00020013000000000001000000faffffff0000000b040000000f0000000800000080000000030000000400000000000000020000000200000002000000b7a10000e60700000100000001b62245a4c10fd4afde34f40e4ce47c5334cba498bde0bb875f15b84d36693ab8dc34aa88b536e4509ec17eb69b3bb98675eada0488b6085982186ee521d94a5300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004"], 0x6b9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) pipe(&(0x7f0000000080)) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.050386189s ago: executing program 0 (id=671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x20, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) ioctl$SNDCTL_MIDI_INFO(r2, 0x4004510f, &(0x7f00000000c0)={"d8582add2d5203746d2542b7ec1f15d2f38d95493569079e090c57b09bd9"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000a80)={{r7}, "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"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="020008000100000000001400000045edff5b14000000000190780a010100ac1414aa05009078ac1e01014027fffe006800020189040700000000ac1e000189230b0a010102ac14143eac1e01017f000001640101017f000001ac1414bbac14140f860600000000000000"], 0x67) 848.829928ms ago: executing program 2 (id=672): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @mcast1}, 0x1c) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, 0x1407, 0x400, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x880) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395908000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x6000014}, 0x0) 745.88348ms ago: executing program 2 (id=673): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0498c200000000000100010009210105000122050009058103bf030c0400"], 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x3e4d01d7b4b3530e, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f00000002c0)) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = fcntl$getown(r0, 0x9) ptrace(0x10, r4) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x23, 0x5, {0x5, 0xf, "00e400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000600000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x88, &(0x7f0000001700)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x9, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\r'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x1ea3, 0x770, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0x21}, [@acm={0x4, 0x24, 0x2, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x7786}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x60, 0xfd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x3, 0x6}}}}}}}]}}, &(0x7f0000001280)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x300, 0x4, 0x0, 0x1, 0x10, 0x7}, 0x4f, &(0x7f00000017c0)={0x5, 0xf, 0x4f, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x401, 0xff00, 0x2, [0x3fc0, 0xffff30, 0xc00f]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x2, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0x1, 0x4, 0x200}, @ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x8, 0xf, 0x800, [0x30, 0xf, 0xf, 0xff5f0f, 0xc030, 0x0]}]}, 0x1, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x816}}]}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) ioctl$sock_netrom_SIOCDELRT(r0, 0x891a, 0x0) r7 = syz_usb_connect(0x1, 0xd77, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x5a, 0x70, 0xd5, 0x10, 0xccd, 0x39, 0xdcbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd65, 0x4, 0x3e, 0x43, 0xd0, 0x41, [{{0x9, 0x4, 0x8f, 0x3, 0xd, 0x6f, 0x2c, 0xe7, 0x8, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x1d, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x6, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x3}]}, @uac_control={{0xa, 0x24, 0x1, 0x8000, 0x7}, [@extension_unit={0xb, 0x24, 0x8, 0x4, 0xf89e, 0x4, "2af1235c"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x9, "dd00915e"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x2, 0x7, 0x6, 0x7, 0x80}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x3, 0x4}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x2, 0x5, [0x4, 0x9, 0x4, 0x5, 0x7], 0x9}]}], [{{0x9, 0x5, 0xa, 0x1, 0x200, 0x2, 0x6, 0x5, [@generic={0xc, 0x22, "b6272ab945ec252dbba6"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xeb, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x0, 0x8, [@generic={0x64, 0x9, "e10a87c841c6adc2a0fd3ea5e77ea7717abc3c57bf6e454c10df1bee2c897183db37af1cb0a42ff2a8a28368975f598eeac678c76599dada571a031940eff56e5d0c715b7151353da23fe422b0b7cc28490586b3880832ae8a6dd3ec5dc4fc86cdc7"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0xfffc}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x7f, 0x8, 0x4, [@generic={0x1d, 0x4, "ba40a5dfcd545d892f634543243eedae41aef9a5dab1c21d69f7d8"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x1, 0x0, 0x7, [@generic={0x91, 0x1, "293d538aba0b8f80dceb6a8a1be7ed0bf9a8f0fb23a50ada447c1e6599a8807dd5862f28f16d11999df36aebde0961c1861f2637ec3e213dbf2e9f780a791e7facc374439f7029b4af803d4766ec8939fbb64ed69dd293a6c45d7a2ecac7ec5319fe31bb07ef58e11ad24d8135d8e2de773e88500a15a43a0dba19eeb4b1ac1dbd9312929fefe01de262c4c965b06c"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x2, 0x1, [@generic={0xa4, 0x6, "454a3b31ba19817da2fe19afb1409edeb9961325b9e0d02112d24a0768c3779b2fee53df5cb42bb489244250347d53fdcb4055d49a04fe61bde7a146a82770ea7c842c62f1e8fb6b95d8628d111423486dd6c81ce734b779d71b1b5191c7a0d360701956e10d6ff9f413db4a4aa39e643402f7aeebd5f942e72a41e4f6d514adc92e0486609c9c870cb988b124d669eedc983b247ab1d9f06a6f05fd7048bfd338d3"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x5, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0x5, 0x0, [@generic={0xf1, 0x22, "63b45b4d90f218ee240b1bbc80dca5cde272093f8e5c51ba662d97f4216775277a88de709f3b32356f2762b437f327e7eb449d928ccd2ee60e5817cfa0fa8f8c232c4dcb12f5f3ef9168d5fe839187a6b90650445f870446c95ac49593cfa37ad6a10857a6e94e6611287074df99071a0b0689fcc09dcb0fd5f3f11e8ba338bbaad2d49786ed3d4e519c0aae8fe6c2a222b0395de57ad3f3aa47abdbce071038e729cab1c55b58c3e3460433b51c15fcb3944aaf38e2a77e5d69ecf9b872e8108b5e116e3d7f0171c7374d0b4658ac06befb7d4c201968fb8a84b3f280f084faf73bf4f55f67b31a7de2bd39ed7e27"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x4, 0x80, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xb}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x7, 0x0, 0x8d, [@generic={0x75, 0xb, "3fce39d74ca1c070208770e93eb6991f58dd9193552af7c380b10acf996914edb5085c21d8248c4d80c1d9b013be529d2e31c06acde1b09d5add5bb59627d2270e892f88c33a766190a2d187018db202f7f64b3d5b4737ba95f1efd24cb98494654a1ab2ad30f1302571571857fe89ebc5cf7c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xe9, 0x800}]}}, {{0x9, 0x5, 0x9, 0x0, 0x1cf, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x2, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x2c, 0x3, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x28c1}, @generic={0xae, 0x2, "0a59fb75e27611a33ba53ee2ccc34c37fcc8bff672acfbaf25b3f6535c55427eb72908ca65a0541989336b08483babc45f8d0014598783a1f0335b366da1c19cfc97025996e637b15f1995f24ecc3c1d32c18fb68bcd8657d2477c2bfe7ac60b1b85c5b157bf10d66c4daf6036c9cccc1956acdae84a49911766a1ddc92f61ecebaa57b3a763bdb0b8d80d54c99f0e81e9dd4e53ac4f57f1b5ad34e998d232fdb99492710c153bf2edefdbc3"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x2, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x1}]}}]}}, {{0x9, 0x4, 0x87, 0xc, 0xa, 0x4c, 0x94, 0x4e, 0xff, [@hid_hid={0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x1a9}}], [{{0x9, 0x5, 0xa, 0x8, 0x20, 0x9, 0xb, 0x5, [@generic={0xe3, 0xc, "97b43ae90cdd76f3c58c33a2e43e2749903b4ede0bb3a88c489adb90d5bc220eb11f2920edb6dde863928f7ae5294917c43347f9f504fc47c6b3b8991ecdd01c6c114063ad2afa56065a863d00827d166783dfc09d896f45a6ac73251304d4eb9dc9ba970215acccebf77cdd92dd1cd0c90bc0babb3aa49dddd14806c03cac77fd4e5fe9e3c30ed71628b6b06a70cee1a3f3fdbfe67f9dec48aafc9dd4ab4c989cd6cdad02f3cb1610e12b0e32222f7b305954143bf8f8bb61364282e853131b40cbcebc6fe55f8645ef996aaed730cd3f955b174e3f245b941be61b5da4566cac"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x4, 0x5, 0xfe, [@generic={0x7, 0x0, "631e16a647"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}]}}, {{0x9, 0x5, 0x8e, 0x10, 0x8, 0x5, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x4, 0x5, 0x2, [@generic={0xb2, 0x21, "7566af42721ad4d097eba90d653982cb6203cad4b7bc2b403ad590eec2ccf0367f386303d42b342ffd221276c9b62a572680e71f5ec46994a8e0404318f9dd7ae223941605cc14054d840044c36cc6a167c79022bf711c19481e17219723426aa1da54d14d053d1be805eb8c90d5b7d2b2b0525fd3c821f209c88450012c4a13298e951911cfb3417a1a5dfc455f8a53d05f7a355beaa52803ad6f3a6fb9c57f8dc594d7ab2b70bd3ad357df577de36d"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x3, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x1}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x1, 0x1, 0xc0, [@generic={0xd0, 0x4, "651ed475c9079e422341a5a9ada93776161b964aa4432b32099e3873442e82e1b78146955cceef454a069d031824a15d9a7ad6aa963789cd8a15f5f03b7e2274703580a05c1dd6f616ad43ede34fd13f71b1e31ecc070500183d9fb5277a068380f42f70d5c88b08f1240d94d713b8cda22963920288613c21506e887dff61c6943803ebf39383245bc64482e3a95509c86ea2b05ce0e59872a5949b2d36a540492b6df247d9e847ea93bf2320ac25eb50cc5156ba723cfcd44f19e88f55cc5095771a4e99b38b5c0bcfc919da45"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x4, 0x9, 0x5, [@generic={0xf2, 0x1, "7ce2c730e305f567c0f9f0afdfa872dc2d4ca2cb34a8e70ebad50e52ce75ba57b99ab102b58ddd67e23bdfed98ddd2b9f52f214a94d811bfd02d518134b8e2020433a23260c319d19282a5da116e73511207b801cebb2ad273591b3e970558e5536f0d5975f6ffd68c13f2305569a50f089d8c2b314187cb7a41698ade3631c3bac9c05f97957b3e715d7198ac3fecfca04c7608cc3e8b9448d055a8dbc3ca5b3c18432f0c8c609e3ee9d899e975690f15f2a3f5204cab3ada6d24beeca8c25991498513defd2bb18c6e13f46db1620638d13ce34b48f4ce86ff6c47621eed439f3f9e9f9ae0d66f345e5e32eb15fd89"}, @generic={0x2e, 0x22, "07ecec1789f25e1a4c6b69e776ea3ebf52ecab6db0c4b50a774f3aa68861e963c4b59db29fb0f284257396bb"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x4, 0x2, 0x9, [@generic={0x5f, 0x3, "4bf7539b02b836e8df19a0b3a4e08eec154d8cbebe60d18e2471292fc262d8897bc76179a96a76bac83915f8b81a417c35c09b67cb80c1a65342cf57644b2604ee85970cc0eeb20a4f258f4fdddf82dc7475953a09da66d34ae3ad929a"}]}}, {{0x9, 0x5, 0xb, 0x13, 0x20, 0x4, 0x5, 0x9, [@generic={0x28, 0xc, "6f28b689021e4d9fe7ef4fbf204627ac3a548c6acad4c4448769443d0f7d6ba928b226478a33"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x81, 0xf, 0xfb, [@generic={0x77, 0x21, "815bcd09ade28535387dac44f27ef045699e740c4a477173795688fcc82c10d8d1580d55d7b3317d9737c82035aa8b21c60866a1cd5b8230238278508f99e83e3519af0ffda6a90ba187ddc42c34309a8d1e30f0a6d216d11cae97ce95d7330124106bcbeea2d61ffc7c5b2359793a8576f1c89dd6"}, @generic={0x86, 0x5, "50efc2f3e6ad81865369ae7104824f8703ae5aec6e8b4cb169bc6d3dfba577a3d923358870e836ea5805d92f21d45c22911039efb97e5ff0ec82ecdf2a421a73d5f533e2804a62b6e21b2560ac30b9f2679937f4d9e0d3a103cf1bb21493b7592f7484ee3e8bba40be835d7a868c502b7df204f35dcfb20067a257e636d66106cc8024ce"}]}}]}}, {{0x9, 0x4, 0x9, 0x0, 0x3, 0xff, 0x1, 0x66, 0xfd, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x40, 0x5, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8000, 0x3, 0x3}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x0, 0x2, "0f2de600544ef2b585"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xc40f, 0x7, 0xa0, '?'}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "db3faefa"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x6, 0x8, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x8, 0x7, 0x7, 0x3, 0xb8}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x8, 0x2, 0x3, 0x1, 0x10}, @obex={0x5, 0x24, 0x15, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0xc}, @acm={0x4, 0x24, 0x2, 0xe}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0x1, 0x2}]}], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x9, 0xff, 0x6, [@generic={0x93, 0x10, "dc5f1a91cbb6549dcfc3927a6fdc6e366567ba955f18bd43ddbc96c5a236ae15f87d9f02279d479d7564922fade4b51ed68c6dc1f91d85789c68d04d838f01381d94c8897c9a180d54219052340d00337782f5fac73af9a7a7b41107078f863a63b343d2cd0fdff848544951a5b25c076172c7567fb7db42f2fa3e3f59e2fdf4de36d57f794a7e433ee0f19f1901858791"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8000}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x9, 0x3, 0x6, [@generic={0x36, 0xa, "c8a2552e6e968b6ff822a80a6b4b63c440a5dfece548019e45c51b90b213047546cc8d54c775870c67300daab574913e4a1ba9d7"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x40, 0xe4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x7}]}}]}}, {{0x9, 0x4, 0x8a, 0xf9, 0x7, 0x8, 0xe5, 0x90, 0x7, [@hid_hid={0x9, 0x21, 0xffff, 0x3, 0x1, {0x22, 0x765}}], [{{0x9, 0x5, 0x2, 0x10, 0x20, 0x7, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x8, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x8, 0x8, 0x2, [@generic={0x2b, 0xc194f119228ef40, "8e463042b70b71f59484c963589e6d97c2c43e619fd9fd78654eb8710dc3e6095ed2e53d00aba0651a"}, @generic={0x4a, 0x23, "7c51052e359efd508c05b8e786b37d85f2e85f8f4b028994d76b98a043d9d8100f0258e14281daa04eae19085547045898f3ed2665756e350e7b4fecef4cce4d4228c0552a031cb7"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xff, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x90, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x6, 0x7f, 0xb, [@generic={0x53, 0x1, "2432391e717df96a8b2dc78e3892570571d771ce1ec25840d3d39928adfb2d4987307860eeea2c5a26e6360426cf227dd06ec8d6e062157794ba5ddaf3d743b4ce79cf67c352d1bd8b000180344d258ac4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x19}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x8, 0x8, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x7}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x7, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x6}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x65, 0x9, 0x7, 0xff, 0x31}, 0x2d, &(0x7f0000001100)={0x5, 0xf, 0x2d, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x43, 0x2, 0x1, 0x0, 0x80, [0xff0030, 0xc03f]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "a855515aae1f33fbf2ad0d074ce10aa7"}]}, 0x1, [{0xe, &(0x7f0000001140)=@string={0xe, 0x3, "40b8bdb31af509d16ddb246b"}}]}) syz_usb_control_io$hid(r7, &(0x7f0000001300)={0x24, &(0x7f0000001680)=ANY=[@ANYBLOB="40234d0000004d23035d442451a58ea9e96b121d3fd6ac2b1d79f9d92293dd37d064b70b1cd1225765aab4a57f32a5171c63fa8793ba84e0fee2e7a6c1493fbc1e6ba9932e3f3534b327dd97215abe10a452082ec5958dde8f1d12ba5a8d87c6bcae953fd22740b14de1"], &(0x7f0000001240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f00000015c0)=ANY=[@ANYBLOB="002296000000000000000000000000117a6b6a00de12c884c4082bda2bc11aabf26bbf4d972a54e0539da99c54ea2205ffdd17a838d2f8cf8b6e43581af08e247dd192f149cec058a9858c42bd97b0ac12bb7a31d21aa315145bbd3898c63053a1e331cdceef133b0a234db4b903dbb41e6b01c0b5c2864ed976321ffa390965f001a1f6f669a2125767ac1706947d7ce4d33c80170a544bed20effbf0158fe45a"], &(0x7f00000012c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf, 0x6, 0x1, {0x22, 0xfbc}}}}, &(0x7f0000001580)={0x2c, &(0x7f0000001340)={0x0, 0x15, 0xdc, "eb27520287a6917dd7ff28182af376b6483daa44116c98c57fcffefa38dde62ba37e25fbc4252d5c74c34a64ef89194d0092abe0c466c4562eb89c5921446635111e8b00b76d386f709ba6b7f4b18f2e8238b7621141aebe94e7277a45576c2e8641d6946b2027e66b15890f9263081f445539a90462cdfb590ae3a7b82bbef4b869e17ba7f6121ebf0bf950a83de7aced25fcc7edec2d7fca0ac441c6be8151180610139b8731350eda82f58cec04dee73f4a0c7d8821c594cb2d291f067562e43acc4fdc54c9654e4df031a7a1f6fb1bc2871cd6ebff7cb0487b34"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001480)={0x0, 0x8, 0x1}, &(0x7f00000014c0)={0x20, 0x1, 0x3f, "e4d407d3f5926a2145a34d0b1ca4b32768a901c4fbf91f6287f46566448a9ff6cadfbfbd708f153aae6b69be328986184e100b32d90740cb718062c6ec229b"}, &(0x7f0000001540)={0x20, 0x3, 0x1, 0x7}}) 636.825557ms ago: executing program 1 (id=674): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) syz_usb_connect(0x1, 0x4a, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT, @ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="9dc8e0eb48b1e5150fc79d7df13105170a214c5f7e6a04f114bdc308f0f5628461846018781b0e980ad4f023cec0b598065a72360f250582d7ec2183755b10e41793c27de3853a2d40900a654dc52eb2168dfd7df6c1803d7d03869d5ebf028c98960d3d752fe443803675fcdc20cae8ca7fb28d9bf9169a4828771484a1e54f0b506e1f53eef36b37d4ff9dd9dceaf8d985ec4b940e867b08b15f28f23cd2261296ef7082d3c6ea3ba6e794d24ed219fa6815cf26c57a", @ANYRES64=0x0], 0x0) 171.037364ms ago: executing program 0 (id=675): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x2, 0x0, @mcast2, 0x6}, 0x1c) 127.800038ms ago: executing program 0 (id=676): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x4, 0x4) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x13, 0xa01, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) close(r0) 43.821848ms ago: executing program 0 (id=677): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000640)={0x4a9a, 0x7, 0x10001, 0xfffff000, 0x9, 0x200}) 41.384388ms ago: executing program 2 (id=678): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009c323f08a5040330b23a01020301090212000100020000090400000028f0f6007dae3bb1ccce0fc22b58087977ace659e8db172963cce8532a0d982b30c407f6f5cffb8f"], 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x65, 0xfe, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x25a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb1, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x2, 0xa, {0x9, 0x21, 0xc890, 0x9, 0x1, {0x22, 0xe4a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x46, 0x6}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x23, 0x0}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000200)=0x1ff, 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x60, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000100)={0xc, {{0xa, 0x4e21, 0x10001, @local, 0x3}}}, 0x88) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001980)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8000, 0x5, 0x6, 0xbf85, 0x21, 0x7fff, 0x1}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001a40)={r3, 0x8, 0x3}, 0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000900)={{}, r9, 0x10, @inherit={0x58, &(0x7f0000000140)={0x1, 0x2, 0x1, 0x10000, {0x30, 0x2, 0xab, 0x5, 0x80000000}, [0x0, 0x4]}}, @subvolid=0x8}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000240)={{r1}, r9, 0x10, @inherit={0x68, &(0x7f0000001900)={0x0, 0x4, 0x0, 0x6, {0x13, 0x7, 0x0, 0x218a, 0x6fc}, [0x5035, 0x6, 0xb, 0x7ff]}}, @subvolid=0x417321c3}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x23) 0s ago: executing program 0 (id=679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000300)={0x2, 0x0, {&(0x7f00000000c0)=""/40, 0x28, &(0x7f0000000100)=""/104, 0x0, 0x1}}, 0x48) setns(r5, 0x24020000) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f00000002c0)) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x167) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x793, 0x452, 0x9, 0x400000004, 0x2, 0xf1, 0x0, 0xfffffffffffffd7e, 0x1, 0x7, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0xe15a], 0xeeee8000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): an't add hid device: -71 [ 146.170721][ T5912] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 146.182613][ T5912] usb 3-1: USB disconnect, device number 42 [ 146.279056][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 146.428951][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 146.435950][ T10] usb 1-1: too many configurations: 14, using maximum allowed: 8 [ 146.446801][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 146.454961][ T10] usb 1-1: can't read configurations, error -61 [ 146.588944][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 146.727783][ T6870] Bluetooth: hci4: Frame reassembly failed (-84) [ 146.749015][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 146.757604][ T10] usb 1-1: too many configurations: 14, using maximum allowed: 8 [ 146.767945][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 146.776479][ T10] usb 1-1: can't read configurations, error -61 [ 146.783602][ T10] usb usb1-port1: attempt power cycle [ 146.843697][ T6874] input: syz0 as /devices/virtual/input/input17 [ 146.854902][ T6874] input: failed to attach handler evdev to device input17, error: -4 [ 147.128924][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 147.160257][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 147.166696][ T10] usb 1-1: too many configurations: 14, using maximum allowed: 8 [ 147.181269][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 147.189190][ T10] usb 1-1: can't read configurations, error -61 [ 147.328954][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 147.384307][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 147.397278][ T10] usb 1-1: too many configurations: 14, using maximum allowed: 8 [ 147.399149][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 147.416405][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 147.424753][ T10] usb 1-1: can't read configurations, error -61 [ 147.433211][ T10] usb usb1-port1: unable to enumerate USB device [ 147.488592][ T6888] netlink: 328 bytes leftover after parsing attributes in process `syz.3.285'. [ 147.544632][ T6891] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 147.779079][ T5932] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 147.948913][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 147.955911][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.966672][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.977175][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.993340][ T5932] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 148.004728][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.013086][ T5932] usb 4-1: Product: syz [ 148.017509][ T5932] usb 4-1: Manufacturer: syz [ 148.022459][ T5932] usb 4-1: SerialNumber: syz [ 148.030764][ T5932] usb 4-1: config 0 descriptor?? [ 148.244350][ T6890] IPVS: stopping backup sync thread 6891 ... [ 148.275622][ T5932] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 148.284160][ T5932] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -8) [ 148.341189][ T5932] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8 [ 148.358109][ T5932] usb 4-1: USB disconnect, device number 43 [ 148.499438][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 148.664058][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 148.673551][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.682217][ T10] usb 2-1: Product: syz [ 148.686724][ T10] usb 2-1: Manufacturer: syz [ 148.691597][ T10] usb 2-1: SerialNumber: syz [ 148.702731][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 148.722751][ T5932] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 148.799746][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 148.806716][ T5831] Bluetooth: hci4: command 0x1003 tx timeout [ 149.463911][ T6909] netlink: 'syz.2.293': attribute type 16 has an invalid length. [ 149.489320][ T6909] netlink: 'syz.2.293': attribute type 25 has an invalid length. [ 149.498425][ T6909] netlink: 64094 bytes leftover after parsing attributes in process `syz.2.293'. [ 149.512777][ T6913] loop5: detected capacity change from 0 to 7 [ 149.541225][ T6902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.542139][ T5827] Dev loop5: unable to read RDB block 7 [ 149.560657][ T5827] loop5: unable to read partition table [ 149.567318][ T5827] loop5: partition table beyond EOD, truncated [ 149.617357][ T6913] Dev loop5: unable to read RDB block 7 [ 149.629202][ T6913] loop5: unable to read partition table [ 149.659776][ T6913] loop5: partition table beyond EOD, truncated [ 149.678576][ T6913] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 149.750947][ T5932] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 149.789368][ T5932] ath9k_htc: Failed to initialize the device [ 149.843259][ T5932] usb 2-1: ath9k_htc: USB layer deinitialized [ 149.950612][ T6925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'. [ 150.016827][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 150.067193][ T5932] usb 2-1: USB disconnect, device number 39 [ 150.124188][ T5831] block nbd2: Receive control failed (result -107) [ 150.169365][ T5912] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 150.196910][ T6935] netlink: 'syz.3.302': attribute type 9 has an invalid length. [ 150.213201][ T6930] block nbd2: shutting down sockets [ 150.324062][ T6941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.303'. [ 150.338978][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 150.349724][ T5912] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 150.350903][ T6941] rose0: entered allmulticast mode [ 150.364437][ T5912] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 150.386450][ T5912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.404128][ T5912] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.414155][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.432990][ T5912] usb 1-1: Product: syz [ 150.447653][ T5912] usb 1-1: Manufacturer: syz [ 150.452642][ T5912] usb 1-1: SerialNumber: syz [ 150.690462][ T5912] usb 1-1: 0:2 : does not exist [ 150.731464][ T5912] usb 1-1: USB disconnect, device number 49 [ 150.782150][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.829498][ T6947] input: syz1 as /devices/virtual/input/input18 [ 150.959138][ T10] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 151.132832][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 151.160754][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.171683][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.180595][ T10] usb 2-1: Product: syz [ 151.185532][ T10] usb 2-1: Manufacturer: syz [ 151.210118][ T10] usb 2-1: SerialNumber: syz [ 151.441983][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.459041][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.486872][ T10] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 151.507046][ T10] cdc_ncm 2-1:1.0: bind() failure [ 151.534065][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 151.548913][ T5912] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 151.548946][ T10] cdc_ncm 2-1:1.1: bind() failure [ 151.599359][ T10] usb 2-1: USB disconnect, device number 40 [ 151.648911][ T5932] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 151.708875][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 151.731156][ T5912] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 151.749062][ T5912] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.778909][ T5912] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.798907][ T5912] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 151.831384][ T5932] usb 4-1: New USB device found, idVendor=0572, idProduct=c688, bcdDevice=d5.02 [ 151.848874][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.849173][ T5912] usb 1-1: config 7 interface 0 has no altsetting 0 [ 151.875760][ T5912] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 151.878393][ T5932] usb 4-1: Product: syz [ 151.896011][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.911089][ T5932] usb 4-1: Manufacturer: syz [ 151.915849][ T5932] usb 4-1: SerialNumber: syz [ 151.954737][ T5932] usb 4-1: config 0 descriptor?? [ 151.982122][ T5932] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 152.030724][ T5932] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 152.089716][ T5932] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 152.199176][ T5932] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 152.221181][ T5932] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 152.288967][ T5932] usb 4-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230' in warm state [ 152.312844][ T5932] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 152.329239][ T5912] hid (null): report_id 1501 is invalid [ 152.334634][ T5932] dvbdev: DVB: registering new adapter (MyGica Mini DVB-(T/T2/C) USB Stick T230) [ 152.335411][ T5912] hid (null): invalid report_count 983040256 [ 152.356894][ T5932] usb 4-1: media controller created [ 152.379107][ T6960] netlink: 56 bytes leftover after parsing attributes in process `syz.2.311'. [ 152.384288][ T5912] hid (null): unknown global tag 0xc [ 152.409313][ T5912] hid (null): unknown global tag 0xe [ 152.417495][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.426152][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 152.447988][ T5912] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0009/input/input19 [ 152.529547][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.550484][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.613423][ T5912] kye 0003:0458:5010.0009: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 152.615966][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.678900][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 152.688116][ T5912] usb 1-1: USB disconnect, device number 50 [ 152.718695][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.762429][ T10] usb 2-1: config 0 descriptor?? [ 152.775430][ T5932] usb 4-1: USB disconnect, device number 44 [ 152.804566][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 152.846272][ T6967] fido_id[6967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 153.022382][ T10] pwc: recv_control_msg error -71 req 02 val 2b00 [ 153.059261][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 153.092657][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 153.130541][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 153.137602][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 153.149551][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 153.190829][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 153.207237][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 153.226809][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 153.245090][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 153.254197][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 153.262720][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 153.286862][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 153.302157][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 153.313558][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 153.330269][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 153.351980][ T10] pwc: Registered as video103. [ 153.370331][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 153.398460][ T10] usb 2-1: USB disconnect, device number 41 [ 153.569162][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.320'. [ 153.600085][ T6998] netlink: 124 bytes leftover after parsing attributes in process `syz.3.321'. [ 153.808938][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 153.928941][ T5932] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 153.960522][ T10] usb 2-1: config 1 has an invalid interface number: 28 but max is 0 [ 153.969422][ T10] usb 2-1: config 1 has no interface number 0 [ 153.975744][ T10] usb 2-1: config 1 interface 28 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 153.992301][ T10] usb 2-1: config 1 interface 28 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 154.002782][ T5906] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 154.013060][ T10] usb 2-1: config 1 interface 28 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 154.024485][ T10] usb 2-1: config 1 interface 28 has no altsetting 0 [ 154.035509][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0473, bcdDevice=e4.34 [ 154.045028][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.053410][ T10] usb 2-1: Product: syz [ 154.057674][ T10] usb 2-1: Manufacturer: syz [ 154.062689][ T10] usb 2-1: SerialNumber: syz [ 154.080907][ T6981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.090241][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 154.108150][ T10] ipaq 2-1:1.28: PocketPC PDA converter detected [ 154.135592][ T5932] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.144662][ T5932] usb 3-1: config 1 interface 0 has no altsetting 0 [ 154.173334][ T5932] usb 3-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 154.182947][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 154.189112][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.197385][ T5932] usb 3-1: Product: syz [ 154.204202][ T5932] usb 3-1: Manufacturer: syz [ 154.210252][ T5932] usb 3-1: SerialNumber: syz [ 154.210356][ T5906] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 154.224520][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.236511][ T5906] usb 4-1: config 0 has no interface number 0 [ 154.242816][ T5906] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.255899][ T5906] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.267187][ T5906] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.279290][ T5906] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.293151][ T5906] usb 4-1: config 0 interface 52 has no altsetting 0 [ 154.300055][ T5906] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 154.309492][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.313655][ T6981] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 154.321563][ T5906] usb 4-1: config 0 descriptor?? [ 154.345107][ T6981] veth0_vlan: left promiscuous mode [ 154.353354][ T6981] veth0_vlan: entered promiscuous mode [ 154.361775][ T6981] team0: Device veth0_vlan failed to register rx_handler [ 154.418944][ T5821] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 154.430231][ T6981] tracefs: Unknown parameter ' [ 154.430231][ T6981] ' [ 154.458097][ T7003] fuse: Unknown parameter 'ÿÿ0x0000000000000006' [ 154.466091][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.478920][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.490967][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.503242][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.519481][ T7009] overlayfs: conflicting lowerdir path [ 154.528379][ T10] ipaq 2-1:1.28: probe with driver ipaq failed with error -71 [ 154.541690][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.546205][ T5932] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input21 [ 154.555551][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.566558][ T10] usb 2-1: USB disconnect, device number 42 [ 154.581000][ T5179] bcm5974 3-1:1.0: could not read from device [ 154.588886][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 154.597859][ T5906] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input22 [ 154.612397][ T5179] bcm5974 3-1:1.0: could not read from device [ 154.625089][ T5821] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=79.ba [ 154.635971][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.637462][ T5179] bcm5974 3-1:1.0: could not read from device [ 154.648748][ T5932] usb 3-1: USB disconnect, device number 43 [ 154.656953][ T5179] bcm5974 3-1:1.0: could not read from device [ 154.669974][ T5821] usb 1-1: Product: syz [ 154.681740][ T5821] usb 1-1: Manufacturer: syz [ 154.686385][ T5821] usb 1-1: SerialNumber: syz [ 154.710454][ T5821] usb 1-1: config 0 descriptor?? [ 154.940133][ T5821] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 155.147278][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.163332][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.176212][ T5912] usb 1-1: USB disconnect, device number 51 [ 155.379037][ T5870] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 155.541785][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.553318][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 155.564273][ T5870] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 155.573434][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.584463][ T5870] usb 2-1: config 0 descriptor?? [ 155.590251][ T7015] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.751449][ T7021] netlink: 'syz.0.328': attribute type 7 has an invalid length. [ 156.009483][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 156.018757][ T5870] glorious 0003:22D4:1503.000A: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.1-1/input0 [ 156.169037][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 156.170241][ T7024] could not allocate digest TFM handle ghash-ce-sync [ 156.178142][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 156.197065][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 156.216192][ T5821] usb 2-1: USB disconnect, device number 43 [ 156.224591][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.250855][ T10] usb 1-1: config 0 descriptor?? [ 156.639108][ T5870] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 156.664208][ T10] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 156.786513][ T5912] usb 4-1: USB disconnect, device number 45 [ 156.793825][ T5870] usb 3-1: device descriptor read/64, error -71 [ 157.039978][ T5870] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 157.178978][ T5870] usb 3-1: device descriptor read/64, error -71 [ 157.218966][ T5912] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 157.289815][ T5870] usb usb3-port1: attempt power cycle [ 157.380885][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.391347][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.401970][ T5912] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.432274][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.449306][ T5912] usb 4-1: SerialNumber: syz [ 157.452934][ T7062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.342'. [ 157.465379][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'. [ 157.600744][ T43] usb 1-1: USB disconnect, device number 52 [ 157.633758][ T5870] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 157.667033][ T5912] usb 4-1: 0:2 : does not exist [ 157.686864][ T5870] usb 3-1: device descriptor read/8, error -71 [ 157.736582][ T5912] usb 4-1: USB disconnect, device number 46 [ 157.805629][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.868249][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 157.920713][ T7078] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x47524247, 8, 0, 0, 0) [ 157.958960][ T5870] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 157.979865][ T5870] usb 3-1: device descriptor read/8, error -71 [ 158.019057][ T10] usb 2-1: device descriptor read/64, error -71 [ 158.089244][ T5870] usb usb3-port1: unable to enumerate USB device [ 158.260174][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 158.409051][ T10] usb 2-1: device descriptor read/64, error -71 [ 158.519208][ T10] usb usb2-port1: attempt power cycle [ 158.569074][ T5912] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 158.719332][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 158.726240][ T5912] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 158.736664][ T5912] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 158.746678][ T5912] usb 1-1: config 0 has no interface number 0 [ 158.754509][ T5912] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 158.763527][ T5912] usb 1-1: config 0 has no interface number 0 [ 158.771362][ T5912] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 158.780099][ T5912] usb 1-1: config 0 has no interface number 0 [ 158.787844][ T5912] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 158.797398][ T5912] usb 1-1: config 0 has no interface number 0 [ 158.805912][ T5912] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 158.814628][ T5912] usb 1-1: config 0 has no interface number 0 [ 158.822826][ T5912] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 158.831180][ T5912] usb 1-1: config 0 has no interface number 0 [ 158.839218][ T5912] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 158.847647][ T5912] usb 1-1: config 0 has no interface number 0 [ 158.856350][ T5912] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 158.858940][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 158.864616][ T5912] usb 1-1: config 0 has no interface number 0 [ 158.882347][ T5912] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 158.891601][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.892365][ T10] usb 2-1: device descriptor read/8, error -71 [ 158.901713][ T5912] usb 1-1: Product: syz [ 158.911325][ T5912] usb 1-1: Manufacturer: syz [ 158.915961][ T5912] usb 1-1: SerialNumber: syz [ 158.923388][ T5912] usb 1-1: config 0 descriptor?? [ 158.928952][ T5906] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 158.938370][ T5912] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 159.079175][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 159.086961][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.100737][ T5906] usb 4-1: New USB device found, idVendor=0711, idProduct=0950, bcdDevice= 6.9d [ 159.111285][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.119574][ T5906] usb 4-1: Product: syz [ 159.123908][ T5906] usb 4-1: Manufacturer: syz [ 159.128536][ T5906] usb 4-1: SerialNumber: syz [ 159.137165][ T5906] usb 4-1: config 0 descriptor?? [ 159.148657][ T5912] etas_es58x 1-1:0.2: could not retrieve the product info string [ 159.151129][ T5906] sisusb 4-1:0.0: Invalid USB2VGA device [ 159.164598][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 159.173391][ T5906] sisusb 4-1:0.0: probe with driver sisusb failed with error -22 [ 159.199588][ T10] usb 2-1: device descriptor read/8, error -71 [ 159.321189][ T10] usb usb2-port1: unable to enumerate USB device [ 159.351093][ T24] usb 4-1: USB disconnect, device number 47 [ 159.720000][ C1] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x3030. [ 159.731140][ C1] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 159.739159][ C1] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG [ 159.747593][ C1] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 159.748107][ T5489] etas_es58x 1-1:0.2 can0: bit-timing not yet defined [ 159.758574][ C1] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 159.758593][ C1] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG [ 159.759244][ C1] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 159.792504][ C1] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 159.800993][ C1] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG [ 159.809414][ C1] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 159.820566][ C1] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 159.828647][ C1] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG [ 159.836564][ C1] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 159.847780][ C1] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 159.855787][ C1] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG [ 159.863645][ C1] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 159.874854][ C1] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 159.882835][ C1] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG [ 159.891202][ C1] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 159.902983][ C1] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 159.911266][ C1] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG [ 159.919120][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.925789][ C1] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 159.936849][ C1] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 159.945295][ C1] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG [ 159.953100][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.167000][ C1] etas_es58x 1-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 160.176531][ C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 160.176578][ T5489] etas_es58x 1-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 160.185824][ C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 160.185883][ C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 160.214030][ C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 160.223236][ C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 160.232663][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.247967][ T24] usb 1-1: USB disconnect, device number 53 [ 160.262932][ T24] etas_es58x 1-1:0.2: Disconnecting syz syz [ 160.263720][ T7139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.659220][ T5870] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 160.823337][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 160.832495][ T7163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.843819][ T7160] netlink: 'syz.1.362': attribute type 12 has an invalid length. [ 160.869973][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.889133][ T5870] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 160.910417][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.921421][ T5870] usb 3-1: config 0 descriptor?? [ 160.939628][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 161.342223][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00 [ 161.361897][ T5870] pwc: recv_control_msg error -32 req 02 val 2700 [ 161.388945][ T5906] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 161.439059][ T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 161.566966][ T5906] usb 4-1: not running at top speed; connect to a high speed hub [ 161.584091][ T5906] usb 4-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 161.617613][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.636997][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 161.638267][ T5906] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 161.691298][ T5906] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.706928][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.731251][ T24] usb 1-1: config 0 has an invalid interface number: 142 but max is 0 [ 161.745527][ T5906] usb 4-1: Product: syz [ 161.748903][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.755653][ T5906] usb 4-1: Manufacturer: syz [ 161.773230][ T5870] pwc: recv_control_msg error -71 req 04 val 1000 [ 161.787262][ T24] usb 1-1: config 0 has no interface number 0 [ 161.797516][ T24] usb 1-1: config 0 interface 142 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.807647][ T5906] usb 4-1: SerialNumber: syz [ 161.815138][ T5870] pwc: recv_control_msg error -71 req 04 val 1300 [ 161.839280][ T5870] pwc: recv_control_msg error -71 req 04 val 1400 [ 161.860250][ T24] usb 1-1: config 0 interface 142 has no altsetting 0 [ 161.878655][ T5870] pwc: recv_control_msg error -71 req 02 val 2000 [ 161.890725][ T5870] pwc: recv_control_msg error -71 req 02 val 2100 [ 161.908786][ T5870] pwc: recv_control_msg error -71 req 04 val 1500 [ 161.918991][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=48.3b [ 161.928089][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.936345][ T5870] pwc: recv_control_msg error -71 req 02 val 2500 [ 161.955573][ T5870] pwc: recv_control_msg error -71 req 02 val 2400 [ 161.970634][ T24] usb 1-1: Product: syz [ 161.978944][ T5870] pwc: recv_control_msg error -71 req 02 val 2600 [ 161.989287][ T24] usb 1-1: Manufacturer: syz [ 161.993911][ T24] usb 1-1: SerialNumber: syz [ 162.001001][ T5870] pwc: recv_control_msg error -71 req 02 val 2900 [ 162.020700][ T5870] pwc: recv_control_msg error -71 req 02 val 2800 [ 162.028926][ T24] usb 1-1: config 0 descriptor?? [ 162.048828][ T5870] pwc: recv_control_msg error -71 req 04 val 1100 [ 162.062374][ T5906] usb 4-1: 0:2 : does not exist [ 162.069331][ T5870] pwc: recv_control_msg error -71 req 04 val 1200 [ 162.080741][ T5870] pwc: Registered as video103. [ 162.100770][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 162.155450][ T5870] usb 3-1: USB disconnect, device number 48 [ 162.165249][ T5906] usb 4-1: USB disconnect, device number 48 [ 162.189040][ T5912] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 162.226535][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.283063][ T7175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.396686][ T7175] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 162.409242][ T5912] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 162.449432][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.467364][ T5912] usb 2-1: Product: syz [ 162.477533][ T5912] usb 2-1: Manufacturer: syz [ 162.484324][ T5912] usb 2-1: SerialNumber: syz [ 162.490286][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.142/input/input25 [ 162.503655][ T5912] usb 2-1: config 0 descriptor?? [ 162.511937][ T5179] bcm5974 1-1:0.142: could not read from device [ 162.514957][ T5912] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 162.568495][ T24] usb 1-1: USB disconnect, device number 54 [ 162.580367][ T5179] bcm5974 1-1:0.142: could not read from device [ 162.595688][ T5179] bcm5974 1-1:0.142: could not read from device [ 162.700291][ T6116] udevd[6116]: Error opening device "/dev/input/event4": No such file or directory [ 162.710935][ T6116] udevd[6116]: Unable to EVIOCGABS device "/dev/input/event4" [ 162.724062][ T5912] gspca_sq905c: sq905c_read: usb_control_msg failed (-32) [ 162.738913][ T5912] sq905c 2-1:0.0: Reading version command failed [ 162.745582][ T6116] udevd[6116]: Unable to EVIOCGABS device "/dev/input/event4" [ 162.754104][ T5912] sq905c 2-1:0.0: probe with driver sq905c failed with error -32 [ 162.764522][ T6116] udevd[6116]: Unable to EVIOCGABS device "/dev/input/event4" [ 162.780904][ T6116] udevd[6116]: Unable to EVIOCGABS device "/dev/input/event4" [ 162.789475][ T5144] Bluetooth: hci3: command 0x0405 tx timeout [ 162.802361][ T7210] loop9: detected capacity change from 0 to 7 [ 162.832232][ T7210] buffer_io_error: 11 callbacks suppressed [ 162.832249][ T7210] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.859540][ T7210] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.883952][ T7210] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.886413][ T7213] usb usb8: usbfs: process 7213 (syz.3.370) did not claim interface 0 before use [ 163.066438][ T7210] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.102656][ T7210] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.162763][ T7210] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.189270][ T7210] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.218550][ T7210] ldm_validate_partition_table(): Disk read failed. [ 163.228058][ T7210] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.249336][ T7210] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.270333][ T7210] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.279333][ T7210] Dev loop9: unable to read RDB block 0 [ 163.285528][ T7210] loop9: unable to read partition table [ 163.291871][ T7210] loop9: partition table beyond EOD, truncated [ 163.298759][ T7210] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 163.298759][ T7210] ) failed (rc=-5) [ 164.080295][ T5912] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 164.239535][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 164.246962][ T5912] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 164.255630][ T5912] usb 4-1: config 0 has no interface number 0 [ 164.262162][ T5912] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 164.278932][ T5912] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 164.289487][ T5912] usb 4-1: config 0 interface 41 has no altsetting 0 [ 164.299600][ T5912] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 164.311119][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.323850][ T5912] usb 4-1: Product: syz [ 164.331654][ T5912] usb 4-1: Manufacturer: syz [ 164.338612][ T5912] usb 4-1: SerialNumber: syz [ 164.350848][ T5912] usb 4-1: config 0 descriptor?? [ 164.367060][ T7221] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 164.376929][ T7221] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 164.611146][ T7221] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 164.619512][ T7221] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 164.935390][ T10] usb 2-1: USB disconnect, device number 48 [ 165.418998][ T24] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 165.436188][ T5912] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 165.467878][ T5912] usb 4-1: USB disconnect, device number 49 [ 165.509014][ T5871] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 165.568943][ T5821] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 165.579130][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 165.669009][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 165.675751][ T5871] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 165.686207][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 165.698956][ T5821] usb 1-1: device descriptor read/64, error -71 [ 165.699776][ T5871] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.715171][ T24] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 165.722709][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.734415][ T5871] usb 3-1: config 0 descriptor?? [ 165.742589][ T5871] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 165.889053][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 165.894747][ T24] usb usb2-port1: attempt power cycle [ 165.938967][ T5821] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 165.941956][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.955236][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.984424][ T10] usb 3-1: USB disconnect, device number 49 [ 166.061323][ T7257] kvm: user requested TSC rate below hardware speed [ 166.071770][ T7257] netlink: 'syz.3.384': attribute type 5 has an invalid length. [ 166.088978][ T5821] usb 1-1: device descriptor read/64, error -71 [ 166.200247][ T5821] usb usb1-port1: attempt power cycle [ 166.249168][ T24] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 166.272002][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 166.359000][ T10] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 166.399080][ T24] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 166.419583][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 166.425175][ T24] usb usb2-port1: unable to enumerate USB device [ 166.521916][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.531853][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 166.544948][ T5821] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 166.552978][ T10] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 166.563689][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.573565][ T10] usb 3-1: config 0 descriptor?? [ 166.578989][ T5871] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 166.587625][ T5821] usb 1-1: device descriptor read/8, error -71 [ 166.730680][ T5871] usb 4-1: config 2 has an invalid interface number: 201 but max is 0 [ 166.739991][ T5871] usb 4-1: config 2 has no interface number 0 [ 166.746200][ T5871] usb 4-1: config 2 interface 201 has no altsetting 0 [ 166.755248][ T5871] usb 4-1: New USB device found, idVendor=05ac, idProduct=c712, bcdDevice=9d.92 [ 166.764427][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.772525][ T5871] usb 4-1: Product: syz [ 166.776828][ T5871] usb 4-1: Manufacturer: syz [ 166.781639][ T5871] usb 4-1: SerialNumber: syz [ 166.829113][ T5821] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 166.849848][ T5821] usb 1-1: device descriptor read/8, error -71 [ 166.959375][ T5821] usb usb1-port1: unable to enumerate USB device [ 166.995478][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.004354][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.013907][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.015048][ T10] holtek 0003:1241:5015.000C: unknown main item tag 0x0 [ 167.023613][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.031428][ T10] holtek 0003:1241:5015.000C: unknown main item tag 0x0 [ 167.045797][ T10] holtek 0003:1241:5015.000C: unknown main item tag 0x0 [ 167.046774][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.054331][ T10] holtek 0003:1241:5015.000C: unknown main item tag 0x0 [ 167.064082][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.076434][ T10] holtek 0003:1241:5015.000C: unknown main item tag 0x0 [ 167.082397][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.096279][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.098023][ T10] holtek 0003:1241:5015.000C: hidraw0: USB HID vc.a0 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 167.129324][ T7269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.138987][ T10] holtek 0003:1241:5015.000C: no inputs found [ 167.142450][ T7269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.202083][ T5871] usb 4-1: USB disconnect, device number 50 [ 167.245117][ T24] usb 3-1: USB disconnect, device number 50 [ 167.246277][ T7274] netlink: 156 bytes leftover after parsing attributes in process `syz.3.389'. [ 167.260650][ T7274] netlink: 'syz.3.389': attribute type 3 has an invalid length. [ 168.208895][ T7291] input: syz1 as /devices/virtual/input/input26 [ 168.363648][ T7295] netlink: 48 bytes leftover after parsing attributes in process `syz.3.396'. [ 168.375263][ T7295] netlink: 'syz.3.396': attribute type 8 has an invalid length. [ 168.469402][ T7301] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.398'. [ 168.469402][ T7300] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.398'. [ 168.533627][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 168.619904][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 168.639041][ T5871] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 168.757422][ T7311] netlink: 'syz.2.401': attribute type 46 has an invalid length. [ 168.789057][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 168.799685][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 168.799831][ T10] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.818232][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.821778][ T5871] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 168.827211][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 168.846830][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.853784][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.857855][ T5871] usb 4-1: Product: syz [ 168.871296][ T5871] usb 4-1: Manufacturer: syz [ 168.873060][ T10] usb 2-1: config 0 descriptor?? [ 168.881443][ T5871] usb 4-1: SerialNumber: syz [ 168.901724][ T5871] usb 4-1: config 0 descriptor?? [ 169.101940][ T7293] vivid-000: disconnect [ 169.133979][ T5871] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 169.141192][ T5821] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 169.143251][ T5871] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 169.164546][ T5871] usb 4-1: USB disconnect, device number 51 [ 169.312678][ T5821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.327026][ T5821] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.339273][ T5821] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 169.350961][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.362928][ T7292] vivid-000: reconnect [ 169.378977][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 169.385366][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 169.399816][ T5821] usb 3-1: SerialNumber: syz [ 169.421271][ T10] usb 2-1: USB disconnect, device number 53 [ 169.573985][ T7326] input: syz1 as /devices/virtual/input/input27 [ 169.630857][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'. [ 169.646090][ T7313] overlay: ./file0 is not a directory [ 169.663750][ T5821] usb 3-1: 0:2 : does not exist [ 169.694510][ T5821] usb 3-1: USB disconnect, device number 51 [ 169.742640][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.843106][ T7328] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 169.853580][ T7328] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 170.047659][ T7337] netlink: 'syz.1.410': attribute type 47 has an invalid length. [ 170.099463][ T5871] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 170.169051][ T43] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 170.291201][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.312802][ T5871] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 170.330454][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.343222][ T5871] usb 1-1: config 0 descriptor?? [ 170.357082][ T43] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 170.369744][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.380550][ T43] usb 4-1: config 0 has no interface number 0 [ 170.386800][ T43] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.400602][ T43] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 170.412358][ T43] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 170.424068][ T43] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 170.434468][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.447738][ T43] usb 4-1: config 0 descriptor?? [ 170.457977][ T43] ldusb 4-1:0.55: Interrupt in endpoint not found [ 170.528955][ T5932] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 170.691764][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.704947][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.719492][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.734323][ T5932] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.744918][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.758160][ T5871] hid (null): global environment stack underflow [ 170.759018][ T5821] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 170.777256][ T5871] logitech-djreceiver 0003:046D:C71F.000D: global environment stack underflow [ 170.787041][ T5932] usb 2-1: config 0 descriptor?? [ 170.788294][ T5871] logitech-djreceiver 0003:046D:C71F.000D: item 0 4 1 11 parsing failed [ 170.804620][ T5871] logitech-djreceiver 0003:046D:C71F.000D: logi_dj_probe: parse failed [ 170.814673][ T5871] logitech-djreceiver 0003:046D:C71F.000D: probe with driver logitech-djreceiver failed with error -22 [ 170.918957][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 170.925489][ T5821] usb 3-1: no configurations [ 170.930292][ T5821] usb 3-1: can't read configurations, error -22 [ 170.967262][ T7330] netlink: 9 bytes leftover after parsing attributes in process `syz.0.408'. [ 170.979645][ T7330] gretap0: entered promiscuous mode [ 170.996640][ T7330] netlink: 5 bytes leftover after parsing attributes in process `syz.0.408'. [ 171.009550][ T7330] 0ªî{X¹¦: renamed from gretap0 [ 171.018674][ T7330] 0ªî{X¹¦: left promiscuous mode [ 171.026095][ T7330] 0ªî{X¹¦: entered allmulticast mode [ 171.035960][ T7330] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 171.065273][ T5871] usb 1-1: USB disconnect, device number 59 [ 171.068958][ T5821] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 171.228600][ T5932] plantronics 0003:047F:FFFF.000E: bogus close delimiter [ 171.236756][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 171.243567][ T5932] plantronics 0003:047F:FFFF.000E: item 0 0 2 10 parsing failed [ 171.253224][ T5821] usb 3-1: no configurations [ 171.259397][ T5932] plantronics 0003:047F:FFFF.000E: parse failed [ 171.266394][ T5932] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 171.277511][ T5821] usb 3-1: can't read configurations, error -22 [ 171.285316][ T5821] usb usb3-port1: attempt power cycle [ 171.648951][ T5821] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 171.672039][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 171.678397][ T5821] usb 3-1: no configurations [ 171.683300][ T5821] usb 3-1: can't read configurations, error -22 [ 171.741796][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'. [ 171.818932][ T5821] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 171.849646][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 171.855326][ T5821] usb 3-1: no configurations [ 171.861169][ T5821] usb 3-1: can't read configurations, error -22 [ 171.868149][ T5821] usb usb3-port1: unable to enumerate USB device [ 172.746824][ T5871] usb 4-1: USB disconnect, device number 52 [ 172.869098][ T5912] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 173.019133][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 173.026089][ T5912] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 173.035437][ T5912] usb 1-1: config 0 has no interface number 0 [ 173.041781][ T5912] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 173.051773][ T5912] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 173.064225][ T5912] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 173.073333][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.081615][ T5912] usb 1-1: Product: syz [ 173.085766][ T5912] usb 1-1: Manufacturer: syz [ 173.090836][ T5912] usb 1-1: SerialNumber: syz [ 173.097221][ T5912] usb 1-1: config 0 descriptor?? [ 173.103050][ T7356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 173.110864][ T7356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 173.159082][ T5871] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 173.290685][ T43] usb 2-1: USB disconnect, device number 54 [ 173.324519][ T7356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 173.354591][ T5871] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 52, changing to 7 [ 173.366925][ T7356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 173.394917][ T5871] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9272, setting to 1024 [ 173.407879][ T5871] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.425578][ T5871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 173.437377][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.446943][ T5871] usb 4-1: SerialNumber: syz [ 173.607889][ T5912] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 173.619159][ T5912] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 173.629967][ T5912] asix 1-1:0.251: probe with driver asix failed with error -5 [ 173.661855][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.671230][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.680759][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.690133][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.699983][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.709912][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.718592][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.727375][ T5821] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 173.728359][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.744413][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.754668][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.769009][ T43] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 173.781047][ T5871] usbtest 4-1:1.0: Linux user mode ISO test driver [ 173.787686][ T5871] usbtest 4-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 173.801185][ T5871] usb 4-1: USB disconnect, device number 53 [ 173.881856][ T5821] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 173.890238][ T5821] usb 3-1: config 0 has no interface number 0 [ 173.900015][ T5821] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 173.909351][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.917379][ T5821] usb 3-1: Product: syz [ 173.921620][ T5821] usb 3-1: Manufacturer: syz [ 173.926224][ T5821] usb 3-1: SerialNumber: syz [ 173.933608][ T43] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 173.934243][ T5821] usb 3-1: config 0 descriptor?? [ 173.944342][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.957846][ T43] usb 2-1: Product: syz [ 173.959057][ T5821] hub 3-1:0.217: bad descriptor, ignoring hub [ 173.962674][ T43] usb 2-1: Manufacturer: syz [ 173.968386][ T5821] hub 3-1:0.217: probe with driver hub failed with error -5 [ 173.981247][ T43] usb 2-1: SerialNumber: syz [ 173.990191][ T43] usb 2-1: config 0 descriptor?? [ 173.998228][ T43] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 174.006497][ T43] usb 2-1: setting power ON [ 174.011183][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 174.021258][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 174.036031][ T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 174.046669][ T43] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 174.172795][ T5821] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 174.184676][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.194983][ T5821] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 174.203774][ T5821] usb 3-1: media controller created [ 174.204421][ T7363] loop9: detected capacity change from 0 to 7 [ 174.220952][ T7363] Dev loop9: unable to read RDB block 7 [ 174.227588][ T7363] loop9: unable to read partition table [ 174.229732][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.235193][ T7363] loop9: partition table beyond EOD, truncated [ 174.248043][ T7363] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 174.301012][ T7363] Dev loop9: unable to read RDB block 7 [ 174.306870][ T5821] DVB: Unable to find symbol dib7000p_attach() [ 174.307539][ T7363] loop9: unable to read partition table [ 174.323682][ T7363] loop9: partition table beyond EOD, truncated [ 174.329472][ T5821] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 174.333261][ T7363] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 174.379414][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.400325][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.414070][ T10] usb 2-1: USB disconnect, device number 55 [ 174.422981][ T5821] rc_core: IR keymap rc-dib0700-rc5 not found [ 174.449540][ T5821] Registered IR keymap rc-empty [ 174.456401][ T5821] dvb-usb: could not initialize remote control. [ 174.464859][ T5821] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 174.689319][ T43] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 174.839021][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 174.846484][ T43] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.857029][ T43] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.867421][ T43] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.882187][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 174.891039][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 174.900663][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.908728][ T43] usb 4-1: Product: syz [ 174.913005][ T43] usb 4-1: Manufacturer: syz [ 174.917885][ T43] usb 4-1: SerialNumber: syz [ 175.131442][ T7380] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 175.141255][ T7380] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.425'. [ 175.159590][ T43] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 175.222026][ T7384] geneve0: mtu less than device minimum [ 175.354855][ T5878] usb 4-1: USB disconnect, device number 54 [ 175.365898][ T5878] usblp0: removed [ 175.418417][ T5821] usb 1-1: USB disconnect, device number 60 [ 175.489482][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 175.639270][ T10] usb 2-1: device descriptor read/64, error -71 [ 175.809052][ T5821] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 175.879471][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 175.896942][ T7393] vivid-002: disconnect [ 175.956165][ T7394] vivid-002: reconnect [ 175.964558][ T7392] gfs2: not a GFS2 filesystem [ 175.979002][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 175.987672][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 176.018959][ T5821] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 176.030982][ T10] usb 2-1: device descriptor read/64, error -71 [ 176.040663][ T5821] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 176.059743][ T5821] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 176.061399][ T7396] fuse: Bad value for 'user_id' [ 176.070155][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.075721][ T7396] fuse: Bad value for 'user_id' [ 176.088052][ T5821] usb 1-1: Product: syz [ 176.097808][ T5821] usb 1-1: Manufacturer: syz [ 176.104760][ T5821] usb 1-1: SerialNumber: syz [ 176.113548][ T5821] usb 1-1: config 0 descriptor?? [ 176.119726][ T7390] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 176.137400][ T5821] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 176.144061][ T5821] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 176.151044][ T10] usb usb2-port1: attempt power cycle [ 176.157441][ T5821] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 176.165709][ T5821] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 176.172342][ T5821] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 176.265126][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.278381][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.340563][ T5871] usb 1-1: USB disconnect, device number 61 [ 176.351208][ T5871] mcba_usb 1-1:0.0 can0: device disconnected [ 176.459902][ T5878] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 176.508919][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 176.539681][ T10] usb 2-1: device descriptor read/8, error -71 [ 176.631227][ T5878] usb 4-1: too many endpoints for config 0 interface 0 altsetting 7: 34, using maximum allowed: 30 [ 176.644159][ T5878] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.656996][ T5878] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 176.675182][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.682758][ T5878] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 176.693430][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.705162][ T5878] usb 4-1: config 0 descriptor?? [ 176.779189][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 176.810302][ T10] usb 2-1: device descriptor read/8, error -71 [ 176.916396][ T7421] tmpfs: Bad value for 'mpol' [ 176.934030][ T10] usb usb2-port1: unable to enumerate USB device [ 177.139754][ T5878] wacom 0003:056A:0094.000F: Using device in hidraw-only mode [ 177.155852][ T5878] wacom 0003:056A:0094.000F: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 177.721841][ T7448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.731283][ T7448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.995088][ T30] audit: type=1800 audit(1760327504.221:10): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.439" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 178.106614][ T7469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.118216][ T7469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.237869][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.249785][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.329691][ T7481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.342401][ T7481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.579042][ T5821] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 178.734831][ T5821] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 178.745170][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.754610][ T5821] usb 2-1: Product: syz [ 178.759295][ T5821] usb 2-1: Manufacturer: syz [ 178.764800][ T5821] usb 2-1: SerialNumber: syz [ 178.772474][ T5821] usb 2-1: config 0 descriptor?? [ 179.033171][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.043746][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.166747][ T10] usb 4-1: USB disconnect, device number 55 [ 179.387442][ T5821] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 179.394275][ T5821] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 179.402467][ T5821] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 179.414545][ T5821] usb 2-1: USB disconnect, device number 60 [ 179.580189][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 179.696777][ T7498] mmap: syz.2.450 (7498) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 179.746196][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.758571][ T7498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.767648][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 179.777724][ T7498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.789455][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.811796][ T10] usb 4-1: config 0 descriptor?? [ 179.843107][ T10] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 179.855482][ T10] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 179.878236][ T7503] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.988196][ T7511] netlink: 36 bytes leftover after parsing attributes in process `syz.1.453'. [ 180.056010][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.076212][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.086249][ T5906] usb 4-1: USB disconnect, device number 56 [ 180.116023][ T7517] Error: Driver 'c6xdigio' is already registered, aborting... [ 180.450260][ T5912] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 180.500361][ T7531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.510459][ T7531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.619316][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 180.631083][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.649465][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 180.661920][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 180.676290][ T5912] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 180.679401][ T7533] vxcan0: tx address claim with dest, not broadcast [ 180.687272][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.712731][ T5912] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 180.723455][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 180.733592][ T5912] usb 2-1: SerialNumber: syz [ 180.742893][ T5912] usb 2-1: config 0 descriptor?? [ 180.751142][ T5912] hso 2-1:0.0: Can't find BULK OUT endpoint [ 180.955898][ T5912] usb 2-1: USB disconnect, device number 61 [ 181.105793][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.117265][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.135527][ T5831] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 181.260826][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.271455][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.286198][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.289790][ T5871] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 181.300854][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.469028][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 181.477151][ T5871] usb 1-1: config 12 has an invalid interface number: 84 but max is 1 [ 181.488565][ T5871] usb 1-1: config 12 has an invalid interface number: 110 but max is 1 [ 181.498878][ T5871] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 181.510019][ T5871] usb 1-1: config 12 has no interface number 0 [ 181.516856][ T5871] usb 1-1: config 12 has no interface number 1 [ 181.523557][ T5871] usb 1-1: config 12 interface 110 altsetting 223 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.538756][ T5871] usb 1-1: config 12 interface 84 has no altsetting 0 [ 181.546466][ T5871] usb 1-1: config 12 interface 110 has no altsetting 0 [ 181.559372][ T5871] usb 1-1: string descriptor 0 read error: -22 [ 181.566009][ T5871] usb 1-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=f6.1b [ 181.569012][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 181.575871][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.619746][ T5871] belkin_sa 1-1:12.84: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 181.647398][ T5871] usb 1-1: bcdDevice: f61b, bfc: 0 [ 181.654740][ T5871] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 181.670805][ T5871] cdc_ether 1-1:12.110: skipping garbage [ 181.676671][ T5871] cdc_ether 1-1:12.110: skipping garbage [ 181.684795][ T5871] usb 1-1: bad CDC descriptors [ 181.691247][ T5871] belkin_sa 1-1:12.110: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 181.704999][ T5871] usb 1-1: bcdDevice: f61b, bfc: 0 [ 181.719063][ T5871] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 181.753242][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 181.763368][ T7558] sd 0:0:1:0: PR command failed: 1026 [ 181.769249][ T7558] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 181.776351][ T10] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 181.787991][ T7558] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 181.800434][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.817018][ T10] usb 4-1: config 1 has no interface number 0 [ 181.825178][ T10] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 181.839501][ T10] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 181.848321][ T5871] usb 1-1: USB disconnect, device number 62 [ 181.886950][ T5871] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 181.901186][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.905213][ T5871] belkin_sa 1-1:12.84: device disconnected [ 181.920669][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.920695][ T10] usb 4-1: Product: syz [ 181.920707][ T10] usb 4-1: Manufacturer: syz [ 181.920721][ T10] usb 4-1: SerialNumber: syz [ 181.964622][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 181.967692][ T5871] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 181.982718][ T10] cdc_ncm 4-1:1.1: bind() failure [ 181.991409][ T5871] belkin_sa 1-1:12.110: device disconnected [ 182.179890][ T10] usb 4-1: USB disconnect, device number 57 [ 182.207464][ T7564] netlink: 'syz.1.468': attribute type 10 has an invalid length. [ 182.221378][ T7564] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 182.648968][ T10] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 182.810790][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 182.821385][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 182.840137][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 39485, setting to 64 [ 182.857069][ T10] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 182.869891][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.878917][ T10] usb 1-1: Product: syz [ 182.886511][ T10] usb 1-1: Manufacturer: syz [ 182.892686][ T10] usb 1-1: SerialNumber: syz [ 182.908205][ T10] usb 1-1: config 0 descriptor?? [ 182.922306][ T7568] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.938664][ T10] radioshark2 1-1:0.0: Invalid radioSHARK2 device [ 182.947337][ T10] radioshark2 1-1:0.0: probe with driver radioshark2 failed with error -22 [ 183.157060][ T10] usb 1-1: USB disconnect, device number 63 [ 183.171141][ T5821] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 183.276862][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.287136][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.297628][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.308111][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.319686][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.330385][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.344977][ T5821] usb 4-1: config index 0 descriptor too short (expected 4644, got 36) [ 183.355520][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.371630][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.387110][ T5821] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 183.398273][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.414891][ T5821] usb 4-1: config 0 descriptor?? [ 183.838184][ T5821] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 183.848083][ T5821] hid_mf 0003:0079:1846.0010: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 183.860020][ T5821] hid_mf 0003:0079:1846.0010: Invalid report, this should never happen! [ 183.868650][ T5821] hid_mf 0003:0079:1846.0010: Force feedback init failed. [ 183.889324][ T43] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 183.959128][ T5871] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 184.028969][ T43] usb 2-1: device descriptor read/64, error -71 [ 184.039268][ T5821] usb 4-1: USB disconnect, device number 58 [ 184.099980][ T30] audit: type=1326 audit(1760327510.331:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bc98eec9 code=0x7fc00000 [ 184.121045][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.125136][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.137457][ T5871] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.166044][ T5871] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.195741][ T5871] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 184.205327][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.215119][ T5871] usb 1-1: Product: syz [ 184.219787][ T5871] usb 1-1: Manufacturer: syz [ 184.224962][ T5871] usb 1-1: SerialNumber: syz [ 184.243540][ T5871] hub 1-1:1.0: bad descriptor, ignoring hub [ 184.258938][ T5871] hub 1-1:1.0: probe with driver hub failed with error -5 [ 184.289357][ T43] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 184.303440][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 184.373653][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.383693][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.406715][ T7613] syzkaller1: entered promiscuous mode [ 184.413979][ T7613] syzkaller1: entered allmulticast mode [ 184.429130][ T43] usb 2-1: device descriptor read/64, error -71 [ 184.447809][ T5871] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 184.480062][ T5871] usb 1-1: USB disconnect, device number 64 [ 184.490476][ T5871] usblp0: removed [ 184.541047][ T43] usb usb2-port1: attempt power cycle [ 184.687424][ T7621] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 184.694130][ T7621] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 184.704447][ T7621] vhci_hcd vhci_hcd.0: Device attached [ 184.715232][ T7622] vhci_hcd: connection closed [ 184.716428][ T67] vhci_hcd: stop threads [ 184.728701][ T67] vhci_hcd: release socket [ 184.733629][ T67] vhci_hcd: disconnect device [ 184.878962][ T43] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 184.899584][ T43] usb 2-1: device descriptor read/8, error -71 [ 185.050750][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.060826][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.074355][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.086127][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.139078][ T43] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 185.160123][ T43] usb 2-1: device descriptor read/8, error -71 [ 185.239085][ T5871] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 185.270453][ T43] usb usb2-port1: unable to enumerate USB device [ 185.400751][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.411532][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.424138][ T5871] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 185.434006][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.442695][ T5871] usb 1-1: Product: syz [ 185.447128][ T5871] usb 1-1: Manufacturer: syz [ 185.452245][ T5871] usb 1-1: SerialNumber: syz [ 185.459546][ T5871] usb 1-1: config 0 descriptor?? [ 185.467463][ T5871] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 185.478583][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.489687][ T5871] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 185.499284][ T5871] usb 1-1: media controller created [ 185.517022][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.555675][ T5871] DVB: Unable to find symbol tda10046_attach() [ 185.562911][ T5871] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 185.572546][ T5871] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 185.609016][ T5821] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 185.773680][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 186, changing to 11 [ 185.787371][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17166, setting to 1024 [ 185.802710][ T5821] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 185.812579][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.829189][ T5821] usb 4-1: config 0 descriptor?? [ 185.921664][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.935694][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.947321][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.960998][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.053434][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.066032][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.463503][ T5821] usbhid 4-1:0.0: can't add hid device: -71 [ 186.472588][ T5821] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 186.484318][ T5821] usb 4-1: USB disconnect, device number 59 [ 186.502519][ T5871] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 186.516503][ T5871] usb 1-1: USB disconnect, device number 65 [ 186.564924][ T7602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.988911][ T5878] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 187.136034][ T7667] overlayfs: failed to resolve '/ ': -2 [ 187.156988][ T5878] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 187.170890][ T5878] usb 2-1: config 1 has no interface number 0 [ 187.177562][ T5878] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 187.191975][ T5878] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1023 [ 187.203827][ T5878] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.220830][ T5878] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 187.234950][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.255402][ T5878] usb 2-1: Product: syz [ 187.263121][ T5878] usb 2-1: Manufacturer: syz [ 187.268457][ T5878] usb 2-1: SerialNumber: syz [ 187.285807][ T7660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.399247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 187.429939][ T7677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.442195][ T7677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.490863][ T7660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.711141][ T5878] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 187.907383][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.923315][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.278978][ T5871] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 188.355704][ T5878] usb 2-1: USB disconnect, device number 66 [ 188.373606][ T5878] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 188.449039][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 188.471474][ T5871] usb 4-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 188.494653][ T5871] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 188.503910][ T5871] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.517748][ T5878] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 188.537961][ T5871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.560006][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.577834][ T5871] usb 4-1: Product: syz [ 188.588860][ T5871] usb 4-1: Manufacturer: syz [ 188.605076][ T5871] usb 4-1: SerialNumber: syz [ 188.643522][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.688384][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.852592][ T5871] usb 4-1: USB disconnect, device number 60 [ 188.959161][ T5821] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 188.994887][ T7726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.031091][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.047904][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.050714][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.070924][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.122597][ T5821] usb 1-1: Using ep0 maxpacket: 8 [ 189.143213][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.171651][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.187165][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.204513][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.220111][ T5821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 189.229774][ T5821] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 189.246406][ T5821] usb 1-1: can't read configurations, error -71 [ 189.253450][ T5906] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 189.419306][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 189.431106][ T5906] usb 2-1: config 0 has an invalid interface number: 36 but max is 0 [ 189.444478][ T5906] usb 2-1: config 0 has no interface number 0 [ 189.458628][ T5906] usb 2-1: config 0 interface 36 has no altsetting 0 [ 189.486529][ T5906] usb 2-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=f8.9d [ 189.498859][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.524470][ T5906] usb 2-1: Product: syz [ 189.535733][ T5906] usb 2-1: Manufacturer: syz [ 189.548680][ T5906] usb 2-1: SerialNumber: syz [ 189.557365][ T5906] usb 2-1: config 0 descriptor?? [ 189.709213][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 189.786481][ T5906] uvcvideo 2-1:0.36: probe with driver uvcvideo failed with error -22 [ 189.818314][ T5906] usb 2-1: USB disconnect, device number 67 [ 189.888983][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 189.913652][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.936297][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.957986][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.991590][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.992968][ T7755] openvswitch: netlink: IP tunnel attribute has 95 unknown bytes. [ 190.013200][ T7756] netlink: 156 bytes leftover after parsing attributes in process `syz.2.519'. [ 190.015562][ T9] usb 4-1: config 0 descriptor?? [ 190.040005][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.519'. [ 190.065143][ T9] hub 4-1:0.0: USB hub found [ 190.268998][ T9] hub 4-1:0.0: 1 port detected [ 190.470418][ T7740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.489553][ T7740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.500623][ T7776] 9pnet_fd: Insufficient options for proto=fd [ 190.627856][ T9] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 190.646185][ T9] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 190.656476][ T7785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.671373][ T7785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.681472][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 190.698241][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 190.732653][ T9] usb 4-1: USB disconnect, device number 61 [ 191.058342][ T7798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'. [ 191.244519][ T7806] netlink: 'syz.1.533': attribute type 12 has an invalid length. [ 191.322101][ T7808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.336512][ T7808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.439052][ T5871] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 191.589138][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 191.600956][ T5871] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 191.611033][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.620517][ T5871] usb 4-1: Product: syz [ 191.625659][ T5871] usb 4-1: Manufacturer: syz [ 191.630583][ T5871] usb 4-1: SerialNumber: syz [ 191.640115][ T5871] usb 4-1: config 0 descriptor?? [ 191.649599][ T5871] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 191.662425][ T5871] usb 4-1: Detected FT232H [ 191.851522][ T5871] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 192.092189][ T5871] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 192.140412][ T5878] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 192.339043][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 192.346764][ T5878] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 192.357867][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.383559][ T5878] usb 1-1: config 0 descriptor?? [ 192.395713][ T5878] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 192.414832][ T5878] usb 1-1: Detected FT4232H [ 192.429653][ T7831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.441311][ T7831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.539102][ T9] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 192.609625][ T5878] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 192.621501][ T5878] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 192.632721][ T5878] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 192.650291][ T5878] usb 1-1: USB disconnect, device number 68 [ 192.667202][ T5878] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 192.680001][ T5878] ftdi_sio 1-1:0.0: device disconnected [ 192.711564][ T9] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 192.722950][ T9] usb 2-1: config 0 has no interface number 0 [ 192.729941][ T9] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.742179][ T9] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.755895][ T9] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=22.00 [ 192.769111][ T9] usb 2-1: New USB device strings: Mfr=17, Product=0, SerialNumber=0 [ 192.778075][ T9] usb 2-1: Manufacturer: syz [ 192.786147][ T9] usb 2-1: config 0 descriptor?? [ 193.042131][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.052328][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.293538][ T9] usbhid 2-1:0.7: can't add hid device: -71 [ 193.313485][ T9] usbhid 2-1:0.7: probe with driver usbhid failed with error -71 [ 193.346036][ T9] usb 2-1: USB disconnect, device number 68 [ 193.369413][ T7838] Bluetooth: MGMT ver 1.23 [ 193.649266][ T7847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.671037][ T7847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.721891][ T9] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 193.830601][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 193.844731][ T7854] netlink: 164 bytes leftover after parsing attributes in process `syz.2.549'. [ 193.879932][ T5906] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 193.890845][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 193.909310][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.923479][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.933287][ T9] usb 2-1: Product: syz [ 193.938123][ T9] usb 2-1: Manufacturer: syz [ 193.943872][ T9] usb 2-1: SerialNumber: syz [ 194.040939][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 194.060724][ T5906] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 194.082754][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.105939][ T5906] usb 1-1: config 0 descriptor?? [ 194.234265][ T5871] usb 4-1: USB disconnect, device number 62 [ 194.267951][ T5871] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 194.280689][ T5871] ftdi_sio 4-1:0.0: device disconnected [ 194.319535][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.324227][ T5906] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 194.336598][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.347369][ T5906] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 194.358652][ T5906] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 194.369883][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.381980][ T7840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.393718][ T7840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.405674][ T7840] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 194.625261][ T9] cdc_ncm 2-1:1.0: bind() failure [ 194.625833][ T5871] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 194.638736][ T9] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 194.652574][ T9] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 194.663437][ T9] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 194.683586][ T9] usb 2-1: USB disconnect, device number 69 [ 194.798678][ T5871] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 194.808591][ T5871] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 194.820127][ T5871] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 194.831504][ T5871] usb 4-1: config 220 has no interface number 2 [ 194.839354][ T5871] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 194.857761][ T5871] usb 4-1: config 220 interface 0 has no altsetting 0 [ 194.865166][ T5871] usb 4-1: config 220 interface 76 has no altsetting 0 [ 194.873971][ T5871] usb 4-1: config 220 interface 1 has no altsetting 0 [ 194.885743][ T5871] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 194.897827][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.907949][ T5871] usb 4-1: Product: syz [ 194.912486][ T5871] usb 4-1: Manufacturer: syz [ 194.918509][ T5871] usb 4-1: SerialNumber: syz [ 195.145941][ T5871] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 195.153780][ T5871] uvcvideo 4-1:220.0: No valid video chain found. [ 195.163413][ T5871] usb 4-1: selecting invalid altsetting 0 [ 195.188379][ T5871] usb 4-1: selecting invalid altsetting 0 [ 195.194812][ T5871] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 195.212331][ T5871] usb 4-1: USB disconnect, device number 63 [ 195.246338][ T7873] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.254617][ T7873] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 195.278573][ T7873] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 195.290038][ T7873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.296830][ T7873] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 195.307565][ T7873] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 195.319125][ T7873] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.329347][ T7873] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.343068][ T7873] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.392923][ T7878] netlink: 'syz.1.555': attribute type 10 has an invalid length. [ 195.402112][ T7878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.555'. [ 195.414186][ T7878] dummy0: entered promiscuous mode [ 195.422084][ T7878] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 195.450848][ T7878] fuse: Unknown parameter '' [ 195.495201][ T7880] input: syz0 as /devices/virtual/input/input31 [ 196.007064][ T7906] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.056495][ T43] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 196.113968][ T7906] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.217745][ T43] usb 2-1: device descriptor read/64, error -71 [ 196.237504][ T7906] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.333353][ T7906] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.445431][ T7906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.461307][ T43] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 196.588866][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.601562][ T43] usb 2-1: device descriptor read/64, error -71 [ 196.613927][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.634945][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.660063][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.711539][ T5870] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 196.732111][ T43] usb usb2-port1: attempt power cycle [ 196.826046][ T7940] netlink: 44 bytes leftover after parsing attributes in process `syz.0.567'. [ 196.876380][ T5870] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 196.892840][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 196.901212][ T5870] usb 4-1: Product: syz [ 196.918777][ T5870] usb 4-1: SerialNumber: syz [ 196.931226][ T5870] usb 4-1: config 0 descriptor?? [ 197.084853][ T43] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 197.093043][ T7952] pim6reg10: entered allmulticast mode [ 197.116867][ T43] usb 2-1: device descriptor read/8, error -71 [ 197.296014][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.304768][ T5871] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 197.312813][ T5871] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 197.367327][ T43] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 197.376647][ T5831] Bluetooth: hci3: command 0x0405 tx timeout [ 197.376661][ T5144] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.396642][ T5871] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 197.430290][ T5878] usb 4-1: USB disconnect, device number 64 [ 197.448128][ T43] usb 2-1: device descriptor read/8, error -71 [ 197.457649][ T5871] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 197.600968][ T43] usb usb2-port1: unable to enumerate USB device [ 197.637772][ T7978] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 197.662821][ T7978] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 197.746637][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.757579][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.434634][ T5932] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 198.611043][ T5932] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 198.621783][ T5932] usb 4-1: can't read configurations, error -61 [ 198.767036][ T5932] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 198.832783][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.844398][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.931519][ T5932] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 198.939924][ T5932] usb 4-1: can't read configurations, error -61 [ 198.946548][ T5932] usb usb4-port1: attempt power cycle [ 199.290687][ T5932] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 199.324102][ T5932] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 199.335166][ T5932] usb 4-1: can't read configurations, error -61 [ 199.476965][ T5932] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 199.485891][ T5144] Bluetooth: hci3: command 0x0405 tx timeout [ 199.493562][ T5871] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 199.515787][ T5871] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 199.520352][ T8032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.536508][ T8032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.537865][ T5932] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 199.556532][ T5932] usb 4-1: can't read configurations, error -61 [ 199.563690][ T5932] usb usb4-port1: unable to enumerate USB device [ 199.569894][ T8032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.582229][ T8032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.005876][ T5871] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 200.138050][ T30] audit: type=1326 audit(1760327755.321:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.2.582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3bc98eec9 code=0x0 [ 200.192451][ T5871] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 200.202265][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.210996][ T5871] usb 2-1: Product: syz [ 200.216458][ T5871] usb 2-1: Manufacturer: syz [ 200.221296][ T5871] usb 2-1: SerialNumber: syz [ 200.238332][ T5871] usb 2-1: config 0 descriptor?? [ 200.276572][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.288920][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.305265][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.318157][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.452595][ T5871] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 200.826201][ T30] audit: type=1326 audit(1760327755.996:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.0.586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78e9f8eec9 code=0x0 [ 200.851386][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.876003][ T5871] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 200.890904][ T5871] usb 2-1: USB disconnect, device number 74 [ 201.115675][ T8056] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 201.125771][ T8056] overlayfs: failed to set xattr on upper [ 201.131878][ T8056] overlayfs: ...falling back to redirect_dir=nofollow. [ 201.139993][ T8056] overlayfs: ...falling back to index=off. [ 201.145907][ T8056] overlayfs: ...falling back to uuid=null. [ 201.152314][ T8056] overlayfs: failed to clone lowerpath [ 201.365210][ T8064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.374376][ T8064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.647348][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 201.657430][ T5871] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 201.798275][ T9] usb 4-1: device descriptor read/64, error -71 [ 201.821378][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.849361][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 201.870415][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 201.885053][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 201.909106][ T5871] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 201.922592][ T5871] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 201.931804][ T5871] usb 2-1: Manufacturer: syz [ 201.944779][ T5871] usb 2-1: config 0 descriptor?? [ 201.985964][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.996516][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.040128][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 202.156378][ T30] audit: type=1800 audit(1760327757.317:14): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.593" name="memory.events" dev="tmpfs" ino=716 res=0 errno=0 [ 202.184678][ T9] usb 4-1: device descriptor read/64, error -71 [ 202.188615][ T30] audit: type=1804 audit(1760327757.347:15): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.593" name="/newroot/133/memory.events" dev="tmpfs" ino=716 res=1 errno=0 [ 202.218563][ T5871] rc_core: IR keymap rc-hauppauge not found [ 202.225567][ T5871] Registered IR keymap rc-empty [ 202.231052][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.261545][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.276765][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 202.283885][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 202.301517][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 202.318132][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.322320][ T9] usb usb4-port1: attempt power cycle [ 202.342096][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.362206][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.382456][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.402470][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.433023][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.452856][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.473079][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.493224][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.513304][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.536324][ T5871] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 202.545860][ T5871] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 202.561421][ T5871] usb 2-1: USB disconnect, device number 75 [ 202.684374][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 202.707122][ T9] usb 4-1: device descriptor read/8, error -71 [ 202.915390][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.924993][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.956278][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 202.987413][ T9] usb 4-1: device descriptor read/8, error -71 [ 203.098006][ T9] usb usb4-port1: unable to enumerate USB device [ 203.389439][ T9] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 203.543485][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 203.553793][ T9] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.565810][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.577863][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 203.590678][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 203.602208][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 203.613217][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.621741][ T9] usb 2-1: Product: syz [ 203.626302][ T9] usb 2-1: Manufacturer: syz [ 203.631513][ T9] usb 2-1: SerialNumber: syz [ 203.638429][ T9] usb 2-1: config 0 descriptor?? [ 203.860647][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.869661][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.888211][ T9] usb 2-1: Can not set alternate setting to 1, error: -71 [ 203.896205][ T9] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -71 [ 203.912351][ T9] usb 2-1: USB disconnect, device number 76 [ 204.317781][ T8099] 9p: Unknown access argument Š: -22 [ 204.542562][ T8108] input: syz0 as /devices/virtual/input/input33 [ 204.571327][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.598151][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.609429][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.624180][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.352422][ T5878] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 205.405521][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.417866][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.504913][ T5878] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 205.515942][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.527987][ T5878] usb 4-1: config 0 descriptor?? [ 205.546159][ T5878] usb 4-1: selecting invalid altsetting 1 [ 205.552290][ T5878] flexcop_usb: set interface failed. [ 205.563037][ T5878] b2c2_flexcop_usb 4-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 205.664381][ T5821] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 205.745507][ T9] usb 4-1: USB disconnect, device number 73 [ 205.817143][ T5821] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 205.828127][ T5821] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.841940][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.848629][ T5821] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 205.857812][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.867540][ T5821] usb 2-1: config 0 descriptor?? [ 205.873354][ T8142] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 206.089641][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.101059][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.120087][ T5821] kye 0003:0458:5015.0011: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 206.154913][ T5821] kye 0003:0458:5015.0011: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 206.169337][ T5821] kye 0003:0458:5015.0011: tablet-enabling feature report not found [ 206.178026][ T5821] kye 0003:0458:5015.0011: tablet enabling failed [ 206.278751][ T8151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.287778][ T8151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.326726][ T5821] usb 2-1: USB disconnect, device number 77 [ 206.620541][ T5932] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 206.773193][ T5932] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.781310][ T5932] usb 4-1: config 0 has no interface number 0 [ 206.789430][ T5932] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 206.798764][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.807607][ T5932] usb 4-1: Product: syz [ 206.811927][ T5932] usb 4-1: Manufacturer: syz [ 206.816536][ T5932] usb 4-1: SerialNumber: syz [ 206.824725][ T5932] usb 4-1: config 0 descriptor?? [ 206.875582][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.885646][ T8159] netlink: 132 bytes leftover after parsing attributes in process `syz.1.624'. [ 206.885929][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.048793][ T5932] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 207.060459][ T5932] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 207.072214][ T5932] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 207.081462][ T5932] usb 4-1: media controller created [ 207.105626][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.472457][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.482853][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.170743][ T5932] i2c i2c-3: ec100: i2c rd failed=-110 reg=33 [ 208.294897][ T8179] netlink: 'syz.2.630': attribute type 33 has an invalid length. [ 208.302973][ T8179] netlink: 164 bytes leftover after parsing attributes in process `syz.2.630'. [ 208.316680][ T8181] netlink: 'syz.2.630': attribute type 33 has an invalid length. [ 208.325189][ T8181] netlink: 164 bytes leftover after parsing attributes in process `syz.2.630'. [ 208.419296][ T8185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.429165][ T8185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.502583][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.516495][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.161304][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.171315][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.303726][ T5932] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 210.464574][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 210.474291][ T5932] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 210.483680][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.491775][ T5932] usb 2-1: Product: syz [ 210.496130][ T5932] usb 2-1: Manufacturer: syz [ 210.500747][ T5932] usb 2-1: SerialNumber: syz [ 210.517955][ T5932] r8152-cfgselector 2-1: Unknown version 0x0000 [ 210.524434][ T5932] r8152-cfgselector 2-1: config 0 descriptor?? [ 210.747461][ T5932] r8152-cfgselector 2-1: Unknown version 0x0000 [ 210.754392][ T5932] r8152-cfgselector 2-1: bad CDC descriptors [ 210.767870][ T5932] r8152-cfgselector 2-1: USB disconnect, device number 78 [ 211.334103][ T8203] loop2: detected capacity change from 0 to 8 [ 211.344029][ T8203] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 211.354382][ T8203] loop2: partition table partially beyond EOD, truncated [ 211.366480][ T8203] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 211.371566][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.410012][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.611851][ T9] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 211.785243][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 211.797005][ T9] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 211.806457][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.818688][ T9] usb 2-1: config 0 descriptor?? [ 211.824919][ T8206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.256339][ T9] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0012/input/input35 [ 212.345134][ T9] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0012/input/input36 [ 212.379423][ T9] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0012/input/input37 [ 212.442734][ T5871] usb 4-1: USB disconnect, device number 74 [ 212.513495][ T9] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0012/input/input38 [ 212.627687][ T9] hid-udraw 0003:20D6:CB17.0012: hidraw0: USB HID vff.f8 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 212.669090][ T9] usb 2-1: USB disconnect, device number 79 [ 212.761135][ T8226] fido_id[8226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 212.922000][ T5871] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 213.034571][ T8229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.046514][ T8230] loop3: detected capacity change from 0 to 7 [ 213.057172][ T8224] Dev loop3: unable to read RDB block 7 [ 213.063733][ T8224] loop3: unable to read partition table [ 213.069704][ T8224] loop3: partition table beyond EOD, truncated [ 213.084160][ T8230] Dev loop3: unable to read RDB block 7 [ 213.094370][ T8230] loop3: unable to read partition table [ 213.101454][ T5871] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 213.111480][ T8230] loop3: partition table beyond EOD, truncated [ 213.117819][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.128002][ T8230] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.143188][ T5871] usb 4-1: config 0 descriptor?? [ 213.363154][ T8233] syzkaller1: entered promiscuous mode [ 213.368797][ T8233] syzkaller1: entered allmulticast mode [ 213.392224][ T8232] syzkaller1: left promiscuous mode [ 213.419960][ T8232] syzkaller1: left allmulticast mode [ 213.474863][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.487579][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.708334][ T8251] fuse: Bad value for 'rootmode' [ 213.717327][ T8251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.731757][ T8251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.824466][ T5878] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 213.985302][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 213.992288][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.001346][ T5878] usb 2-1: config 7 has an invalid interface number: 58 but max is 0 [ 214.009670][ T5878] usb 2-1: config 7 has no interface number 0 [ 214.015880][ T5878] usb 2-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 214.027053][ T5878] usb 2-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.041173][ T5878] usb 2-1: config 7 interface 58 has no altsetting 0 [ 214.052258][ T5878] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 214.062115][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.070302][ T5878] usb 2-1: Product: syz [ 214.074501][ T5878] usb 2-1: Manufacturer: syz [ 214.079653][ T5878] usb 2-1: SerialNumber: syz [ 214.316418][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.322070][ T5878] usb 2-1: USB disconnect, device number 80 [ 214.332086][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.332456][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.354090][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.388128][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.396633][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.399683][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.408060][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.592098][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.601476][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.611710][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.620482][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.630043][ T5871] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 214.640842][ T5871] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 214.652501][ T5871] asix 4-1:0.0: probe with driver asix failed with error -71 [ 214.663110][ T5871] usb 4-1: USB disconnect, device number 75 [ 214.815804][ T8260] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 214.913134][ T8260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.653'. [ 215.136838][ T8276] netlink: 'syz.2.657': attribute type 39 has an invalid length. [ 215.190322][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.217256][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.230984][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.240946][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.261957][ T8277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.279279][ T8276] hsr_slave_0 (unregistering): left promiscuous mode [ 215.353081][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 215.411635][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.420953][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.505169][ T9] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 215.523790][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 215.534476][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 215.543513][ T9] usb 2-1: Product: syz [ 215.547856][ T9] usb 2-1: Manufacturer: syz [ 215.552629][ T9] usb 2-1: SerialNumber: syz [ 215.560228][ T9] usb 2-1: config 0 descriptor?? [ 215.568178][ T9] ims_pcu 2-1:0.0: Zero length descriptor [ 215.574162][ T9] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 215.769162][ T8274] netlink: 'syz.1.656': attribute type 8 has an invalid length. [ 215.779428][ T8274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.788794][ T8274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.799484][ T8289] netlink: 'syz.1.656': attribute type 8 has an invalid length. [ 215.801966][ T8274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.818477][ T8274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.846666][ T9] usb 2-1: USB disconnect, device number 81 [ 215.891780][ T8292] netlink: 'syz.3.662': attribute type 11 has an invalid length. [ 215.931801][ T30] audit: type=1326 audit(1760327771.011:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.1.661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bc958eec9 code=0x0 [ 215.953982][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.013962][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.024069][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.042597][ T8299] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 216.046469][ T5871] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 216.091580][ T5871] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.781343][ T5821] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 216.857885][ T30] audit: type=1326 audit(1760327771.926:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.2.667" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3bc98eec9 code=0x0 [ 216.920252][ T8308] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.932084][ T5821] usb 4-1: device descriptor read/64, error -71 [ 217.052512][ T5871] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 217.173271][ T5821] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 217.213417][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 217.220302][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.230756][ T5871] usb 2-1: config 0 has no interfaces? [ 217.238384][ T5871] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 217.247986][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.256443][ T5871] usb 2-1: Product: syz [ 217.260635][ T5871] usb 2-1: Manufacturer: syz [ 217.265360][ T5871] usb 2-1: SerialNumber: syz [ 217.272166][ T5871] usb 2-1: config 0 descriptor?? [ 217.313964][ T5821] usb 4-1: device descriptor read/64, error -71 [ 217.424798][ T5821] usb usb4-port1: attempt power cycle [ 217.493706][ T9] usb 2-1: USB disconnect, device number 82 [ 217.766452][ T5821] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 217.798532][ T5821] usb 4-1: device descriptor read/8, error -71 [ 218.040317][ T5821] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 218.088792][ T5821] usb 4-1: device descriptor read/8, error -71 [ 218.122592][ T8319] syzkaller1: entered promiscuous mode [ 218.129450][ T8319] syzkaller1: entered allmulticast mode [ 218.201191][ T5821] usb usb4-port1: unable to enumerate USB device [ 218.457921][ T8325] xt_limit: Overflow, try lower: 271964/0 [ 218.572535][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.598821][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.912592][ T5878] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 219.043363][ T5878] usb 2-1: device descriptor read/64, error -71 [ 219.226510][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.240757][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.275728][ T8338] ================================================================== [ 219.284564][ T8338] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x3d/0x70 [ 219.293006][ T8338] Read of size 8 at addr ffff888031050e30 by task syz.2.678/8338 [ 219.301469][ T8338] [ 219.303810][ T8338] CPU: 1 UID: 0 PID: 8338 Comm: syz.2.678 Not tainted syzkaller #0 PREEMPT(full) [ 219.303828][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 219.303838][ T8338] Call Trace: [ 219.303846][ T8338] [ 219.303854][ T8338] dump_stack_lvl+0x189/0x250 [ 219.303875][ T8338] ? __kasan_check_byte+0x12/0x40 [ 219.303893][ T8338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.303906][ T8338] ? lock_release+0x4b/0x3e0 [ 219.303926][ T8338] ? __virt_addr_valid+0x4a5/0x5c0 [ 219.303940][ T8338] print_report+0xca/0x240 [ 219.303954][ T8338] ? sysfs_remove_file_ns+0x3d/0x70 [ 219.303970][ T8338] kasan_report+0x118/0x150 [ 219.303984][ T8338] ? do_raw_spin_lock+0x121/0x290 [ 219.303997][ T8338] ? sysfs_remove_file_ns+0x3d/0x70 [ 219.304015][ T8338] sysfs_remove_file_ns+0x3d/0x70 [ 219.304031][ T8338] bus_remove_driver+0x198/0x2f0 [ 219.304047][ T8338] comedi_device_detach_locked+0x178/0x750 [ 219.304069][ T8338] comedi_unlocked_ioctl+0xcde/0x1020 [ 219.304083][ T8338] ? kasan_quarantine_put+0xdd/0x220 [ 219.304099][ T8338] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 219.304130][ T8338] ? __fget_files+0x2a/0x420 [ 219.304147][ T8338] ? __fget_files+0x3a0/0x420 [ 219.304161][ T8338] ? __fget_files+0x2a/0x420 [ 219.304176][ T8338] ? bpf_lsm_file_ioctl+0x9/0x20 [ 219.304193][ T8338] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 219.304206][ T8338] __se_sys_ioctl+0xfc/0x170 [ 219.304225][ T8338] do_syscall_64+0xfa/0xfa0 [ 219.304239][ T8338] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.304253][ T8338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.304266][ T8338] ? clear_bhb_loop+0x60/0xb0 [ 219.304280][ T8338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.304294][ T8338] RIP: 0033:0x7fd3bc98eec9 [ 219.304314][ T8338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.304326][ T8338] RSP: 002b:00007fd3bd842038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.304343][ T8338] RAX: ffffffffffffffda RBX: 00007fd3bcbe5fa0 RCX: 00007fd3bc98eec9 [ 219.304354][ T8338] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004 [ 219.304364][ T8338] RBP: 00007fd3bca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 219.304373][ T8338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.304382][ T8338] R13: 00007fd3bcbe6038 R14: 00007fd3bcbe5fa0 R15: 00007ffca40e7e88 [ 219.304397][ T8338] [ 219.304403][ T8338] [ 219.549069][ T8338] Allocated by task 5821: [ 219.553380][ T8338] kasan_save_track+0x3e/0x80 [ 219.558046][ T8338] __kasan_kmalloc+0x93/0xb0 [ 219.562712][ T8338] __kmalloc_node_noprof+0x56d/0x800 [ 219.568906][ T8338] __vmalloc_node_range_noprof+0x5bb/0x12d0 [ 219.575312][ T8338] vzalloc_noprof+0xb2/0xf0 [ 219.580963][ T8338] hid_open_report+0x28b/0xee0 [ 219.585819][ T8338] kye_probe+0x21/0x5f0 [ 219.589970][ T8338] hid_device_probe+0x416/0x7a0 [ 219.595080][ T8338] really_probe+0x26d/0x9e0 [ 219.599712][ T8338] __driver_probe_device+0x18c/0x2f0 [ 219.604983][ T8338] driver_probe_device+0x4f/0x430 [ 219.609993][ T8338] __device_attach_driver+0x2ce/0x530 [ 219.615353][ T8338] bus_for_each_drv+0x251/0x2e0 [ 219.620189][ T8338] __device_attach+0x2b8/0x400 [ 219.624938][ T8338] bus_probe_device+0x185/0x260 [ 219.629770][ T8338] device_add+0x7b6/0xb50 [ 219.634089][ T8338] hid_add_device+0x272/0x3e0 [ 219.638760][ T8338] usbhid_probe+0xe13/0x12a0 [ 219.643363][ T8338] usb_probe_interface+0x668/0xc30 [ 219.648461][ T8338] really_probe+0x26d/0x9e0 [ 219.652954][ T8338] __driver_probe_device+0x18c/0x2f0 [ 219.658227][ T8338] driver_probe_device+0x4f/0x430 [ 219.663238][ T8338] __device_attach_driver+0x2ce/0x530 [ 219.668611][ T8338] bus_for_each_drv+0x251/0x2e0 [ 219.673473][ T8338] __device_attach+0x2b8/0x400 [ 219.678257][ T8338] bus_probe_device+0x185/0x260 [ 219.683098][ T8338] device_add+0x7b6/0xb50 [ 219.687466][ T8338] usb_set_configuration+0x1a87/0x20e0 [ 219.693072][ T8338] usb_generic_driver_probe+0x8d/0x150 [ 219.698536][ T8338] usb_probe_device+0x1c4/0x390 [ 219.703500][ T8338] really_probe+0x26d/0x9e0 [ 219.708007][ T8338] __driver_probe_device+0x18c/0x2f0 [ 219.713406][ T8338] driver_probe_device+0x4f/0x430 [ 219.718451][ T8338] __device_attach_driver+0x2ce/0x530 [ 219.723940][ T8338] bus_for_each_drv+0x251/0x2e0 [ 219.728888][ T8338] __device_attach+0x2b8/0x400 [ 219.733666][ T8338] bus_probe_device+0x185/0x260 [ 219.738715][ T8338] device_add+0x7b6/0xb50 [ 219.743163][ T8338] usb_new_device+0xa39/0x16f0 [ 219.747930][ T8338] hub_event+0x2958/0x4a20 [ 219.752374][ T8338] process_scheduled_works+0xae1/0x17b0 [ 219.758097][ T8338] worker_thread+0x8a0/0xda0 [ 219.762731][ T8338] kthread+0x711/0x8a0 [ 219.766797][ T8338] ret_from_fork+0x4bc/0x870 [ 219.771786][ T8338] ret_from_fork_asm+0x1a/0x30 [ 219.777614][ T8338] [ 219.780578][ T8338] Freed by task 5821: [ 219.785008][ T8338] kasan_save_track+0x3e/0x80 [ 219.790152][ T8338] __kasan_save_free_info+0x46/0x50 [ 219.795555][ T8338] __kasan_slab_free+0x5c/0x80 [ 219.800411][ T8338] kfree+0x19a/0x6d0 [ 219.804315][ T8338] vfree+0x353/0x400 [ 219.808430][ T8338] hid_open_report+0xa51/0xee0 [ 219.813370][ T8338] kye_probe+0x21/0x5f0 [ 219.817878][ T8338] hid_device_probe+0x416/0x7a0 [ 219.822723][ T8338] really_probe+0x26d/0x9e0 [ 219.827214][ T8338] __driver_probe_device+0x18c/0x2f0 [ 219.832571][ T8338] driver_probe_device+0x4f/0x430 [ 219.837616][ T8338] __device_attach_driver+0x2ce/0x530 [ 219.842984][ T8338] bus_for_each_drv+0x251/0x2e0 [ 219.848082][ T8338] __device_attach+0x2b8/0x400 [ 219.852835][ T8338] bus_probe_device+0x185/0x260 [ 219.857705][ T8338] device_add+0x7b6/0xb50 [ 219.862540][ T8338] hid_add_device+0x272/0x3e0 [ 219.867214][ T8338] usbhid_probe+0xe13/0x12a0 [ 219.871787][ T8338] usb_probe_interface+0x668/0xc30 [ 219.877011][ T8338] really_probe+0x26d/0x9e0 [ 219.881612][ T8338] __driver_probe_device+0x18c/0x2f0 [ 219.886999][ T8338] driver_probe_device+0x4f/0x430 [ 219.892056][ T8338] __device_attach_driver+0x2ce/0x530 [ 219.897429][ T8338] bus_for_each_drv+0x251/0x2e0 [ 219.902403][ T8338] __device_attach+0x2b8/0x400 [ 219.907417][ T8338] bus_probe_device+0x185/0x260 [ 219.912653][ T8338] device_add+0x7b6/0xb50 [ 219.917062][ T8338] usb_set_configuration+0x1a87/0x20e0 [ 219.922688][ T8338] usb_generic_driver_probe+0x8d/0x150 [ 219.928161][ T8338] usb_probe_device+0x1c4/0x390 [ 219.933214][ T8338] really_probe+0x26d/0x9e0 [ 219.937724][ T8338] __driver_probe_device+0x18c/0x2f0 [ 219.943130][ T8338] driver_probe_device+0x4f/0x430 [ 219.948192][ T8338] __device_attach_driver+0x2ce/0x530 [ 219.953663][ T8338] bus_for_each_drv+0x251/0x2e0 [ 219.958833][ T8338] __device_attach+0x2b8/0x400 [ 219.964216][ T8338] bus_probe_device+0x185/0x260 [ 219.969688][ T8338] device_add+0x7b6/0xb50 [ 219.974231][ T8338] usb_new_device+0xa39/0x16f0 [ 219.979182][ T8338] hub_event+0x2958/0x4a20 [ 219.983600][ T8338] process_scheduled_works+0xae1/0x17b0 [ 219.989134][ T8338] worker_thread+0x8a0/0xda0 [ 219.993976][ T8338] kthread+0x711/0x8a0 [ 219.998290][ T8338] ret_from_fork+0x4bc/0x870 [ 220.002879][ T8338] ret_from_fork_asm+0x1a/0x30 [ 220.007633][ T8338] [ 220.009952][ T8338] The buggy address belongs to the object at ffff888031050e00 [ 220.009952][ T8338] which belongs to the cache kmalloc-256 of size 256 [ 220.024001][ T8338] The buggy address is located 48 bytes inside of [ 220.024001][ T8338] freed 256-byte region [ffff888031050e00, ffff888031050f00) [ 220.038141][ T8338] [ 220.040476][ T8338] The buggy address belongs to the physical page: [ 220.046993][ T8338] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31050 [ 220.056030][ T8338] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 220.064727][ T8338] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 220.072792][ T8338] page_type: f5(slab) [ 220.077125][ T8338] raw: 00fff00000000040 ffff88813fe26b40 0000000000000000 dead000000000001 [ 220.086507][ T8338] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 220.095185][ T8338] head: 00fff00000000040 ffff88813fe26b40 0000000000000000 dead000000000001 [ 220.103984][ T8338] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 220.112831][ T8338] head: 00fff00000000001 ffffea0000c41401 00000000ffffffff 00000000ffffffff [ 220.121496][ T8338] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 220.130238][ T8338] page dumped because: kasan: bad access detected [ 220.136650][ T8338] page_owner tracks the page as allocated [ 220.142349][ T8338] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5825, tgid 5825 (syz-executor), ts 83707050567, free_ts 83678979362 [ 220.164451][ T8338] post_alloc_hook+0x240/0x2a0 [ 220.169233][ T8338] get_page_from_freelist+0x2365/0x2440 [ 220.174890][ T8338] __alloc_frozen_pages_noprof+0x181/0x370 [ 220.180773][ T8338] alloc_pages_mpol+0x232/0x4a0 [ 220.185619][ T8338] allocate_slab+0x96/0x3a0 [ 220.190112][ T8338] ___slab_alloc+0xe94/0x18a0 [ 220.195574][ T8338] __slab_alloc+0x65/0x100 [ 220.200849][ T8338] __kmalloc_noprof+0x471/0x7f0 [ 220.205694][ T8338] fib_create_info+0x172d/0x3210 [ 220.210932][ T8338] fib_table_insert+0xc6/0x1b50 [ 220.215796][ T8338] fib_magic+0x2c4/0x390 [ 220.220048][ T8338] fib_add_ifaddr+0x144/0x5f0 [ 220.224805][ T8338] fib_netdev_event+0x382/0x490 [ 220.230271][ T8338] notifier_call_chain+0x1b6/0x3e0 [ 220.235390][ T8338] __dev_notify_flags+0x18d/0x2e0 [ 220.240507][ T8338] netif_change_flags+0xe8/0x1a0 [ 220.245619][ T8338] page last free pid 24 tgid 24 stack trace: [ 220.251600][ T8338] __free_frozen_pages+0xbc4/0xd30 [ 220.256712][ T8338] rcu_core+0xcab/0x1770 [ 220.261258][ T8338] handle_softirqs+0x286/0x870 [ 220.266021][ T8338] do_softirq+0xec/0x180 [ 220.270782][ T8338] __local_bh_enable_ip+0x17d/0x1c0 [ 220.276424][ T8338] icmp6_dst_alloc+0x3a5/0x420 [ 220.281364][ T8338] mld_sendpack+0x683/0xe60 [ 220.286298][ T8338] mld_ifc_work+0x83e/0xd60 [ 220.291092][ T8338] process_scheduled_works+0xae1/0x17b0 [ 220.296815][ T8338] worker_thread+0x8a0/0xda0 [ 220.301515][ T8338] kthread+0x711/0x8a0 [ 220.305675][ T8338] ret_from_fork+0x4bc/0x870 [ 220.310262][ T8338] ret_from_fork_asm+0x1a/0x30 [ 220.315112][ T8338] [ 220.317520][ T8338] Memory state around the buggy address: [ 220.323410][ T8338] ffff888031050d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.331461][ T8338] ffff888031050d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.339825][ T8338] >ffff888031050e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.349137][ T8338] ^ [ 220.354988][ T8338] ffff888031050e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.363840][ T8338] ffff888031050f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.372019][ T8338] ================================================================== [ 220.380346][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.397997][ T8338] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 220.406191][ T8338] CPU: 0 UID: 0 PID: 8338 Comm: syz.2.678 Not tainted syzkaller #0 PREEMPT(full) [ 220.415593][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.425750][ T8338] Call Trace: [ 220.429028][ T8338] [ 220.432059][ T8338] dump_stack_lvl+0x99/0x250 [ 220.436965][ T8338] ? __asan_memcpy+0x40/0x70 [ 220.442035][ T8338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.447490][ T8338] ? __pfx__printk+0x10/0x10 [ 220.452259][ T8338] vpanic+0x237/0x6d0 [ 220.456340][ T8338] ? __pfx_vpanic+0x10/0x10 [ 220.460939][ T8338] ? preempt_schedule+0xae/0xc0 [ 220.465921][ T8338] ? __pfx_preempt_schedule+0x10/0x10 [ 220.471283][ T8338] panic+0xb9/0xc0 [ 220.474998][ T8338] ? __pfx_panic+0x10/0x10 [ 220.479422][ T8338] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 220.485509][ T8338] ? sysfs_remove_file_ns+0x3d/0x70 [ 220.490904][ T8338] check_panic_on_warn+0x89/0xb0 [ 220.496309][ T8338] ? sysfs_remove_file_ns+0x3d/0x70 [ 220.501954][ T8338] end_report+0x78/0x160 [ 220.506556][ T8338] kasan_report+0x129/0x150 [ 220.511092][ T8338] ? do_raw_spin_lock+0x121/0x290 [ 220.516563][ T8338] ? sysfs_remove_file_ns+0x3d/0x70 [ 220.522039][ T8338] sysfs_remove_file_ns+0x3d/0x70 [ 220.527059][ T8338] bus_remove_driver+0x198/0x2f0 [ 220.532097][ T8338] comedi_device_detach_locked+0x178/0x750 [ 220.537914][ T8338] comedi_unlocked_ioctl+0xcde/0x1020 [ 220.543291][ T8338] ? kasan_quarantine_put+0xdd/0x220 [ 220.548918][ T8338] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 220.554771][ T8338] ? __fget_files+0x2a/0x420 [ 220.559448][ T8338] ? __fget_files+0x3a0/0x420 [ 220.564286][ T8338] ? __fget_files+0x2a/0x420 [ 220.568866][ T8338] ? bpf_lsm_file_ioctl+0x9/0x20 [ 220.573807][ T8338] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 220.579957][ T8338] __se_sys_ioctl+0xfc/0x170 [ 220.584545][ T8338] do_syscall_64+0xfa/0xfa0 [ 220.589215][ T8338] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.594406][ T8338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.600807][ T8338] ? clear_bhb_loop+0x60/0xb0 [ 220.605476][ T8338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.611545][ T8338] RIP: 0033:0x7fd3bc98eec9 [ 220.616012][ T8338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.635916][ T8338] RSP: 002b:00007fd3bd842038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.644321][ T8338] RAX: ffffffffffffffda RBX: 00007fd3bcbe5fa0 RCX: 00007fd3bc98eec9 [ 220.652376][ T8338] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004 [ 220.660342][ T8338] RBP: 00007fd3bca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 220.668298][ T8338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.676253][ T8338] R13: 00007fd3bcbe6038 R14: 00007fd3bcbe5fa0 R15: 00007ffca40e7e88 [ 220.684218][ T8338] [ 220.687552][ T8338] Kernel Offset: disabled [ 220.691864][ T8338] Rebooting in 86400 seconds..