last executing test programs: 14.709880975s ago: executing program 1 (id=511): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/187, 0xbb}, {&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000280)=""/168, 0xa8}, {&(0x7f0000000340)=""/226, 0xe2}], 0x4, &(0x7f0000000480)=""/117, 0x75}, 0x2}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000680)=""/211, 0xd3}, {&(0x7f0000000780)=""/44, 0x2c}, {&(0x7f00000007c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/146, 0x92}, {&(0x7f0000000980)=""/230, 0xe6}, {&(0x7f0000000a80)=""/164, 0xa4}], 0x7, &(0x7f0000000bc0)=""/249, 0xf9}, 0x2}], 0x2, 0x0, &(0x7f0000000d80)={r1, r2+10000000}) mq_timedsend(r0, &(0x7f0000000dc0)="abf1a8a294b42ac78bcb4a39df329c50c817cc6abb95", 0x16, 0x3, &(0x7f0000000e00)) fcntl$getownex(r3, 0x10, &(0x7f0000000e40)={0x0, 0x0}) sched_rr_get_interval(r4, &(0x7f0000000e80)) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000f00)={0x0, @in={0x2, 0x4e24, @remote}, @vsock, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0x400, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000ec0)='dvmrp0\x00', 0x80000001, 0x6, 0x7}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000f80), 0x80202, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x6) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x1, 0xa, 0x601, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x801) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000010c0), 0x101, 0x0) sendfile(r7, r3, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x8) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000001100)={0x4, 0x0, [{0x287, 0x0, 0x79}, {0x2ba, 0x0, 0xfffffffffffffffd}, {0xaee, 0x0, 0x3}, {0xba2, 0x0, 0x4}]}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000001180)={0x0, 0x160}, &(0x7f00000011c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000001200)=@assoc_id=r8, 0x4) recvmmsg$unix(r3, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001240)=""/218, 0xda}, {&(0x7f0000001340)=""/18, 0x12}, {&(0x7f0000001380)=""/43, 0x2b}, {&(0x7f00000013c0)=""/222, 0xde}], 0x4, &(0x7f0000001500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001580)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/196, 0xc4}, {&(0x7f0000001700)=""/152, 0x98}], 0x2}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001800)=""/101, 0x65}, {&(0x7f0000001880)=""/45, 0x2d}, {&(0x7f00000018c0)=""/249, 0xf9}, {&(0x7f00000019c0)=""/111, 0x6f}, {&(0x7f0000001a40)=""/207, 0xcf}], 0x5, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001dc0)=""/52, 0x34}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000003100)=[{&(0x7f0000001ec0)=""/76, 0x4c}, {&(0x7f0000001f40)=""/138, 0x8a}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/158, 0x9e}], 0x5, &(0x7f0000003180)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000003280), 0x6e, &(0x7f0000003400)=[{&(0x7f0000003300)=""/17, 0x11}, {&(0x7f0000003340)=""/141, 0x8d}], 0x2, &(0x7f0000003440)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003500), 0x6e, &(0x7f00000036c0)=[{&(0x7f0000003580)=""/211, 0xd3}, {&(0x7f0000003680)=""/47, 0x2f}], 0x2}}, {{&(0x7f0000003700)=@abs, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003780)=""/198, 0xc6}, {&(0x7f0000003880)=""/216, 0xd8}, {&(0x7f0000003980)=""/96, 0x60}], 0x3}}, {{&(0x7f0000003a40), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003ac0)=""/201, 0xc9}, {&(0x7f0000003bc0)=""/62, 0x3e}, {&(0x7f0000003c00)=""/123, 0x7b}, {&(0x7f0000003c80)=""/33, 0x21}], 0x4, &(0x7f0000003d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003d40), 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003dc0)=""/181, 0xb5}, {&(0x7f0000003e80)=""/84, 0x54}], 0x2}}], 0xa, 0x40010040, &(0x7f00000041c0)={0x77359400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004200)) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000042c0)=[@text16={0x10, &(0x7f0000004240)="660f78c4871c3e0f01c3baf80c66b85cfce88f66efbafc0c66ed0f636109a46766c744240097c6b97b6766c7442402020000006766c744240600000000670f011c246780397b65640fc7be97fbb81b018ee00f01c9", 0x55}], 0x1, 0x0, &(0x7f0000004300)=[@cr0={0x0, 0x20000011}, @cstype0={0x4, 0x6}], 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r14 = fcntl$dupfd(r10, 0x0, r9) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r14, 0xc038943b, &(0x7f0000004380)={0x0, 0x8, '\x00', 0x0, &(0x7f0000004340)=[0x0]}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r11, 0x84, 0x4, &(0x7f00000043c0), &(0x7f0000004400)=0x4) ioctl$FS_IOC_GETFSMAP(r13, 0xc0c0583b, &(0x7f0000004440)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x8, 0xb5, 0x6, 0x5, 0x1, 0x2}, {0x0, 0x2, 0x8, 0x95, 0x6, 0x2}], ['\x00', '\x00', '\x00', '\x00']}) r15 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r15, &(0x7f0000004600)="13b61a41e3dedb9e39ce501212c4b40c0f37dcf016ee0a537de3d6d13e15befcdc77ec6b9f7ce1f033e8a779c476fb772e0abfe7e80abd94e97adff9fd4699b05a3a04f2159e0af21db1756b7aaa4225a3cc859fffe192b5c6f4b3cd7072bd3918cf1eb8ebb87eefe3f8555062b3af71", 0x70, 0x28000011, &(0x7f0000004680)={0x2, 0x4e23, @private=0xa010100}, 0x10) mq_timedsend(r12, &(0x7f00000046c0)="e63a74784fca2a1ab7e091f776bf2bacf5120becdba07884f9b9b44b3256dcd24b828e2766290030d46d6efecb662bf92d7ca4f476a3c2aa9077d93a7c761510404c68999ac1cd6f543403fac4dc1dd4275db873e1f4c63d02d02388a9d19d1df85bff5685602effa36c05333781cdc9c5ba430719a6d0", 0x77, 0x800, &(0x7f0000004740)={0x0, 0x3938700}) fsetxattr$trusted_overlay_origin(r7, &(0x7f0000004780), &(0x7f00000047c0), 0x2, 0x0) 14.245980752s ago: executing program 1 (id=513): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x401}}, './file0\x00'}) recvmmsg$unix(r0, &(0x7f00000046c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/45, 0x2d}], 0x1, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/12, 0xc}], 0x3}}, {{&(0x7f00000003c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)=""/4, 0x4}, {&(0x7f0000000480)=""/48, 0x30}, {&(0x7f00000004c0)=""/103, 0x67}], 0x3, &(0x7f0000000580)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)=""/151, 0x97}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/54, 0x36}, {&(0x7f0000001840)=""/107, 0x6b}, {&(0x7f00000018c0)=""/126, 0x7e}], 0x6, &(0x7f00000019c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000002e40)=[{&(0x7f0000001a80)=""/114, 0x72}, {&(0x7f0000001b00)=""/166, 0xa6}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/44, 0x2c}, {&(0x7f0000002c00)=""/196, 0xc4}, {&(0x7f0000002d00)=""/48, 0x30}, {&(0x7f0000002d40)=""/208, 0xd0}], 0x7, &(0x7f0000002ec0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002f00)=@abs, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002f80)=""/164, 0xa4}], 0x1, &(0x7f0000003080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f00000031c0)=@abs, 0x6e, &(0x7f0000004280)=[{&(0x7f0000003240)=""/44, 0x2c}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x2, &(0x7f00000042c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f00000043c0)=""/150, 0x96}, {&(0x7f0000004480)=""/255, 0xff}], 0x2, &(0x7f00000045c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}], 0x8, 0x1004, &(0x7f00000048c0)={0x77359400}) ioctl$DRM_IOCTL_DROP_MASTER(r8, 0x641f) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000004900)=0x40) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r13, &(0x7f0000004940)={0x80000000}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000004a80)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004a40)={&(0x7f00000049c0)={0x60, 0x1403, 0x300, 0xc, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r19, 0xc0206416, &(0x7f0000004ac0)={0xc895, 0x9, 0x6ed0274e, 0x80000000, 0x12, 0x101}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004b80)={{r16}, &(0x7f0000004b00), &(0x7f0000004b40)=r18}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000004c80)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004c40)={&(0x7f0000004c00)={0x28, 0x1412, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) sendmsg$NL80211_CMD_AUTHENTICATE(r17, &(0x7f0000004e40)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004e00)={&(0x7f0000004d00)={0xec, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x43}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "ecb3de31c3ffe5a1b2dc546d41"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d64c7c37e2d0bc593b8653b33c"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "1a484a6fffdf38674e4d2b2fe5"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8238349592ba12afa4c070c0c5"}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1585897312d06db70bc8c46ed6"}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) r21 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000004e80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb9, 0x10, 0xb6, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x3, 0xb1, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0xe8f}}, {{{0x9, 0x5, 0x81, 0x3, 0x208, 0x2, 0x9, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x7f, 0x70}}]}}}]}}]}}, &(0x7f00000054c0)={0xa, &(0x7f0000004ec0)={0xa, 0x6, 0x110, 0x5, 0x80, 0x5, 0x10, 0xfd}, 0x19, &(0x7f0000004f00)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x2, 0xa0, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x8, 0x5}, @ptm_cap={0x3}]}, 0xa, [{0x2a, &(0x7f0000004f40)=@string={0x2a, 0x3, "8c87ce89e88396150e003ed60869672d935f330cde0001df3b92c49fc64681ffa142744c7e840c61"}}, {0xc, &(0x7f0000004f80)=@string={0xc, 0x3, "dfe2cf1612fda255289a"}}, {0x4, &(0x7f0000004fc0)=@lang_id={0x4, 0x3, 0x440a}}, {0xf7, &(0x7f0000005000)=@string={0xf7, 0x3, "41c4bd50771bea65b96a24cb9f537aad402145228f2eba8e6ffbaf81d13fb7949686f8e38d7a1de24649757aba84568dd5f26b45fa5f71b5dd1b11e7c8c98d59f8265e3677b74b798e0ac87ef063c63d0e13038f40324a0af21403ea0873948e99cf6af774e719b59e561826fa1caaadf2b17ba65959d54f934aa54e689b54e0535257dd1ecbef8ed9fa3dbc2b12d8afeaf40ab94b74ba6adb39466cffae14ff68530aeec2a24ad606a4e07312b7727f33e108de08e93d33e4b8db8e07afb8c92a885ebe3bb63bb1b745f09eda6b86052c0b73a6fb490405d85f28d484c5d20025646ea1b71b3dc5011aa91cb2c480fc33103c680d"}}, {0x4d, &(0x7f0000005100)=@string={0x4d, 0x3, "8e77dd6d2704341ab5596a129b26a44289b9f287cbdaa6ae564a47c48aec571cc432e939768330089a807abb031dc6c9ac5cb657d2aa8835abe900d2f4ce1793350be0306d1f6ad9375ccf"}}, {0x9a, &(0x7f0000005180)=@string={0x9a, 0x3, "c112004a059ba714f36910e5d3dae6270c81baea4b15e2bddf3fe2e9e25de1d4aecb1dbd6fddb09babb6d089f08e96676917695aeb3670990acca8910bf65a44811089b8a10f22585926327a3be47bc8945806ffd18ccc7e70e541ad9e2ab69f9bc8248ef30a021a1e2c856e90e9b0caa2af671a4e0350e87385862561f2d9dedbb9cdc8398d75a729eb4bb267f42b655050bb0f6675cc82"}}, {0xc6, &(0x7f0000005240)=@string={0xc6, 0x3, "f2d5fb2303faefd7094bc6d8bde7f62b8ae1a0154d81db17472c7528d17c866b939170b219aacf863965e70991eb4f48062288752f7a36e89298b28a333525d330472002651d0308f2a2deb1c467cd8d59bb05fc015c70fb7d9d53aa29781f367f57002f508ff159c0123c357dd7d9b1f812b91ef7cb3b1a8087c0e8d9b0b98801bd40a091314c5a3dc6c222df256271189ceb51cf5e4deefc26724721a4995d040d71dcb0de9124df41c3468c7512a3f17dac376093f852812e681a7fb75daa31865e0a"}}, {0x51, &(0x7f0000005340)=@string={0x51, 0x3, "6397c9db91747482dfe935a9b49eb32d0188989cea8924f956aa9e4e21bad66236f8b04299ee2be07e37426d29810835638e6dc8fa81c86a7e568204608d0de6223f25b676c349885aac3fd75d4967"}}, {0x92, &(0x7f00000053c0)=@string={0x92, 0x3, "2e2bc8d6b8ced5b7a7ba2df5edcfb9aba80ad95b8e54d0c5556bf538d735f22e1291efa98bff41d440ba1f191054199dde96a6db201d354cf9618ef188cec5a30315330985a996810617ab7823c0fe9a87ba65e02d673906ddbec86d5e81c44657ead642ec4c1fb6fca7b0bdc3e55b2e6e3f23f87d12ed155c64c31a86d0c1f7cbbc5f9f1d753563b5fd2b15a4c1a6af"}}, {0x4, &(0x7f0000005480)=@lang_id={0x4, 0x3, 0x405}}]}) syz_usb_ep_write(r21, 0x3, 0x9, &(0x7f0000005580)="feab9c7de8458943a6") ioctl$DRM_IOCTL_AGP_ALLOC(r9, 0xc0206434, &(0x7f00000055c0)={0x8, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r14, 0x40106439, &(0x7f0000005600)={0xfffffffffffffffc, r22}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000005640)={0x14}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3e) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000005680)={0x0, 0xffff, 0xf1a3, 0x4, 0x1, [], [0xe, 0x9, 0xc81, 0x200], [0x1, 0x4, 0xc, 0x4], [0x422ba70a, 0x5, 0x4, 0x24000000000]}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r7, 0x40044145, &(0x7f0000005700)=0x7) sendmsg$inet(r5, &(0x7f0000005a40)={&(0x7f0000005740)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000005980)=[{&(0x7f0000005780)="d5ce33287457993e9cfdc58639857b5e86af111b0c3d189feec4b83f9bd8e784e9ce6733cd7de676f3cc128d42c2c058497df945e9ec171722f9c8c2e6f7aef4025bee1d3121e570b58410db577705bcd7aea1667e4cd62d8bad05f273335df1753cca4f0a0f3b50d1e8baff7952afd9e3922422f27eaa8d1140ccc0142d", 0x7e}, {&(0x7f0000005800)="a2613b0d59717df4c39cd822176e2200d27294d9c6472168022e08b29e5b51bfabd6121ab65ce77a35efb6995c40eb191ec2c929c1c52d681ef165fc", 0x3c}, {&(0x7f0000005840)="7afcde31455ece2544842d5715c0658398f27b5fc7ecc51e89e3154e0690eeed69f8767b088086145d112d51096bf09ad2ccb288ee3c0f968f5a814a0f8a91e791dc9c0a3e003fa95dc930c13e016196431c251effb643e65d52f96d37f74860b9b41d513f05ba2b8d03211d03b65fb846e09924936d9a5bab568110b9576781fef825ec508e5869ea47fdda7fa5b940f2ae", 0x92}, {&(0x7f0000005900)="77ab291744f2", 0x6}, {&(0x7f0000005940)="75f4e51a0a25f61c7c5b4539189180ba556936cae5e5c368661b118fcc2fd1d575ba8c07d677dc0593327a2348324b29ee1b26ce5e", 0x35}], 0x5, &(0x7f0000005a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}], 0x30}, 0x10) write(r11, &(0x7f0000005a80)="9e0ff9c60f8f3871b73a7352881d7a612867ac0877488744c2d2b11c1b0cc2441b5054f3253c8fd332c92e324a793d6afe45483107a5c43510740e044fe34f954e7c2db76221a36f67c42e6f2d9d944dcf76e13a290a3dd24be11cb847a04b0f73ff8249e9b84f8da725ff11f468581efe52bbf139714bd047a3f89f16c2b7372d7f5f7d7e9b86d0c38866", 0x8b) splice(r20, &(0x7f0000005b40)=0xdd56, r10, &(0x7f0000005b80)=0x9, 0x2, 0x5) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000005bc0)) sendmsg$NFT_BATCH(r1, &(0x7f0000006040)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006000)={&(0x7f0000005c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x7c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0x43, 0x8, "f5339ca1c62340848b66487739b9432087cf1fe4176a9aab7cc8b11d6dfb7de35a80e3f138575f597b3894d2a025891e64c5ddfbe98dff1935b883b0a0fe79"}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0xe8, 0x0, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xc5, 0x6, "44d6230786139b2049012328184db0c148761b1d3a496e421b7d6ac920851ed0c29220fc068ab06935d66559132cb75d729d4ebb5e08fd291d65d5e33b10a07081f2063e8d168ac0c288140885feb36b6f44352bf347905bb2fa48143467bdeff090b3e721ec00c3e2975e58a2d7a2a30f51813057685ef1ab15b56427eacdd385d5b7f77d18809c0b56a514b29d1a360387f80b1aa7ee6102a8f9c0eec74b6156e2f539ba768ec1aca66d351ecdd26b0eb3b888c027400c1b276a4bf116e1f907"}]}, @NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x46, 0x6, "76057411afccb5eb526ab391b97942f3ae72f76e3b990582b6d5d8d834f930f863659d69f2e433cdd4a51eb93dbf5bcea4ff893b642b7a9f9d9df521594204d49195"}]}, @NFT_MSG_DELCHAIN={0x190, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff9c}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff5ae}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xf8, 0xc, "e7bead13e7684fb21ffa625ec968efc1732bb3f9d218acd7e8d0a9b129554a8f8eb9d0ea6547e7aad8a7c269a0099890332e4a662a39226ddf932b7e7a77f2412ec7de1be03a853533b1baabfcf3f6ba25fbe0ceb1cc56ed1530596b96b0ef2b5651ee1e8a3ed9152e5410c9cbd11dec84022fd0e01d5ad3bf5371c16ffbcd1db49a7b7ca6eb5bf2bb31a98f12451393cf911c688007e5c63dfad52f269574e518b7c4a69f7f46a6302b7e3f358f361bc57fcb88dfd597e9af6d14bc06a6b74f3a26611d7e7c4e004c18cf21d43d5710ca58f5b5eb3e609eee8e3a055661867ae6820d713dc94ec34e401cf17246f4372e3db7cf"}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c0}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) munlockall() sched_setattr(r2, &(0x7f0000006080)={0x38, 0x0, 0x0, 0x5, 0x2, 0x6, 0x1, 0x3, 0x6, 0x1}, 0x0) r23 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r19, 0x8933, &(0x7f0000006140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000006200)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000061c0)={&(0x7f0000006180)={0x30, r23, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r24}, @val={0xc, 0x99, {0x0, 0x3b}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x80c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006240)) 13.456041115s ago: executing program 1 (id=516): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xfce) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000076000df4004000000000000003000000000000000800010002"], 0x20}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x1af68, 0x1a001}, [@IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=@gettaction={0xb4, 0x32, 0x10, 0x70bd28, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x3912855a424696cd}}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xb4}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=@gettaction={0xb4, 0x32, 0x10, 0x70bd28, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x3912855a424696cd}}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xb4}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@deltclass={0x34, 0x29, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0x2}, {0x1, 0xe}, {0x8, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}]}, 0x34}}, 0x20040054) syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x80) (async) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x80) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000080)=""/4096) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x84a82, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x84a82, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x10000, 0x0, 0x3000, 0x2000, &(0x7f0000014000/0x2000)=nil}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000001100)=ANY=[@ANYRESDEC, @ANYRES16=r6, @ANYRES64], 0x3c}}, 0x10) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r10, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002840)="6139e9e56b994bd0c9", 0x9}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, 0x1c, 0x0}}], 0x2, 0x20000000) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001080)="650f340f3566b842000f00d8b805000000b9a00093bd00800080c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x30}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001080)="650f340f3566b842000f00d8b805000000b9a00093bd00800080c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x30}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) 9.187754498s ago: executing program 3 (id=526): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) dup(r2) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x800003f, r3, 0x0) fanotify_mark(r3, 0x1, 0x11, r1, 0x0) fanotify_mark(r3, 0x80, 0x800, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r4 = accept$alg(r0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000180)=""/135, 0x87}], 0x2}, 0x2100) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) accept4(r6, &(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000005d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="55b69a04dedc990800000000000000df94", 0x11}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x20004040) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) dup(r2) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r3, 0x201, 0x800003f, r3, 0x0) (async) fanotify_mark(r3, 0x1, 0x11, r1, 0x0) (async) fanotify_mark(r3, 0x80, 0x800, 0xffffffffffffffff, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) (async) accept$alg(r0, 0x0, 0x0) (async) recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000180)=""/135, 0x87}], 0x2}, 0x2100) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r5, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) (async) accept$alg(r5, 0x0, 0x0) (async) accept4(r6, &(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x800) (async) sendmmsg$alg(r4, &(0x7f0000005d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="55b69a04dedc990800000000000000df94", 0x11}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x20004040) (async) 8.817584012s ago: executing program 3 (id=528): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) prctl$PR_MCE_KILL(0x41555856, 0x0, 0x2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r0, 0x2a, 0x24700, 0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000240)=r6, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 7.637286133s ago: executing program 3 (id=531): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000001040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3000000000000000000000000700000044140dd3e000000200080004ac141430"], 0x30}}], 0x1, 0x40408ec) r1 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r2, 0x0, 0xffffffffffffff27, 0x0, 0x2000) msgsnd(r2, &(0x7f0000002500)=ANY=[@ANYBLOB="a87d000000000000"], 0x8, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x4, 0x9, {0x0}, {0xffffffffffffffff}, 0x7, 0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00', 0x3}, 0x3, 0x0, 0x8, r4, 0x0, 0x3, 'syz1\x00', &(0x7f0000000180)}) setsockopt$inet_mreqn(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 7.163360088s ago: executing program 4 (id=532): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x5, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) (async, rerun: 64) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x5000, 0x7}, 0x80000031, 0x0, 0xdddd0000, 0x2024, 0x0, 0x1500, 0x3000, [0x6800000000000000, 0x204, 0x5b, 0x8]}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async, rerun: 64) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f00000bd000), 0x6f, 0x48014) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c00000010001fff00"/20, @ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x841}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) (async, rerun: 64) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (rerun: 64) r7 = dup(r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000003030101000000000000f7ca000000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a1cbf3d3af2a29e7098000000090a010400000000000000000700fffd0800054000000007140000001000010000000000000000000084000a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (rerun: 32) 6.974420979s ago: executing program 3 (id=533): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xf8200, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) close(r1) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000a40)={0x1c, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x0, 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000ffff000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000000), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000090018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) r7 = socket(0x10, 0x3, 0x0) close(r6) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) 6.944334277s ago: executing program 1 (id=534): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x80000000, 0x12d61, 0x12d58}}, 0x44) r5 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x1e}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x17) io_uring_enter(r5, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) 6.740679668s ago: executing program 4 (id=537): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x110000, 0x0) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = syz_io_uring_setup(0x1e7f, &(0x7f0000000540)={0x0, 0xac24, 0x10000, 0x1, 0xc}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r8}}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 6.514900208s ago: executing program 4 (id=538): unshare(0x20000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0x1b03) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x1070, 0xc, 0xa, 0xb03, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb20, 0x3, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x2}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xd}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6f}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}]}}}]}, @NFTA_SET_ELEM_KEY={0x48, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_DATA={0x15c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf5, 0x1, "d452f54786d21416c6d4d4dde0b2a1f18bb642096da25338a2fd78ef57ea8c177c3641481f7b5a94bd3f0c2c73a62abdcbb441e29894524698f1e7794d458a304d96223a76fb27eac0e3d94acd856004ba1f4a02efa1ce66f756714ea8d12517885fbbc5bd9a2ebf1df8a0f349ce365fc8e9f3d5ece5885584e512985fb7520a91322b7e07115326aeac4afc56baa3482bf62639c23da5b728fe175226cbfb6ff46ff6280170ab47bad1828792a19c27905e1c20bc4aa4188e5f6e0f9dca33c931b7ec6b5c5be1fb300bdd91263bcdfe8711342ee5e6e44892533614f80eff8f15ad617e0ee77aa790a0e8925c1468b41c"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000000}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xe0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "5cec0ea26d2b6cbd19240666b29136f833a91226599766de79eabbba164cc478bb641693defa5befd05363"}, @NFTA_DATA_VALUE={0x8, 0x1, "b9d52625"}, @NFTA_DATA_VALUE={0x8e, 0x1, "464d87a8dc718e45141a75b756f4c4aa9af2fb5d0aa1ea8cfea30cc90de7110b38bb2bf66b38156a0c0a50e09bec9f5855b10d1006336775453994bc081ecbd4343e9438d5bc9c70e61cbb962d727b444506554829ca08884fe96212dd992f9ff764a845d08e68fd6db6a74455ad222b2b02edcfce80e4ff9076c5ac771b214f381be32aa9abb4abfe9c"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}]}, {0x130, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0x1a, 0x6, 0x1, 0x0, "e7e2931977200cb7b513e49c291726121562cdf80867"}, @NFTA_SET_ELEM_USERDATA={0x101, 0x6, 0x1, 0x0, "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"}]}, {0x2c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x288, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "7146c8ea70d7f4a704194f1fa5cf40acc74d8d42ce4f393184bd397354895a0a2471f082d6952fdcfece728756977be364e0af269e42280f36f6c767b08d38b85fc0c3dc1c630b4bd31dcf641051ec8fbbb669582a15e69c2c54ec1995ddc93235f484ed58eb78f4ff9cb77aab4f48cc2b50eac9e6898593d09c1866ef0aee62c760d114092c9e38d9eb6bd1e549ec154717c976d2801030ebf9beae17ac5c25ad"}, @NFTA_DATA_VALUE={0xea, 0x1, "3faddfeeafb2aa59260b40d5d7d09a62252941aa5ca84ff8c8fbefe49572f08f9890f14f2e95b64ab291964fdf1781a52cae3c89d9b48a1a889f15d31345cad5487cfc069367d8bf030275afc2d0a0fde84c0bed4d5e7d2d1b0da3f11a17a326bb14c6ae4b06235c4e58265aac8699ee1bb9197c1c18ad3695cf6a6bad10fc86e3cf15e1e8fd6c3b2648c05b7a3890ae7f11e7bf72697d167aef47cc9aea2ac443819f4c1e129670565d92e1cd7836b3c686190439403b4483f385c8d0908e2d98ae754b8965fd940fb7fab1f615cf38b5308ebfa5e3695a9114737542363ba92e95bf914188"}, @NFTA_DATA_VALUE={0xb0, 0x1, "e2bbd25d1dc958f703e94edf474166f519d22860dd73291d0c3235c7dbf2447337b3450987991de9526b80329d48c73f4e502baed44725f89fe1fe0b08b9730b71db55186df35ba432a565c4cdbf004a041b132e0bb1869799c6f41a6e02568d53b53e715eee02e3a8643ef99dc6fcac1a85fe65964dd925d448b9c274ba4d68c07e84312b3a75db8096283f2df1c122ba027a2c477aea23518ca2b0cb0c195f2330f0dc59afa9f63efcb4bb"}]}, @NFTA_SET_ELEM_USERDATA={0x33, 0x6, 0x1, 0x0, "ec3056179c4d7e4e364b216603d8a40f398cf95a5438e29d257c52a46ddeb7dfd539a90880e70bd180c8961fcabfb1"}]}, {0x39c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x278, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0x268, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x18c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2a, 0x1, "41cec1cceb768e90c845c71d313b99bd0855d5dd9bfeabbf1f2eb8c48d315f43b3eafb68fcd0"}, @NFTA_DATA_VALUE={0x3e, 0x1, "0924509795a1b34c5dee339126d7d5be7f71608be8a9cf61d3688b88149e7a8df2585f2d8a7b927b0ce489771c852b4319056f35ae452319c87e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "e2dab00e1dc11c8aa47036e1dbd1c440a03a3ba8a7db8304c4d8dba62a4fe0e02da4ed05395855b63d5d17bcb7bd1748aba7ba24b68d362d3a8fd344b75b21405163c58cbeed6bbd84921cb7a29108f8d203ec928898d15bf251573f15b7763d2dd893a5ad8ec737d1e70c4ee55079dc23b6183ac4bd1e43157f9352d93c053e5e843e49a2cd80717b39d83f182a7e575b08fff98da44a3fd2fd449959d0"}, @NFTA_DATA_VALUE={0x60, 0x1, "5173027de8a8b07e0b20f7826d479b5be16a97e3f67bfefb4561d16476c8628104543e03a114fc35852b87146d44e7fb98574b506317d85bdabd72d9a34945e608b642227c67e40cff0c0cf249efbd5823173b272f1e16845caecc1d"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0x6c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "bd2fc97b101dc0bc4ad6faae9bd10e45"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_BITWISE_MASK={0x64, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xc2, 0x6, 0x1, 0x0, "e5bf923fe2e6837e617ea2040dcfb1600215381a8d401819c9ae93fb9d2924c4ca551d118a64b1de05b8d48406b774fc962da8d3f366ed7d25f45d0746cd89241e56eb02fe7a4e6402c85414751b8d89548607c7e4f7b16f3ae79a30e4de6d72d43cf369c4b425504604586f8b9f878d30a12aae22fe9693fe7582c86cd6401a93e31b687ec1f041c8fcd5de2cd42a494c09b168ec2b23334f05b0a9242d8c85b487c0f583f0b744c97be39a2e9f1cafeef49f53151fdbac99a97712c306"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4f8, 0x3, 0x0, 0x1, [{0x3e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x33c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8a, 0x1, "e56e6d0052f1845ac7fe62f92a5e4ebbcd16c4b3af5726a644fdbc21316d53b6756c5989c635fe6aaad0130724d3622394b60f796dc89270b1f047c5db45ffaeefadf2cb8589d2a3dca178baca342be536bcb0e25604b0e97cd635626491b4f6540e05878c2148937a5916d69540518e6faa32feb719afb456317e5678a4d1997f394afd5937"}, @NFTA_DATA_VALUE={0x27, 0x1, "8d7317b79ee3d240ca2a159dd22b3e4ef6326727042b46e47c69949c1b083f679fada6"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x86, 0x1, "f005052d2dd1a4449afd1595b85d0723fcfb9f84c8f672d8fffb819d153cfbd763d6f9953f1cfa36755ceb10a25a6470a72390280687cde91f27524e54a6266f8776dd2980976713a0a3e80a6fd6a304107d8b50d98a8f79ac669a9579252b5d4bb1ac62fbf97d760943f5ee9b3de8e18d8705fd49180791409ac6aa515f0501a21d"}, @NFTA_DATA_VALUE={0xd0, 0x1, "420fcf8050372d8621e0792de0763e5747e2e49745d9ea46ee41877f7f3fcc8adf3fba5fc02b6b2f315c2477b9b31beccd0b432f6780be39ec1f572cf15a49576ee11b72a1d4ddc36e5721a2f1111b97e7bd4e76a1a4cb093e43ff0fe89e10b9b26b17418d27953aabade283c478409227f912a7e965338494deb1c31ea94945bec67a98bfd38bea0e908d925dcefc52679894a8942edfd090d23bba18ac12db57c1ebc3661111da04370142e149cd6322a07f1f60a80a0d94d5b016dc8d48c36d10df9717d08ac19d26938d"}, @NFTA_DATA_VALUE={0xc4, 0x1, "7f95a4194eb5c7161add9760a22d5e2f0ec8e8f69be45b793791d069f9cf678e9ebdedfd37133fdb42d2140dccb6e967400aa70e81366ef6d447087ddf870140797950643e525984030de4f0f0ab20d95395888c9fc58cedef772d710a5113b2e3960038e536635d425a346a9671f17ef4bf069ce323cba016ab3bf6e1d578b77496ccb7aa7204bfe5904d230fd2b09771a4a71ffb43ad10dd7f49339c69f093cac409b84b22aec265806797b90bbd3d96e4d227b429b7fc05b6ef648dc6af52"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xd6}]}}}]}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x38, 0x1, "83838616006cfd659061a0490e28f71038bcfca7cbc5046a7dc2a882b957dc8220b9aa0f01d5b6e9e19e659a458a8522ef88136f"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "7d620b5335b08f5b0e1f6a4de7e966d37bcc1dec21b38fe6e5906315a2323417bed236bc97efc07b2dc20eab72ffe8225f03b5e6e5e0d6a3a564fcbdd3cd663c8f1c2e40d937c8162aba40a980ef029fa83166e9c2"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x9c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x29cfe610}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1c65cc61}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6eda5eff}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3998bd71}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x200}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1278}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x68, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSET={0x1b4, 0x9, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xdc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_SET_DESC={0x174, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x148, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3309}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x16b6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x50c}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb3b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fb6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xbb}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xd}]}]}, @NFT_MSG_NEWRULE={0x20c, 0x6, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x1c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x6c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x479e}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff3}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xb6, 0x7, 0x1, 0x0, "408b9d17209868454cc0f7f3af788de0472daeed6c114f8f6f8c4baa425538af93cd3745119f57acd8ef78d753d09f55bbd989db27eb35ff1772a9c39d2a12bf1e0b76bfa38ab58c8fe0008675063cbe1ec735de260249a9444ebf2b0778153211626ae588b4de18db3651cff1dd0756e2c943a26d89ea6a67225608767be685fd20292ea28bc000c85414f1dfb881ea4f96a4c315782d5465f07991dcc125022b8c1b6a423f8c5f486048dabd01fd7e7c63"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88be}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x155c}, 0x1, 0x0, 0x0, 0xd3c9f6761b5f1c65}, 0x200080d0) stat(&(0x7f000000b480)='./cgroup\x00', &(0x7f0000000780)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xc0002001}) getsockopt$inet6_mreq(r2, 0x6, 0x15, 0x0, &(0x7f0000000100)) 6.46811579s ago: executing program 4 (id=539): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x2a00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}]}}}]}, 0x40}}, 0x0) 5.060775706s ago: executing program 3 (id=543): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') pread64(r0, &(0x7f0000000100)=""/231, 0xe7, 0xadc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) (async) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fcntl$getown(0xffffffffffffffff, 0x9) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2a000000060000000000000000000000010000000000000004000000cb0f00000000bcc887e09b347f426575210be78ae600000200c25f8824"], 0x2a) (async) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2a000000060000000000000000000000010000000000000004000000cb0f00000000bcc887e09b347f426575210be78ae600000200c25f8824"], 0x2a) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008001140000000000500150009000000050005000a0000000500010007c84e0005000400000000000000000073799784a08662dba39ec37a310000000010000300686173683a69702c6d616300769c1e9eb08dd7c93af10e63557d49f1fa242a6e4883cfcdc372472519e895300a16965b64fa0100689a00fd28b357304e8c7cc5f7dfccc084bdeaee9aa93e8297a52abe601bcdf6ab6885ea2836b3e0c6bf38f145"], 0x5c}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d48e8840c21536007abb000000010902240001100049000904004b028d4add060905070b"], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d48e8840c21536007abb000000010902240001100049000904004b028d4add060905070b"], 0x0) 4.603465221s ago: executing program 1 (id=546): io_uring_setup(0x6fe1, &(0x7f00000002c0)={0x0, 0x2000698c, 0x4000, 0x2, 0xfffffffb}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000001f580), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000640)="24ba8d4416", 0x5}], 0x1, 0x5e, 0xdc) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r2, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000081) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000600000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)="fadbdad9477585d139a6f162a49a784659b6fe6701ce5d3ad145cd9aeaeef9ed237bfd948a6ee423f5676449ff4aa153e84d70e8a9af3624f8a068de9227d963243a5c6168ab1117c22ac72cf45c1e833a081218dc9540e0a340a264c357376dd292d8891c89978f4b67d158f6fc4144d1d600cc46dad22c30325d1b4fd450dd03d85b927062d48caefb9ecd56d05e1eb926cb0427021a54d8ac359d56e33d063e2645c309b1405b45ca959fc41bcfc447562ff766871d349a04af5bcfc13d4d044b494e2d5ed393adb399bbf22b49569d9dd83e1cdc2a93918d66d876409230a708e065b510aeb5b076bf47ea83fb644d65", 0xf2}, {&(0x7f0000000100)="d3c83f5bf9d5a1d4e15b5dfec02c9455e02c6875a7d35b67614ffae8d0ff97fed443", 0x22}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000170100000400000000ffffff0000000018000000000000001701000004000000040000000000000018000000000000030000000100000000000000b8000000000000001701000002000000a300000013e53bb7f76b947d5cf9d74d9215d73880118ad850e787b030185bffd10143f7a92225658659ddb2bba5d0f40a9fe2f85e134fef425323ba48306fe0122921d32e9d0f0cddfb5ef9b10973bee2cf3b1336bdddb1abdf582f9ec79c8aee7efc944bd606792776a73d265e5cc8da579c1046bb11f4f1c79b253915819ca3cd15d52317f3a659000000000000e456869dddd96721442fe70766b29045c26631476948ffbb0018000000000000001701000004000000faffffff00000000180000000000000017010000030000000000000000000000180000000000000017010000030000000100000000000000"], 0x148, 0x800}, {0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)="a21052d6ae51ece533058a0fa2e9fdf3c1d67637f1abd73f364f831296dbaa7de5b5a5478300684962e9aed3703253187a04487c5a393795fe21c1787d9a6eb6939e7420a281408ed4383e94f6b2625e5c76c251d605062576e41060a7eff39096c44b14aedcbfea29de37c60f36f284fcffacfbdeaeec62963399a41728521412b6f010b05d8c8dfe0acb00230ef6aa9aa4964be081ee186dbcbe2d708efb842dc65a5b157d283e2f7b1c155860b8863267e1d288be00512588bc3775204b4fcd2ad187077bc879b8e65ffa0583a7b5ef7dc2eb88168ecdeebcdb52c8e2aeaf68ed8a09ba3397e4ee61113a81246c215b4e59e09957646cdf5da151edabb84921c29ec0c77fb53f624e9c97058e2c62f6661903160996b67bd2c9a5df67305423b83dfd542645dbef921f4450e4e0f6c734e3031a16ad1ce21edbda1dc6cff1f1b92124a6eecac4fcd697010aae417796f85485ce5731b64e1c22c28f5affc72afc99951a1661fffb17b8f2bb05edb3bd2b1a2b41175166be85459916091fc28494fd813f95552edf4835184418ec173a583d4584d3721e6ba4e8dfa336f43161910f2bc93c7ac56600d29565f1a0865c7eade20c4695843e017d600c0182deebb9c0bf844364d04630279e30d4349a3e107df4414fab385aca1081ce3420b7c1cd7820e4391f018cd08b1665ff9f8c6013cde33958fa346edddf0ecfcdfa739a82c4011dbfb5c034bab43d623467c93e128a39e5019537dc051cb26c28a620085957a0467c25fb9bd1596783b8cf519852a0446407b78b9e55c366ae98e39bdf44f8adb98a573d6763ae68d9411d8e68ae664c01391b7b0aaf9e20ef465ee487e9cf02d7bb3d64bcd82cc5ac8d4dc19ea0348a41f156984f7f294fcd6682d36962729e2baa60b44f6c58b6cc6a229ac7cc1058ba762b534fa0c1b2b3b3ce80b6af78dfc6c4624757aa38de92059550a824e3e631cf61f1aa76607a855981374ba8925cbecb31bf6276c88c97ff857fde98b49f6d70a6fb03dfd53fc783e946502f202d52cdddaa4226cb338fc5deba5b581958a2d3528cbe4afdfba56083cd52bb6fe26061972aaf8bf2386e87532dda7c544cc01d11da49f0f12a5dad8335f30f9a91b4ae7a4e1e3c00223514dd969dcb44e0b6d44a13b7762321493268373f235b5a77fceba5edaf8f458a1bba3ee9392592041df6379a08b59b14928b3e51076e2dccb6797dcaa646a3af1ca8554ba1ece50b6e72b837867e0b2cdce1707adb9d89b187cd452a6ec37a33ad5d4a084d658db5d9c643d22a47767d9c5b1453e9f1b646843a272ae7a1cb61f52b64790a344737f87bb063796dc73992cdbf4d41bafdfd92cf5d0863681c7f720d3e6266d3d4731031ef44a80fde96b6c20913db19f334c39f864439f81957b39b239e8e74a501c4ec494e2b056e6a84f7404c6b83e2941d99b98c90e063ec45e7e04b009d7b29f6e5d52b2cebff39f1663ee69b3bd99025ee570b718e22fe9148c1457104dbe160e7d5182fbdcf5655cb9e6316ec2919d5d6d6e4428d8820e9bec94b0c0795b371305a83cdbe5e12858e55c1ae3b4351bade2bf14f4518d07b5cc951db40542e61ee5583e659b3cb553db0aea341326231690d8990ed02c3fc2e7ac21a1f029068126b9aedd4721216493d8e01fa1e170c162ea7809320b79a2bc4c2ba36f2ef610045d7c8079111bfdab34d480c0c02755c38898f3f1a5486536c6081ccfbef542a1fdc32b23682024577a1d504ff7ed4c4805c9d5fdc49b95089d62334d46a6016ef2605ecabcc253451d2176e3b6a640b43f4860a9874ffd59f653052b5b2f60e4330ed0b65bc6e7d3288de5c5c475ab6484bf3b982febf7044d79a3aa94a3620f236e0b056a6e7d899f1659e56a9be0b2afbe4624d94351027f67d6e8efd6c629521e13e32e9a4b71185baef68f74b9cdfe575052de665b268d115fafc616394271be379a3c653b050d8eb6df503a9af0c9284098ec7a8ecda7cf383f807ad452084acb137342c336d9e1e7597fe7c0eff1b2a335f8dcd553276b493ff3c0e43b0365c1ca8b342d97ccb31e802a969dfcaeb1d6bb6adba1525543a2e187a742d93be089a6cf636f7cd47fe0b7d82bc99548d9face5e3df4c4dc40662bad8451797aba314dc79a5cda473c7d97a59a58741d6c8d14da1f78aad5b075ea633e6146ebd614e432a42bf22e11f2d5047815317a699098ad7caaddf985cb3d06c7849faf15bd24f39c0c98320f18e6f6ce9bd652b2ef9080a410b7727660ba01b950859550152cdd18b765d937a5f03ab9626ef2601442b77d08503112336185edc21c70cd1753e1e4da499030def8b2150bba099aa0578350e15f6c1ddc74e55ea7fc83b4f535fe493474ff0681d9dcede8329631135d221f3f57e7aa5b428092ed691ccd98945e51b2217e0b2f7e5b91a3935ff7c75ec240f0c2a580c86176497bf63b144d0370cea6ac4c9966d904ae382b724ac0a5e6824b0bae867009be5952834426212bffc2c1cdb4ebf257ac7ee73be183fc4cb77a469905eaabac9dc59ea5e09de5ae20d7baad8f66814611b901e9efdfd7ba2ca7eae1fa4ae1b1ca471a02f4a58cf8c8c1d414eb59d5b31a431f9a69850381b09894a9fa754c5f9cf83d8e36a17dac52e3e92de8e96a1750426d9fce05f9ac7cca62bdb8de62f11f9bad956dd3166019af5030ee26e7f7d7314256dbbc55474fe8e927b343eb639c14243f2804900ab600da7065b6033700d60147bac9e9de895f5bb3dcc5ff61a093073a50ba1431f77d8047a39690dab74a50ebc06d10770ab9883f42ddbaf59484e425518791f3b40d45fe416c50189c114a451e7bad398dff8c5e6b84c8e743e8f030764d6e33e8a9c924ed85dfefe18f494435f75c29f8d525f938fe2be62880b9fa91b35e7770e502135c147ac6432bc23d67c7595089c22a1ff1324818ed64924dda6986a72d8c14cf61eaf2b9ed93ec62ecff63eb36cd96b055517583377bcc8a549ac2db2c1d62ebe6781ce1e9e57c4afac3b657bbdb8eceee6ed3cd55b1995975e2fa3c4098bc90cfbba3677934dd17fefe6bb3ecb47d49c6a953febf6bd0f17c98d158d34c712b26cc3ae22227fa86f2179520aed6b85cf6c66004e0615ba6a7dff6b6e740b524eb82c62a2b02f2099a650cdbbeffcdc169e6f826c87956c1a8e7c1025bd4f3187011c66d0a903eedb001ef1544955cb21c2dd13567440dde0a13b1ab82b2648b64ed5e95c53c2b9671899a80431801b0cf48c86082cef85611de9bba7bab069404687c7787cc2409e2590220b871a7b7941475e11fcf21fd51b4daca1f307e76a9580b5cb715900488ab0f6d297897b355e1e4b113301720990e1b63ae089b4bac47b911f21ea7ae0e40e77a5562b668c68224bab7889b5ce8d071e72f76791e257fa4e58667ab79295dad26d43b7ab6dbb16d7dbe9347d1bd8be73485b0d95893ac5c7e31cef63a76801a91f177f67b90632bc7ea6fb621387fb3f80497f4a14650edc0575e0129bca17c638159fe7df35e83e5c5c8a86fdca0d5167b0f30abe851dedf581ad0228e0e2f00eb44fca65c6b7552813ecf56f2501ca5262f15b2681f54e21b789bb8a7e3e24afade664151545f0f38dc667c4085cb81fdd36fb54760237faad3bab8b332459663f3ea4961cf5e00fc6bf18591845cb62e0e7ff923e42d11f26a0430690eee58c9ab8eea0b624f5f35b7560641e6eef816f2ad854925c1d6405c844d27f5281438d3f1d449c83dd1a2ac1949615cc8686f6786028d315867e679c5f3243230fbb949866a407d88825a18a575e2aff4daa2f8faec91de7b4b119b0624c121772e021c712eba192f93ea0e595ad5395b36af5453dcf3bd5505bd56aab0f4fec77fc39356e3101a2e4371e0a7870ca6ddccfc4deace29a6b60d1a92d0a75e4854b1dae858f7553c409e3b390c4cbb5f67024d6c702372975da78a7bb5b17e8770cb7bee7c1c88d8244543772f33889eaac98bbff351d4178e7a123ad5f0e14d617a81cb94c99c4f86fbf901a553a07434a17b571c5a6b282c68913b59a18770a9a15b7ac08c1705299455f0380e442aaa710b2e26f3d75a08048b514dc78fec77321018a37cce119644a538b2962bb3afa3bf4f68063cc63fb59dc6b5fba2637d80da172f1a2703226827086717a7ff0c402c37c02fb25bca4fa7ea2d3e20e21d2e434abc50ce869f8e7b28cb9f32ec8515269d682d76632b11b291ac57abbcb3b0a955cd2a5f18680c9e48b3839166d5e6e63ca18c52b50fb4ab1d69d0d4b9cdb1f876f4c68f8714749062649e23457cea72a440fca3a1ba826d316382ccd5f1588a43d810869e5f380740acfe21228f8553708fb27d66987ba34490dbd504f23c238a2df6a0680d4432ba9aa291b653dc89c2778d2b7b2eef06d9342361cf852ff6780d78c5e08abd9760924c019415cfc0713d389b7be7350cf1b8dff22665a54f717f7858266940e0e1cd8e5d5b6e75057fcdfadcf18141285fe175d8714a13a79998d9c59ac73c219f5c47800f29ab9f5a00430e441514c23b38d0169657c5ebbb11cb9201bb00070de06f150fea2410f0cff586905cdfeb0f75e3946af0cdf92871b1e5b444ddcdcbeb0db4641523183f685a6ba7704e86544bd7c5c2529f306ca6f1f9db4759dd50934c70c98470baf35396a4fad2360f969735bf9a637f06f3d30b05c3459480b68c38cc281ca0bcde10cbcdeba40c9eb1f1a1ece8a24318ba539fdcabaa1a6c4acbad82b2c1fe7a0e58479d666527e71351f8faf6783ec4d2b9ccc96c095a181325ef82d8d1c28c769b7000138805395d1200d3825f91ae4c8db600cfc13abc2c25416eacfff15542c3439fd6a07b8bc6d2bedbbed5f030aa496a4a63ed8a42cdb381fa1d12c56ac3f3f3f1f1f368677b30d3b829a085265fd6275837e87b14fa497cfac10762f412aef925aa16365144c5705b8c31fa3cc46d9e071ce4f208ada5a1a7440eb00d512ebe782569d2a473c78d7131f4ff3a47498f5d8e1fa746fd6be3d6c2128ec6f09c695dc42aff43fa8eb43e9df7d7cb6744121d34895d5ecb35ca2244bf8a1c6f11596e30e4f8262d1e27e58fe8c6068a087fd425f8325542358308b2cf888fca36a654ec505527c61ba0574074ca657ed4d7deb1daf58a4ba1853e67d0ead315df5d6e73ee669b8ba5e2c574215c165487221e6f4b9f55d65b43335307b3023e0efb2ca93b647f4d080a4660d9137b833963ab9d1ae326266974652f9b5fb2a83764d56942e45376f115517f3d193d783cc9e48cbf9ad909c74277ddf970f6538871933f6cf56ccdda3ba3606646d4639af71f8efaf7282ed322cbba01476a0acf3a8f985e0d41fa137e12e157b659963af4493f518b71f0cb479c9add94494a9a57d372a2d1d27fcd828a2e980e39d8cc2e6b08c421fd246993b418b218c88b6ccab26a14645cd4beca351312b8a29e10f70db30eb2b4013ac29c0aa300f57ed4642754747e86912a0b556b51fff536cc3081ac462da5bb129c79dbc12fbdc90579c2a0e7da9c1171612fa1e6d7deb610d520a4086f2d17b4621ae224ee3a3720550dc27bea414778382bd5a6206d65ddeb96d6c397af4aea8acd185f5321d3dac6da00b4f206881f646add6e60327c64f0c0dec36b07896673ee3331b98fd8f84cdd6c91e8f7eb0a9ad4d77fa7cd74199931546a1921921f38e89351cb9997a72acdc00a76be0addaee191ba41f1a375099e6d22a0daf58c0d8b35a6c27a5d9a3cf", 0x1000}, {&(0x7f0000000340)="906a2c473613d1ff3f42f61e28fcbedb7dc1bfcc84381818c10d8d1e1d8713f2576c2a4b52fe602fedd262973e7976c2d01f276560e43d32019d14c892c6785b3368b9eac0490f9dd484f0e21f236fbbb6bf284f0cd67fa18f0819019f4bc9b8a28247f412a61b38c9701eb12be4bfe46a5d1eba3a5df2c0346f00f8", 0x7c}], 0x2, &(0x7f00000003c0)=[@op={0x18}], 0x18, 0x8005}], 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="144000bf81f8f581e16f000206016b000000000000000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4800) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r9, &(0x7f0000006ec0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000080)=""/53, 0x35}], 0x1}}], 0x1, 0x2020, 0x0) bind$tipc(r9, 0x0, 0x0) 4.338908013s ago: executing program 4 (id=547): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b", @ANYBLOB="ac1e909f53247b44dfc7fb24b6e75ec28ba0094583e6456248681b5aeb854f8a9503b9423332f539328153a8a30faaa8c16ac7f30413914c1992b19d66e18501122816c93ee6878a05ef97ba8f1cfa9a2ee227cb6479448adc62ff84d86371fa3dabed37dd0ad45cafd716d010006a5156ca0d57f4bd437fcfbea7e5ecc88f05ac8db738d8a543022fa58421149123ed2dbd"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000180)={{0x6, 0x8}, 'port0\x00', 0x9864711380b519d9, 0x428, 0x6, 0xfffffff9, 0x2, 0x6, 0x187c, 0x0, 0x4, 0x1}) ioctl$sock_inet_udp_SIOCINQ(r12, 0x541b, &(0x7f00000000c0)) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2f, 0x0, r3}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x67, 0x3, {{'deflate\x00'}, 0xf8, "6f85bf85a2fc88fd5132a7226878830e7135efbf027ac5cab808d6a4b3ab2c"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.471618543s ago: executing program 2 (id=550): r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 3.156067707s ago: executing program 3 (id=551): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2022, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000340)='./mnt\x00', r2}, 0x5) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000280)={0x9, 0x1000, 0x2, 0xffffffffffffffff, 0x4}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) unshare(0x42000080) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 2.262951591s ago: executing program 2 (id=553): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000ae80)=@newtfilter={0x2a58, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0xfff1, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x2a28, 0x2, [@TCA_BASIC_POLICE={0x454, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x80000, 0x7fff, 0xfffffe00, 0x4, 0x9, 0x5, 0x8, 0x3, 0x6, 0x10, 0x10000, 0x1, 0x4, 0x0, 0xfffffff8, 0x8b6, 0x101, 0x7, 0x6, 0x8, 0x3, 0xa2dd, 0x9, 0x9, 0x18, 0x800, 0xae4, 0xbc1, 0x9, 0x4, 0x3ff, 0x8, 0x6, 0x4, 0x39, 0x2, 0x80, 0x3, 0x3, 0x3, 0x8, 0x0, 0x80, 0x2, 0x5, 0x6, 0x400, 0x1, 0x8, 0x6, 0x0, 0x8, 0x6, 0x0, 0x52, 0x1, 0x1000, 0xd3a, 0x400080, 0xfffffff9, 0x0, 0xffff, 0x8001, 0x8, 0x200, 0x2, 0x2, 0x6, 0x91, 0x9, 0x5, 0x5, 0x4, 0x7, 0x400, 0x9, 0x3, 0x4, 0x6, 0x80000001, 0x1c9c, 0x4, 0x5, 0x5b, 0xce9d, 0x9, 0xe, 0x2, 0x3, 0x7, 0x7, 0x9, 0x9, 0x9, 0xff, 0x6d6f, 0x8, 0x101, 0x1f0, 0x9, 0x4, 0xffff, 0x2, 0x3, 0x1, 0x2, 0xc0e6, 0x5, 0x1, 0x4, 0x10001, 0x1000, 0x5, 0x6, 0x3d, 0x7, 0xfffffff9, 0xa8b, 0x8, 0x5, 0x4, 0x3, 0x1, 0x7, 0x1, 0xfffb, 0x1, 0x6, 0xfa6, 0x101, 0x9, 0x682, 0x7, 0x5, 0xd, 0x2, 0x9, 0x6, 0x1000, 0xe, 0x7ff, 0x401, 0x6, 0x9, 0x5, 0x0, 0x4, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x7, 0xfffffffd, 0xf, 0x9, 0x6, 0x6, 0x6, 0x8005, 0x8000, 0x3, 0x8, 0x6, 0x8, 0x6000, 0x5, 0x7f, 0x0, 0x198, 0x4, 0x3, 0x4, 0x0, 0x3, 0xe, 0xc, 0x6, 0x88db, 0x9, 0x2dd, 0x80000001, 0x3, 0xc526, 0x8, 0x3ab0, 0x7ff, 0x813, 0x5be8, 0x0, 0x1, 0x4, 0x33, 0x4, 0x9, 0x97, 0x1, 0x2e4, 0x8, 0x89, 0x6, 0x2, 0x1, 0x8000, 0xffffffc0, 0x88, 0x3, 0x4, 0x287, 0x8001, 0x3, 0x1, 0x8, 0x5, 0x3, 0x8, 0x2, 0x5, 0x2, 0x9, 0xb4b3, 0xfffffffb, 0x0, 0x5, 0x7, 0xa, 0x7, 0x0, 0x4, 0x5, 0x9, 0x800, 0x8001, 0x1ff, 0x7ff, 0x2, 0x1000, 0x4, 0x100, 0xd17, 0x800, 0x0, 0x6f, 0x8, 0x8, 0x9, 0xfffffffc, 0xfffffff9, 0xf, 0x2, 0x5b9, 0x2, 0x80000000, 0x3ff, 0xe]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2800}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6f, 0x1, 0x6, 0x2, 0x5, {0x9, 0x0, 0xd2, 0x80, 0xee, 0x4}, {0x1, 0x0, 0x2, 0x6, 0x8}, 0x7, 0x1, 0x65e9}}]}, @TCA_BASIC_ACT={0x2574, 0x3, [@m_ife={0x64, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x23, 0x6, "0b57d9f52a927353ee98aca08136866bdd52efad578614b2867928203882ba"}, {0xc, 0x7, {0x0, 0xc09a345e9edf5e70}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x140, 0x18, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xa27, 0x3, 0x3, 0x2}, 0x22}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb12, 0xaf82, 0x3, 0x9, 0x5}, 0x58}}]}, {0xda, 0x6, "52c385e938600526b8d7307a36f393e1b6b3e26691afdf6c9090d99eee65b95f5f49f7f3864d2f5ec1b983a088e3f725d054a483a4557a57f0a00fc65e935900f44f20e21cc8a386873864568ada32710620837e7033cd49172c4c080dfaf35093c8a470dd1b62adca26bfd90e0bacb7b9a7a1cafaad7f676f59f60980adde5a2bdca5876d0bb470401043c1f374dca6ec98cbead65ddf623411cf381e4b028b68faf31b27473f970913a7821804e5d78633c75b0431f3c8238ab2cf8c7f59b67976b2f559f0e60f3ad917cfc6961890fc672e5f4916"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xf64, 0x13, 0x0, 0x0, {{0xa}, {0xee8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x2, 0x4, 0x5, 0x0, 0x40}, 0xf2, 0x8, [{0xa0, 0x0, 0x41e63642, 0x1, 0x9, 0x5}, {0x101, 0x8, 0xbe9, 0x7, 0x7}]}, [{0x3, 0x7, 0x1, 0xe, 0xf, 0x9}, {0x62, 0x8c, 0xc37, 0xb, 0xfff, 0x80000001}, {0xb50, 0x5, 0x9, 0x8, 0x3, 0x8}, {0x53d, 0x2, 0x2, 0x2, 0x1, 0xfff}, {0x9, 0x3ff, 0x3, 0x4, 0x748, 0xf}, {0xc, 0x3, 0x0, 0x5, 0x2000000, 0x7}, {0x9, 0x40, 0xb, 0x10001, 0x5e227ee4, 0x44b}, {0x8, 0xe59, 0x6, 0xfff, 0x5, 0xc81}, {0x7, 0x7, 0x3, 0xf98b, 0x2, 0x9}, {0x1, 0x101, 0xfffffff9, 0x9, 0x3, 0x9}, {0x5, 0x5, 0x7, 0x5, 0x200, 0x32}, {0x7fffffff, 0x8000, 0x3, 0x81, 0x1000, 0x7}, {0xffffffff, 0xfffffffd, 0x0, 0x3, 0xe602f5c, 0x100}, {0x6, 0x5, 0x3, 0x9, 0x5, 0x6}, {0x6, 0x1000, 0x6a, 0x0, 0x7}, {0x9, 0x3, 0x1ff, 0x810, 0x1, 0x6}, {0x4, 0x289800, 0x83, 0x7f, 0x5, 0x101}, {0x7, 0xfffff801, 0x40, 0xe, 0x80, 0x8000}, {0x70cd, 0x8, 0xfff, 0xefc, 0x1, 0x7d40}, {0x9a6, 0xb53, 0x2, 0x3, 0x0, 0x3}, {0x9, 0x7, 0x0, 0x1d, 0xb51, 0x4}, {0x5, 0x6, 0x1, 0x61c, 0x7f, 0x7}, {0xba, 0x5, 0x7, 0xff, 0x7f}, {0x6, 0x6, 0x0, 0xfffffffe, 0x1, 0xff}, {0x7, 0x3, 0x7, 0xfffff243, 0x7, 0x9}, {0x0, 0xe, 0x2, 0x200, 0x3, 0x9}, {0x7ff, 0x5, 0x3b, 0x9, 0xb, 0x7ff}, {0x906, 0x1000, 0xc000000, 0xffffffff, 0xb, 0x1}, {0x2, 0x2, 0x7, 0x6, 0x6, 0x800}, {0x5, 0x1, 0x5, 0x1, 0x82, 0xd41dcf66}, {0x7fffffff, 0xce4, 0xfffffff8, 0xf, 0xf0, 0x8}, {0x3ff, 0xfffffffe, 0x80, 0x10000, 0x4, 0x200}, {0x0, 0x5, 0x3ff, 0x2, 0x2, 0x6c7}, {0x10000000, 0x1, 0x5, 0xfffeffff, 0x6, 0xaf}, {0xfffffff7, 0xcf, 0x8, 0xc, 0x7fff, 0x1}, {0xa, 0x800, 0xfffffffa, 0x8, 0x798b}, {0x7, 0x40, 0x5, 0xffffb04e, 0x80000001, 0x7}, {0xc3a, 0x7, 0x9, 0xffffffff, 0x7, 0x8}, {0x614e000, 0x1ff, 0x1, 0x8, 0x10000, 0x3}, {0x1000, 0xddfa50, 0x7, 0xc405, 0x0, 0x8001}, {0x10000, 0xfffffff7, 0x10000008, 0x10, 0x4, 0x5}, {0x3ff, 0x5, 0x3, 0xb76, 0x200, 0x6}, {0x80000000, 0x8, 0x4, 0x0, 0x101, 0xffff}, {0x6, 0xff, 0x0, 0xd, 0x1, 0x180}, {0x4, 0xf, 0x8, 0x8, 0x1000, 0x8}, {0x3, 0x2d, 0x0, 0xe, 0x28, 0x6}, {0x3b67, 0x7, 0x800, 0x80000000, 0x0, 0x1}, {0x1, 0x5c, 0xb2, 0x3, 0x0, 0x100}, {0xffffffb1, 0x5, 0x1, 0x0, 0x3, 0x40}, {0x8001, 0x4, 0x800, 0xfffffffa, 0x2, 0x7fffffff}, {0x1, 0x101, 0x0, 0x8, 0x7f, 0xfa8}, {0x1ff, 0x0, 0xe, 0x5, 0xfffffff8, 0x1}, {0x40000000, 0x7ff, 0xfffffff7, 0x4, 0x5, 0x8}, {0x9, 0x7, 0x0, 0x3, 0x40, 0x9}, {0x100, 0x9, 0x7fff, 0xb, 0x100, 0x4}, {0x6, 0x6, 0x1, 0x0, 0xe60, 0x1}, {0xba, 0x5e0a, 0x2, 0xe2d, 0x2, 0x5}, {0x1, 0x7ff, 0x7, 0xf8f, 0x9}, {0x2, 0x0, 0xfffffffc, 0x8001, 0x80000001, 0x6}, {0x0, 0x7ff, 0x8000, 0x5, 0x800, 0x7}, {0x8, 0x9, 0x7, 0xfffff801, 0xfffff526, 0xf7}, {0x6, 0x9, 0x2, 0x4, 0x9, 0x200}, {0x5, 0x0, 0x9, 0x3ff, 0x0, 0x400}, {0x9, 0x7fff, 0xba4e, 0xfffffffa, 0x5, 0x46}, {0xeb2, 0x1, 0x5, 0x9, 0xc5, 0x8}, {0x2, 0x8001, 0x0, 0x8, 0x4, 0x48a}, {0x80, 0x10004, 0x101, 0x5, 0x3, 0x4}, {0x4, 0xbd6, 0xd528216, 0x0, 0x3, 0x10000}, {0x9, 0x5a, 0x2, 0x9b7, 0x6, 0x8daf}, {0x1, 0x9, 0xac1b, 0x1, 0x4, 0x1}, {0x57, 0x100, 0x6, 0x7, 0x4, 0x7}, {0x5, 0x7, 0x8, 0x5, 0x5, 0x7}, {0x3ff, 0x0, 0x4, 0xa0, 0x200, 0x6}, {0x9, 0x0, 0x5, 0xffffffff, 0x1, 0x6}, {0xb1, 0x2, 0x9, 0xffd, 0x1, 0x13a2c00}, {0xd, 0x400, 0x80000001, 0x0, 0xe, 0x8}, {0x4, 0x7, 0xfffffff7, 0x800, 0x2}, {0x10000, 0x400, 0xe, 0x4, 0x2, 0xc}, {0x2e2, 0x100, 0xca8, 0xffffffff, 0x5, 0xfffffff0}, {0x3, 0x9, 0x8, 0xffff, 0x6, 0xdeed}, {0x6, 0x1, 0x8, 0xd9e, 0x7, 0xd2}, {0x80, 0x3, 0x6, 0x7ff, 0x7, 0xa24}, {0xe, 0xf, 0x5, 0x2, 0x1, 0xfff}, {0xfff, 0x0, 0xf47d, 0x2, 0x5, 0x81}, {0x8, 0x3, 0x7, 0x3, 0x7, 0x5}, {0x0, 0x3, 0x10000, 0xa, 0x9, 0x1}, {0x1000, 0x1, 0x8, 0xa, 0xbd, 0x80}, {0x48000000, 0x10, 0x7, 0x1000, 0x7, 0x6}, {0x10, 0x7, 0x401, 0x68000, 0x2, 0x7}, {0x6, 0xee7, 0xffffffff, 0x8001, 0x6, 0x8}, {0x7, 0x80000000, 0xcc77, 0xd, 0x43b990b5, 0x6}, {0x5c, 0x6, 0xe2, 0x3, 0xa1cc, 0x200}, {0x6, 0x2, 0x0, 0x3, 0x6, 0x3}, {0x3, 0x8e, 0x6, 0x200, 0x2, 0xffff0000}, {0xcc09, 0x1, 0x7fffffff, 0xe8, 0x0, 0x7}, {0x59, 0xfffffff9, 0x0, 0x1, 0x6d55, 0x4}, {0x9, 0xa, 0xb85, 0x5, 0xff, 0xfffffff1}, {0x5c30, 0x6, 0x58, 0x3ff, 0x3, 0x8}, {0x2d1, 0x8, 0x5, 0x8, 0x3ff, 0x6}, {0x0, 0x5, 0xffffffff, 0x0, 0xbd3, 0xf}, {0x2, 0x2, 0x316a1841, 0x2, 0xb82c, 0x80000001}, {0x7, 0x9, 0xfffff044, 0x4, 0x6, 0x8}, {0x4, 0x3, 0x2c1, 0x0, 0x3ff, 0x8}, {0xa398, 0x7, 0x4, 0xd48}, {0x400, 0x8, 0x3ff, 0xd, 0x8, 0x2}, {0x400, 0x4, 0x7fff, 0xb9a4, 0xb, 0x9000}, {0x8, 0x200, 0x0, 0x2, 0x3, 0x140}, {0x62a, 0x80, 0x6, 0x3, 0x8, 0x8}, {0xf4, 0x4, 0xffffffff, 0x9, 0x8f40000, 0x8}, {0x6b, 0x7, 0x101, 0x5, 0xaa, 0x3}, {0x5, 0x412, 0x4, 0x10000, 0xbb68, 0x6}, {0xba2, 0x3, 0x7, 0x9, 0x3, 0x1c5}, {0x4, 0x8, 0x5, 0x1, 0x2}, {0x8, 0x5, 0x7, 0x8, 0x6, 0x7}, {0x54, 0x9, 0x4, 0x6, 0x8000, 0x4}, {0x5, 0x400, 0x200, 0xb, 0x9, 0x4fbf90cb}, {0xffff0001, 0x4, 0xfffffffe, 0x1, 0x8000}, {0x63d, 0x0, 0x8, 0x7, 0x9, 0xc}, {0x5f3, 0x1ff, 0x4, 0x1, 0xc, 0x2}, {0x7ff, 0x8, 0x7, 0xfffffffa, 0x7, 0x5}, {0xffffff00, 0x5969, 0x0, 0x8, 0x181, 0x1ff}, {0x7, 0x3ff, 0x2, 0x0, 0x0, 0x2}, {0x6, 0x8, 0x6, 0x6, 0x3, 0x100}, {0x5, 0xbe5, 0x3, 0x8001, 0xffffff12, 0x9}, {0x4, 0x9, 0x7, 0x6, 0x6, 0xb}, {0x5ff, 0xa1, 0x2, 0x86, 0xffffffff, 0x8}, {0xffff, 0xe5d, 0x7, 0x6, 0xfb, 0xecaf}, {0xfffffffc, 0x5, 0x1, 0x100, 0x31, 0x1}], [{0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x6}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5}, {}, {0x0, 0x2}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x5, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x970afa34f7578b7, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {}, {0x7}, {0x2}, {0x6}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2}, {0x5}, {0x2}, {0x2}, {0x2, 0x1}, {0x4}, {0x0, 0xd1f35c6291324272}, {0x1, 0x1}, {0x3}, {0xe3b1394037c62d7f}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x5}, {0x4}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x48, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x54, 0x6, "ef55e62c6a1cb4bcf1c58a54e474389dd9e0d5b4c3f922d5ce9dde9caacc7d6468608a182cbf609d274fa9a9f783f0afb75bf4f04ab1d23c510611c794d642affe872a3dee7abd92520de6da97773a2a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x1d0, 0x1e, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x0, 0x3, 0x44}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xfffffffe, 0x20000000, 0x2, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xfffffffc, 0x10000000, 0xc, 0xb41}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x80000001, 0x5, 0xffff8000, 0x80}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x405, 0x10000000, 0x3, 0x8}, 0x1}}]}, {0x101, 0x6, "da256cf5496f1a576871f8d079e8e5bc82722fd63285b572d71ba579c0533c5de5f11f6bc814cbc842a1bc264563ffe8dd38baf8737070780663ec28957c20628928a9f414a64ed510f94fd1b3d4dce06585d8b3bc7c61bab8ef8ff3b268bfa179dd9c16eeb3444f18ba008c694b58682e79b519ee2aebb184eb00004954653e42ae065609034478c765b33f0da0d7099116ca92b38bf7db9a3cea9061f734b5a2d46c69df08a641e04bb0532f81d155b82d62e28d4255446f875c7147177d255a6956af7011b56300dfefe73b08ac58f0252bf87653bb3b0086082f127ac2b9564c662379dfe9188d2f592429d73296321ccffda1e7a70dd826e58938"}, {0xc, 0x7, {0x1b7b175b186ddb9c, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0xe4, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x0, 0x20000000, 0x5}}]}, {0x87, 0x6, "85758dc5916f5a3871edb9f4bf08c21094406c78be5810de2096fedc957b30a9bacdcb53e0ffe5e3cc947f9cf1f132e1fc777b83c87400e24d9a37e2b706096cf462041bb63a46e45176b9c2c5ab5940b6c62fe56f4167e9724cbf77c69f6762a67c5f88509b8830c9dd0c03b58895ed7f8da4dc159aca1fe81d122aba81f4b557b582"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x1094, 0x12, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x638a6}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1932a}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38427}, @TCA_MPLS_TTL={0x5, 0x7, 0xcd}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x2, 0xb00c, 0xffffffe1}, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x120, 0xf, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80, 0x1000, 0x2, 0x6, 0x8b}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0xa7, 0x6, "7cd3ed4864ecff6d178f29bdea939f37869f08eefeba7a8baa65610bc61efdcce1839290bb92a4e2b5d137115fe830f295479001b91f48c9b5c0d6cf6c125aed03ebd8d855acf06e1c9dd354697d7b6f596f0e4dcc8f872555abc105e1b18fd344d713008605441ef084c90ae061f46555d2829ef452fdc1232d2000afbc0473e068ebf2b9118f63ef9375823a6d16e27afde6e5bb45842de09e1beb829267b963d347"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x5c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xff, 0x8, 0x5}, {0x4, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x81}, {0x0, 0x4, 0x3, 0x5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xffff, 0x7, 0x4}, {{0x2}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x80}, {{0x1, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x2a58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 2.115326626s ago: executing program 1 (id=554): socket$kcm(0xa, 0x5, 0x106) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000008) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x400008, 0x5, 0x3}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x1f}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x63}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x2000400c) 2.012731757s ago: executing program 2 (id=555): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffffb8110f44, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2}}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a31000000000500010007000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.850412119s ago: executing program 4 (id=556): socket$kcm(0xa, 0x3, 0x87) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_dellink={0x2c, 0x13, 0x1, 0x4001, 0x8000000, {0x7, 0x0, 0x0, r1, 0x0, 0x3211}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000010100000024000180060005004e230800070001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcfa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.799427439s ago: executing program 2 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, r5, 0x1, 0x709d2b, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x840) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x810, @empty}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2c093f714", 0x5}], 0x2}, 0x40890) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000080)) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'vlan1\x00', 0x0}) sendto$packet(r8, &(0x7f0000000d40)="0b036c00e0ff64000200475400f6a13bb10000000800884848030054dcca7753c1cee40a7f0ad8a7de42ae207a5afeca4af98b3c530ceba536f3a9deac1dd2c382c8e207cbecf1af38ea934a4e0ee17f714b33fdf7a1fdab084546448b8badc4d1559b2cc509d1359e468056cb4785616853c8bb78b4", 0x76, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571103900000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48) 1.583917328s ago: executing program 0 (id=558): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, 0x0}) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_load_code={0x12e, 0x7c, {0x0, "0f21e567f240af40e70048b800200000000000000f23c80f21f8350000a0000f23f8c744240039000000c74424022102715dff1c24b9d80b0000b8b2000000ba000000000f3067f30f10970c0000004687e2c4e1797eaa8d000000c422f9ba8a00400000"}}, @nested_vmlaunch={0x12f, 0x18, 0x8}], 0xc4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.239107331s ago: executing program 0 (id=559): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x3, 0x15, 0x0, 0xb, 0xf9, 0x2, 0x79, 0xff, 0xc, 0x1, 0x1, 0x0, 0x6, 0x5, 0x2, 0x6e, 0x7, 0xfa, '\x00', 0x3, 0x20000000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9b2865eb3812f16a, 0x408) 1.219024456s ago: executing program 2 (id=560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000780)={0x0, &(0x7f0000000040)=[@code={0x1, 0x6f, {"66470f64dfc4a3255f1d040000000266baf80cb8ecdcf388ef66bafc0cb86b420000ef0fc76cf3b30f01f8c4619e5a72f8b9800000c00f3235010000000f30420f01c448b85a000000000000000f23c00f21f835020007000f23f843cd05"}}, @code={0x1, 0x64, {"0fc75a223e660f382a0f0f20c035010000000f22c048b808000000000000000f23c80f21f8350000c0000f23f866ba410066ed430f0fa4da81966fb7a6c46255453ca60f005da4f2410f2b833e4b285a430f30"}}, @uexit={0x0, 0x18, 0x3}, @code={0x1, 0x65, {"b8010000000f01d9c40202f546000f90cf48b8407f0000000000000f23c00f21f83503000a000f23f80f0f4040b6c421217ccd660f3880370fc1860090000066baf80cb823f6858eef66bafc0cec8f28288e2137"}}, @uexit={0x0, 0x18, 0x3714}, @code={0x1, 0x51, {"0f01f867420f21f066baf80cb8050ad381ef66bafc0cec420fbe15020000002e6666440f1c477d360fc73b66b817008ed80f088fc818ce5b00096465360f01cb"}}], 0x1b9}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x5, 0x0, 0x7ff, 0x10000, 0xbdb], 0x1, 0x3c4210}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0xffffffffffffffff, 0x8) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x4000000000, 0x9, 0x2, 0x1, 0x1, 0xd, 0x4002004c5, 0x1000, 0x0, 0xfffffffffffffff9, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x49], 0xdddd1000, 0x1c4646}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000045a96102bff67521ce16f8f1f449a7a835673312b54ebb2aa383369d22627e7", 0x0, 0xac) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r2, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x400, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x401c5820, &(0x7f00000000c0)=@attr_other={0x0, 0x9, 0x100000000, 0x0}) 839.907021ms ago: executing program 0 (id=561): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2b, {0x0, "66baf80cb8c2863f80ef66bafc0c66ed440f32"}}, @nested_vmlaunch={0x12f, 0x18}], 0x73}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 674.337949ms ago: executing program 2 (id=562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xd, 0x8, 0x1, 0x1, 0x0, 0x7, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xf, 0x19831, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000280), 0x200, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r8, 0x300000b, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 641.684016ms ago: executing program 0 (id=563): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000580)=[@rdmsr={0x66, 0x18, {0x483}}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 321.950738ms ago: executing program 0 (id=564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x1, 0x2, 0x0, 0x8], 0x6000, 0x88212}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=565): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000240)=@arm64={0xf, 0x9, 0x2, '\x00', 0x6}) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): own parameter 'group_i$G)ƊLd' [ 141.867397][ T24] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 141.926054][ T984] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 141.945316][ T984] em28xx 2-1:0.0: dvb set to bulk mode. [ 141.962853][ T5902] em28xx 2-1:0.0: Binding DVB extension [ 141.982324][ T6610] netlink: zone id is out of range [ 141.989885][ T6610] netlink: zone id is out of range [ 142.007030][ T24] usb 4-1: device descriptor read/64, error -71 [ 142.055900][ T984] usb 2-1: USB disconnect, device number 17 [ 142.111804][ T984] em28xx 2-1:0.0: Disconnecting em28xx [ 142.176011][ T5902] em28xx 2-1:0.0: Registering input extension [ 142.194094][ T984] em28xx 2-1:0.0: Closing input extension [ 142.247197][ T24] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 142.359005][ T984] em28xx 2-1:0.0: Freeing device [ 142.447430][ T24] usb 4-1: device descriptor read/64, error -71 [ 142.591925][ T24] usb usb4-port1: attempt power cycle [ 142.648784][ T6615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.166'. [ 142.886176][ T6619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.168'. [ 142.957450][ T24] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 143.023653][ T24] usb 4-1: device descriptor read/8, error -71 [ 143.177409][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 143.210752][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 143.210772][ T30] audit: type=1326 audit(1764451135.006:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.0.172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feda038f749 code=0xffff0000 [ 143.247380][ T6630] syz.1.171 uses obsolete (PF_INET,SOCK_PACKET) [ 143.267034][ T24] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 143.312674][ T24] usb 4-1: device descriptor read/8, error -71 [ 143.348181][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 143.356809][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.369854][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.406655][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.417037][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.428779][ T24] usb usb4-port1: unable to enumerate USB device [ 143.430741][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.450491][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.562231][ T6633] vlan2: entered allmulticast mode [ 143.568842][ T6633] veth0_to_bond: entered allmulticast mode [ 143.673297][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 143.694291][ T10] usbtmc 3-1:16.0: can't read capabilities [ 143.823085][ T6635] loop2: detected capacity change from 0 to 7 [ 143.831822][ T24] usb 5-1: USB disconnect, device number 8 [ 143.833746][ T6014] loop2: [ 143.851492][ T6014] loop2: partition table partially beyond EOD, truncated [ 143.869516][ T6635] loop2: [ 143.872828][ T6635] loop2: partition table partially beyond EOD, truncated [ 143.930222][ T6637] loop9: detected capacity change from 0 to 7 [ 143.947704][ T6637] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.955764][ T6637] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.966203][ T6619] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.996646][ T6637] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.013715][ T10] usb 3-1: USB disconnect, device number 12 [ 144.017823][ T6637] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.033979][ T6637] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.057091][ T6637] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.068037][ T6637] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.097736][ T6637] ldm_validate_partition_table(): Disk read failed. [ 144.118228][ T6637] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.147814][ T6637] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.168026][ T6637] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.176236][ T6637] Dev loop9: unable to read RDB block 0 [ 144.191530][ T6637] loop9: unable to read partition table [ 144.207346][ T6637] loop9: partition table beyond EOD, truncated [ 144.227181][ T6637] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 144.227181][ T6637] ) failed (rc=-5) [ 144.286222][ T6643] netlink: 'syz.1.177': attribute type 2 has an invalid length. [ 144.685533][ T6651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.179'. [ 144.968382][ T6658] bridge0: port 3(gretap0) entered blocking state [ 144.996261][ T6658] bridge0: port 3(gretap0) entered disabled state [ 145.014194][ T6658] gretap0: entered allmulticast mode [ 145.026132][ T6658] gretap0: entered promiscuous mode [ 145.028886][ T6659] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20000 [ 145.085045][ T6658] gretap0: left allmulticast mode [ 145.102840][ T6658] gretap0: left promiscuous mode [ 145.109920][ T6658] bridge0: port 3(gretap0) entered disabled state [ 145.187044][ T5856] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 145.349393][ T5856] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 145.379774][ T5856] usb 4-1: config 0 has no interface number 0 [ 145.389372][ T5856] usb 4-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice=e4.a8 [ 145.399474][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.417023][ T5856] usb 4-1: Product: syz [ 145.421502][ T5856] usb 4-1: Manufacturer: syz [ 145.426140][ T5856] usb 4-1: SerialNumber: syz [ 145.452654][ T5856] usb 4-1: config 0 descriptor?? [ 145.674624][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.705792][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.742817][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.796787][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.852202][ T5856] ftdi_sio 4-1:0.69: FTDI USB Serial Device converter detected [ 145.879062][ T5856] ftdi_sio ttyUSB0: unknown device type: 0xe4a8 [ 146.073825][ T5920] usb 4-1: USB disconnect, device number 16 [ 146.078794][ T5920] ftdi_sio 4-1:0.69: device disconnected [ 146.101944][ T6670] loop6: detected capacity change from 0 to 524287487 [ 146.139638][ T6014] ldm_validate_partition_table(): Disk read failed. [ 146.162476][ T6014] Dev loop6: unable to read RDB block 0 [ 146.179203][ T6014] loop6: unable to read partition table [ 146.203170][ T6670] ldm_validate_partition_table(): Disk read failed. [ 146.212147][ T6670] Dev loop6: unable to read RDB block 0 [ 146.221548][ T6670] loop6: unable to read partition table [ 146.228663][ T6670] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 147.047083][ T5978] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 147.248980][ T5978] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 147.257812][ T5978] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 147.266157][ T5978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.317096][ T5978] usb 4-1: config 0 has no interface number 0 [ 147.331730][ T5978] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 147.371717][ T5978] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.407031][ T5978] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 147.457120][ T5978] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 147.492988][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.507246][ T5920] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 147.523572][ T5978] usb 4-1: config 0 descriptor?? [ 147.577401][ T5978] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 147.699287][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 147.722395][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 147.739918][ T5920] usb 5-1: config 1 has an invalid interface number: 125 but max is 0 [ 147.762333][ T6373] usb 4-1: Failed to submit usb control message: -71 [ 147.768957][ T5978] usb 4-1: USB disconnect, device number 17 [ 147.778856][ T5920] usb 5-1: config 1 has no interface number 0 [ 147.787173][ T6373] usb 4-1: unable to send the bmi data to the device: -71 [ 147.797337][ T5920] usb 5-1: config 1 interface 125 has no altsetting 0 [ 147.818073][ T6373] usb 4-1: unable to get target info from device [ 147.829456][ T5920] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=3c.51 [ 147.846503][ T6373] usb 4-1: could not get target info (-71) [ 147.858934][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.867852][ T6373] usb 4-1: could not probe fw (-71) [ 147.873295][ T5920] usb 5-1: Product: syz [ 147.879627][ T5920] usb 5-1: Manufacturer: syz [ 147.884424][ T5920] usb 5-1: SerialNumber: syz [ 147.954109][ T6684] loop2: detected capacity change from 0 to 7 [ 147.965417][ T6684] loop2: [ 147.969110][ T6684] loop2: partition table partially beyond EOD, truncated [ 148.129063][ T6676] netlink: 36 bytes leftover after parsing attributes in process `syz.4.188'. [ 148.162052][ T6676] netlink: 36 bytes leftover after parsing attributes in process `syz.4.188'. [ 148.180763][ T6676] Zero length message leads to an empty skb [ 148.186021][ T6691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.192'. [ 148.201552][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 148.228269][ T5920] qmi_wwan 5-1:1.125: probe with driver qmi_wwan failed with error -22 [ 148.270921][ T5920] usb 5-1: USB disconnect, device number 9 [ 148.471191][ T5978] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.634334][ T5978] usb 1-1: device descriptor read/64, error -71 [ 148.690085][ T6707] netlink: 'syz.1.199': attribute type 2 has an invalid length. [ 148.890899][ T5978] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 148.913235][ T6712] loop2: detected capacity change from 0 to 7 [ 148.930186][ T6712] loop2: [ 148.934110][ T6712] loop2: partition table partially beyond EOD, truncated [ 148.941543][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 149.047034][ T5978] usb 1-1: device descriptor read/64, error -71 [ 149.077416][ T24] usb 3-1: device descriptor read/64, error -71 [ 149.190705][ T5978] usb usb1-port1: attempt power cycle [ 149.317040][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 149.487054][ T24] usb 3-1: device descriptor read/64, error -71 [ 149.557285][ T5978] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 149.588046][ T5978] usb 1-1: device descriptor read/8, error -71 [ 149.599827][ T24] usb usb3-port1: attempt power cycle [ 149.827012][ T5978] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 149.848561][ T5978] usb 1-1: device descriptor read/8, error -71 [ 149.947045][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 149.964820][ T5978] usb usb1-port1: unable to enumerate USB device [ 149.987736][ T24] usb 3-1: device descriptor read/8, error -71 [ 149.994085][ T6731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.004663][ T6731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.017958][ T5902] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 150.230673][ T5978] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 150.238615][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 150.247994][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 150.260799][ T5902] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 150.269902][ T5902] usb 2-1: can't read configurations, error -71 [ 150.277918][ T24] usb 3-1: device descriptor read/8, error -71 [ 150.387366][ T24] usb usb3-port1: unable to enumerate USB device [ 150.439004][ T6741] netlink: 'syz.4.211': attribute type 27 has an invalid length. [ 150.454260][ T6741] veth0_virt_wifi: left promiscuous mode [ 150.460861][ T6741] veth0_virt_wifi: left allmulticast mode [ 150.476220][ T6741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.211'. [ 151.259212][ T6745] loop2: detected capacity change from 0 to 7 [ 151.281013][ T6745] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 151.297320][ T6745] loop2: p1 start 3018249949 is beyond EOD, truncated [ 151.314663][ T6745] loop2: p2 start 1879129398 is beyond EOD, truncated [ 151.317281][ T5902] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 151.321840][ T6745] loop2: p3 start 4093120540 is beyond EOD, truncated [ 151.347551][ T6745] loop2: p4 start 2524654898 is beyond EOD, truncated [ 151.364791][ T6745] loop2: p5 start 674059 is beyond EOD, truncated [ 151.377073][ T6745] loop2: p6 start 57445 is beyond EOD, truncated [ 151.387949][ T6745] loop2: p7 start 1646166690 is beyond EOD, truncated [ 151.394873][ T6745] loop2: p8 start 3277892638 is beyond EOD, truncated [ 151.402057][ T6745] loop2: p9 start 4163259941 is beyond EOD, truncated [ 151.527855][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 151.565681][ T5902] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 151.580437][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.590054][ T5902] usb 2-1: Product: syz [ 151.594366][ T5902] usb 2-1: Manufacturer: syz [ 151.600701][ T5902] usb 2-1: SerialNumber: syz [ 151.608717][ T5902] usb 2-1: config 0 descriptor?? [ 151.827261][ T5902] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 152.130207][ T6771] raw_sendmsg: syz.1.212 forgot to set AF_INET. Fix it! [ 152.333686][ T5902] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 152.352576][ T5902] usb 2-1: USB disconnect, device number 19 [ 152.917565][ T6779] x_tables: duplicate underflow at hook 2 [ 153.015181][ T6778] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.188408][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 154.268450][ T6798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.285538][ T5920] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 154.298904][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'. [ 154.447039][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 154.454661][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.567021][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.580473][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.613004][ T5920] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 154.634584][ T6804] loop2: detected capacity change from 0 to 7 [ 154.640974][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.675110][ T6804] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 154.718726][ T5920] usb 4-1: config 0 descriptor?? [ 154.725169][ T6804] loop2: p1 start 3018249949 is beyond EOD, truncated [ 154.760020][ T6804] loop2: p2 start 1879129398 is beyond EOD, truncated [ 154.805146][ T6804] loop2: p3 start 4093120540 is beyond EOD, truncated [ 154.831404][ T6804] loop2: p4 start 2524654898 is beyond EOD, truncated [ 154.859043][ T6804] loop2: p5 start 674059 is beyond EOD, truncated [ 154.883412][ T6806] syzkaller0: entered promiscuous mode [ 154.901220][ T6804] loop2: p6 start 57445 is beyond EOD, truncated [ 154.911699][ T6806] syzkaller0: entered allmulticast mode [ 154.927113][ T6804] loop2: p7 start 1646166690 is beyond EOD, truncated [ 154.934097][ T6804] loop2: p8 start 3277892638 is beyond EOD, truncated [ 154.949507][ T6804] loop2: p9 start 4163259941 is beyond EOD, truncated [ 155.020497][ T6814] netlink: 112 bytes leftover after parsing attributes in process `syz.0.231'. [ 155.235803][ T5920] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input9 [ 155.278139][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.367148][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.375129][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 155.465522][ T5920] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input10 [ 155.507685][ T5856] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 155.557753][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.579456][ T10] usb 1-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 155.600845][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.654326][ T10] usb 1-1: config 0 descriptor?? [ 155.685429][ T5856] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.738528][ T5920] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 155.752980][ T5856] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.765068][ T5856] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.787008][ T24] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 155.802991][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.859328][ T6821] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 155.891154][ T5856] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.928146][ T24] usb 3-1: device descriptor read/64, error -71 [ 156.009085][ T5978] usb 4-1: USB disconnect, device number 19 [ 156.178530][ T24] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 156.201009][ T6827] fido_id[6827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 156.254875][ T6831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.236'. [ 156.259639][ T10] sigmamicro 0003:1C4F:0059.0004: hidraw1: USB HID v1.01 Device [HID 1c4f:0059] on usb-dummy_hcd.0-1/input0 [ 156.281663][ T5856] usb 5-1: USB disconnect, device number 10 [ 156.357127][ T24] usb 3-1: device descriptor read/64, error -71 [ 156.372491][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.386399][ T6814] netlink: 80 bytes leftover after parsing attributes in process `syz.0.231'. [ 156.471199][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 156.512764][ T24] usb usb3-port1: attempt power cycle [ 156.918788][ T24] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 156.949244][ T24] usb 3-1: device descriptor read/8, error -71 [ 157.047047][ T5978] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 157.097364][ T6849] loop2: detected capacity change from 0 to 7 [ 157.108019][ T6849] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 157.129287][ T6849] loop2: p1 start 3018249949 is beyond EOD, truncated [ 157.152360][ T6849] loop2: p2 start 1879129398 is beyond EOD, truncated [ 157.162822][ T6849] loop2: p3 start 4093120540 is beyond EOD, truncated [ 157.170994][ T6849] loop2: p4 start 2524654898 is beyond EOD, truncated [ 157.187083][ T24] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 157.189265][ T6849] loop2: p5 start 674059 is beyond EOD, truncated [ 157.234846][ T6849] loop2: p6 start 57445 is beyond EOD, truncated [ 157.251622][ T6849] loop2: p7 start 1646166690 is beyond EOD, truncated [ 157.259247][ T24] usb 3-1: device descriptor read/8, error -71 [ 157.272491][ T5978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 157.274431][ T6849] loop2: p8 start 3277892638 is beyond EOD, [ 157.283733][ T5978] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 157.303759][ T6849] truncated [ 157.314783][ T6849] loop2: p9 start 4163259941 is beyond EOD, truncated [ 157.344736][ T5978] usb 5-1: can't read configurations, error -71 [ 157.345438][ T10] usb 1-1: USB disconnect, device number 19 [ 157.372172][ T24] usb usb3-port1: unable to enumerate USB device [ 157.514013][ T6856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.767007][ T984] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 157.939578][ T984] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 157.981259][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.009426][ T984] usb 4-1: config 0 descriptor?? [ 158.030146][ T984] gspca_main: spca508-2.14.0 probing 8086:0110 [ 158.085150][ T6869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.248'. [ 158.232798][ T984] gspca_spca508: reg_read err -32 [ 158.314660][ T984] gspca_spca508: reg_read err -32 [ 158.359452][ T984] gspca_spca508: reg_read err -32 [ 158.372824][ T984] gspca_spca508: reg_read err -32 [ 158.411689][ T984] gspca_spca508: reg_read err -32 [ 158.449908][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'. [ 158.708353][ T984] gspca_spca508: reg write: error -71 [ 158.713913][ T984] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 158.774379][ T984] usb 4-1: USB disconnect, device number 20 [ 158.901806][ T6887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.007934][ T10] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 159.157063][ T5856] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 159.180796][ T10] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 159.199204][ T10] usb 1-1: config 0 has no interface number 0 [ 159.206823][ T10] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 159.210724][ T6889] loop2: detected capacity change from 0 to 7 [ 159.218461][ T10] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.235979][ T6889] loop2: [ 159.239170][ T6889] loop2: partition table partially beyond EOD, truncated [ 159.247344][ T10] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 159.269648][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.290168][ T10] usb 1-1: Product: syz [ 159.294596][ T10] usb 1-1: Manufacturer: syz [ 159.307023][ T10] usb 1-1: SerialNumber: syz [ 159.330962][ T10] usb 1-1: config 0 descriptor?? [ 159.349801][ T5856] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 159.363315][ T10] ums-karma 1-1:0.46: USB Mass Storage device detected [ 159.385272][ T5856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.409982][ T5856] usb 5-1: config 0 has no interface number 0 [ 159.433639][ T5856] usb 5-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.465058][ T10] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5 [ 159.474047][ T5856] usb 5-1: config 0 interface 113 has no altsetting 0 [ 159.506871][ T5856] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 159.528199][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.553517][ T5856] usb 5-1: Product: syz [ 159.566720][ T5856] usb 5-1: Manufacturer: syz [ 159.585944][ T5856] usb 5-1: SerialNumber: syz [ 159.631850][ T5856] usb 5-1: config 0 descriptor?? [ 159.704271][ T5856] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 159.791134][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.260'. [ 159.837357][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 160.010817][ T10] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 160.036866][ T10] usb 4-1: config 0 has an invalid descriptor of length 195, skipping remainder of the config [ 160.056350][ T10] usb 4-1: config 0 has no interface number 0 [ 160.064525][ T10] usb 4-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 160.109605][ T10] usb 4-1: config 0 interface 216 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 160.157023][ T10] usb 4-1: config 0 interface 216 has no altsetting 0 [ 160.194709][ T10] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 160.224375][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.266407][ T10] usb 4-1: config 0 descriptor?? [ 160.308431][ T6902] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 160.322480][ T10] usb 4-1: NFC: intf ffff88807e1c8000 id ffffffff8e909220 [ 160.604999][ T6915] fuse: Bad value for 'fd' [ 161.711393][ T6881] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 161.718303][ T6881] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.734221][ T6881] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.742849][ T6881] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.765147][ T6881] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.775997][ T984] usb 5-1: USB disconnect, device number 13 [ 161.777223][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.801091][ T6881] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.852814][ T6881] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.859275][ T6881] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.868805][ T6881] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.876050][ T6881] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.883070][ T6881] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.892507][ T6881] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.902696][ T6881] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 161.909799][ T6881] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 161.921756][ T6881] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.100675][ T5856] usb 1-1: USB disconnect, device number 20 [ 162.187096][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 162.255085][ T6925] loop2: detected capacity change from 0 to 7 [ 162.264465][ T6925] loop2: [ 162.268584][ T6925] loop2: partition table partially beyond EOD, truncated [ 162.357006][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 162.374687][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.404250][ T24] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 162.422547][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.433041][ T24] usb 2-1: Product: syz [ 162.437664][ T24] usb 2-1: Manufacturer: syz [ 162.442564][ T24] usb 2-1: SerialNumber: syz [ 162.456391][ T24] usb 2-1: config 0 descriptor?? [ 162.474476][ T24] usb 2-1: bad CDC descriptors [ 162.481397][ T24] usb 2-1: unsupported MDLM descriptors [ 162.587073][ T984] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 162.675557][ T6904] ======================================================= [ 162.675557][ T6904] WARNING: The mand mount option has been deprecated and [ 162.675557][ T6904] and is ignored by this kernel. Remove the mand [ 162.675557][ T6904] option from the mount to silence this warning. [ 162.675557][ T6904] ======================================================= [ 162.758782][ T984] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 162.779501][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.801215][ T24] usb 2-1: USB disconnect, device number 20 [ 162.807453][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 162.817986][ T984] usb 1-1: config 0 descriptor?? [ 162.997088][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 163.021718][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 163.050258][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.090662][ T10] usb 5-1: config 0 descriptor?? [ 163.115529][ T5886] usb 4-1: USB disconnect, device number 21 [ 163.350115][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 163.369932][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.399027][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 163.416537][ T10] usb 5-1: media controller created [ 163.459231][ T984] ath6kl: mismatched byte count 0 vs. expected 12 [ 163.504439][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.504469][ T984] ath6kl: Failed to init ath6kl core: -22 [ 163.551314][ T984] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 163.565941][ T6943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.271'. [ 163.691315][ T5886] usb 1-1: USB disconnect, device number 21 [ 163.777964][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.829252][ T10] DVB: Unable to find symbol dib7000p_attach() [ 163.843515][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 163.860598][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.867290][ T6950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.874191][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.937112][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 163.943223][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.029640][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 164.045037][ T10] Registered IR keymap rc-empty [ 164.065772][ T10] dvb-usb: could not initialize remote control. [ 164.079829][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 164.109294][ T984] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 164.292509][ T984] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 164.310622][ T984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.334067][ T984] usb 2-1: config 0 has no interface number 0 [ 164.336172][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 164.364254][ T984] usb 2-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.397616][ T984] usb 2-1: config 0 interface 113 has no altsetting 0 [ 164.412266][ T984] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 164.422004][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 164.437475][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.446504][ T984] usb 2-1: Product: syz [ 164.451029][ T984] usb 2-1: Manufacturer: syz [ 164.455925][ T984] usb 2-1: SerialNumber: syz [ 164.475840][ T984] usb 2-1: config 0 descriptor?? [ 164.492616][ T984] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 164.597113][ T5978] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 164.704192][ T6968] kvm: pic: single mode not supported [ 164.704211][ T6968] kvm: pic: level sensitive irq not supported [ 164.719377][ T6968] kvm: pic: single mode not supported [ 164.725578][ T6968] kvm: pic: single mode not supported [ 164.731126][ T6968] kvm: pic: level sensitive irq not supported [ 164.750802][ T6968] kvm: pic: single mode not supported [ 164.759357][ T6968] kvm: pic: level sensitive irq not supported [ 164.773031][ T5978] usb 1-1: Using ep0 maxpacket: 16 [ 164.780026][ T6968] kvm: pic: single mode not supported [ 164.785620][ T6968] kvm: pic: level sensitive irq not supported [ 164.792988][ T6968] kvm: pic: single mode not supported [ 164.799200][ T6968] kvm: pic: level sensitive irq not supported [ 164.807281][ T6968] kvm: pic: single mode not supported [ 164.813469][ T6968] kvm: pic: level sensitive irq not supported [ 164.827502][ T6968] kvm: pic: level sensitive irq not supported [ 164.833855][ T6968] kvm: pic: single mode not supported [ 164.847841][ T6968] kvm: pic: single mode not supported [ 164.859361][ T5978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.932541][ T5978] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.943942][ T5978] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.965457][ T5978] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.973994][ T5978] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 164.989665][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.011211][ T5978] usb 1-1: config 0 descriptor?? [ 165.438074][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.455841][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.545513][ T5978] usbhid 1-1:0.0: can't add hid device: -71 [ 165.564562][ T5978] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 165.631005][ T5978] usb 1-1: USB disconnect, device number 22 [ 165.730243][ T10] usb 5-1: USB disconnect, device number 14 [ 165.857454][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.911618][ T10] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 165.938370][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.944806][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.018490][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.024833][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.066288][ T6986] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 166.075358][ T6986] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 166.213006][ T5856] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 166.457404][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 166.470123][ T5856] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 166.488047][ T5856] usb 4-1: config 0 has no interface number 0 [ 166.505404][ T5856] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.540734][ T5856] usb 4-1: config 0 interface 89 has no altsetting 0 [ 166.571092][ T5856] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 166.609465][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.627252][ T5856] usb 4-1: Product: syz [ 166.637784][ T5856] usb 4-1: Manufacturer: syz [ 166.668382][ T5856] usb 4-1: SerialNumber: syz [ 166.701507][ T5856] usb 4-1: config 0 descriptor?? [ 166.746091][ T5856] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 166.787866][ T5978] usb 2-1: USB disconnect, device number 21 [ 166.797574][ T5856] em28xx 4-1:0.89: Video interface 89 found: [ 167.067441][ T5886] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 167.279860][ T5886] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 167.289471][ T5886] usb 1-1: config 0 has no interface number 0 [ 167.299970][ T5886] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 167.300799][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 167.322873][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.331500][ T5886] usb 1-1: Product: syz [ 167.335961][ T5886] usb 1-1: Manufacturer: syz [ 167.342801][ T5886] usb 1-1: SerialNumber: syz [ 167.350136][ T7021] netlink: 48 bytes leftover after parsing attributes in process `syz.4.289'. [ 167.361001][ T5856] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 167.373505][ T5886] usb 1-1: config 0 descriptor?? [ 167.382550][ T7009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.477016][ T5920] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 167.630796][ T7009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.638746][ T5920] usb 2-1: device descriptor read/64, error -71 [ 167.875241][ T5886] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 167.927033][ T5920] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 167.937031][ T5886] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 167.959925][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.992504][ T5886] asix 1-1:0.251: probe with driver asix failed with error -5 [ 168.027459][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.077177][ T5886] usb 1-1: USB disconnect, device number 23 [ 168.097743][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 168.098310][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.117186][ T5920] usb 2-1: device descriptor read/64, error -71 [ 168.124997][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.164665][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.248530][ T5920] usb usb2-port1: attempt power cycle [ 168.475087][ T5856] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 168.543681][ T5856] em28xx 4-1:0.89: board has no eeprom [ 168.627055][ T5920] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 168.634704][ T5856] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 168.652771][ T7037] netlink: 116 bytes leftover after parsing attributes in process `syz.0.294'. [ 168.682163][ T5856] em28xx 4-1:0.89: analog set to bulk mode. [ 168.706494][ T5920] usb 2-1: device descriptor read/8, error -71 [ 168.729531][ T5886] em28xx 4-1:0.89: Registering V4L2 extension [ 168.754818][ T5856] usb 4-1: USB disconnect, device number 22 [ 168.838959][ T5856] em28xx 4-1:0.89: Disconnecting em28xx [ 168.903659][ T5886] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 168.912357][ T5886] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 168.920683][ T5886] em28xx 4-1:0.89: No AC97 audio processor [ 168.943558][ T5886] usb 4-1: Decoder not found [ 168.948493][ T5886] em28xx 4-1:0.89: failed to create media graph [ 168.955859][ T5886] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 168.967578][ T5920] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 169.001152][ T5920] usb 2-1: device descriptor read/8, error -71 [ 169.038767][ T5886] em28xx 4-1:0.89: Registering snapshot button... [ 169.074832][ T5886] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input12 [ 169.131589][ T5920] usb usb2-port1: unable to enumerate USB device [ 169.154297][ T7046] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 169.382126][ T5886] em28xx 4-1:0.89: Remote control support is not available for this card. [ 169.606428][ T5856] em28xx 4-1:0.89: Closing input extension [ 169.632108][ T5856] em28xx 4-1:0.89: Deregistering snapshot button [ 169.824395][ T5856] em28xx 4-1:0.89: Freeing device [ 170.267062][ T5856] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 170.347505][ T5902] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 170.460242][ T5856] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.468965][ T5856] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 170.502886][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.549442][ T5902] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.552631][ T5856] usb 4-1: config 0 descriptor?? [ 170.568547][ T5902] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.601199][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.660695][ T5902] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 170.686306][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.726074][ T5902] usb 3-1: config 0 descriptor?? [ 171.054920][ T7075] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 171.096326][ T7075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.124946][ T7075] bond1: (slave geneve2): making interface the new active one [ 171.138869][ T7075] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 171.204225][ T5856] sigmamicro 0003:1C4F:0059.0005: hidraw0: USB HID v1.01 Device [HID 1c4f:0059] on usb-dummy_hcd.3-1/input0 [ 171.323132][ T30] audit: type=1326 audit(1764451163.116:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8af8f749 code=0x7ffc0000 [ 171.416779][ T30] audit: type=1326 audit(1764451163.116:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8af8f749 code=0x7ffc0000 [ 171.463574][ T7052] netlink: 80 bytes leftover after parsing attributes in process `syz.3.298'. [ 171.481377][ T7077] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 171.510623][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 171.532361][ T30] audit: type=1326 audit(1764451163.146:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d8af8f749 code=0x7ffc0000 [ 171.611190][ T7077] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 171.636422][ T30] audit: type=1326 audit(1764451163.146:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8af8f749 code=0x7ffc0000 [ 171.706661][ T7077] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 171.750725][ T5978] usb 4-1: USB disconnect, device number 23 [ 171.753860][ T30] audit: type=1326 audit(1764451163.146:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8af8f749 code=0x7ffc0000 [ 171.817477][ T7077] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 171.876456][ T30] audit: type=1326 audit(1764451163.156:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d8af8f749 code=0x7ffc0000 [ 171.903749][ T7077] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 171.906641][ T30] audit: type=1326 audit(1764451163.156:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8af8f749 code=0x7ffc0000 [ 171.981080][ T7077] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 172.012362][ T7077] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 172.083350][ T30] audit: type=1326 audit(1764451163.156:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8af8f749 code=0x7ffc0000 [ 172.118891][ T7077] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 172.153723][ T30] audit: type=1326 audit(1764451163.176:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d8af8f749 code=0x7ffc0000 [ 172.180575][ T7077] kvm: requested 169295 ns i8254 timer period limited to 200000 ns [ 172.309915][ T30] audit: type=1326 audit(1764451164.026:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8af8f749 code=0x7ffc0000 [ 172.458637][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 172.508543][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 172.533730][ T5902] usb 3-1: USB disconnect, device number 21 [ 173.350021][ T5920] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 173.478024][ T5886] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 173.507841][ T5856] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 173.529483][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 173.538752][ T5920] usb 1-1: can't read configurations, error -61 [ 173.657294][ T5886] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 173.665898][ T5886] usb 4-1: config 7 has no interface number 0 [ 173.679164][ T5886] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 173.689151][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 173.696515][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.709237][ T5886] usb 4-1: Product: syz [ 173.714104][ T5886] usb 4-1: Manufacturer: syz [ 173.714233][ T5856] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 173.729786][ T5886] usb 4-1: SerialNumber: syz [ 173.736008][ T5920] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 173.750247][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.767383][ T5856] usb 5-1: config 0 descriptor?? [ 173.818049][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 173.902092][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 173.913579][ T5920] usb 1-1: can't read configurations, error -61 [ 173.924638][ T5920] usb usb1-port1: attempt power cycle [ 174.018061][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.054867][ T5856] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 174.070371][ T5886] as10x_usb: device has been detected [ 174.079831][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 174.092796][ T5886] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 174.112066][ T9] usb 3-1: can't read configurations, error -71 [ 174.121847][ T5856] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 174.140229][ T5856] dib0700: firmware download failed at 7 with -22 [ 174.212043][ T5886] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 174.240985][ T5886] as10x_usb: error during firmware upload part1 [ 174.251104][ T5886] Registered device Elgato EyeTV DTT Deluxe [ 174.269692][ T5886] usb 4-1: USB disconnect, device number 24 [ 174.297663][ T5920] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 174.364683][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 174.373879][ T5920] usb 1-1: can't read configurations, error -61 [ 174.381551][ T5886] Unregistered device Elgato EyeTV DTT Deluxe [ 174.383768][ T5886] as10x_usb: device has been disconnected [ 174.527303][ T5920] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 174.551503][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 174.559412][ T5920] usb 1-1: can't read configurations, error -61 [ 174.566356][ T5920] usb usb1-port1: unable to enumerate USB device [ 174.614024][ T7129] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.689102][ T5978] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 174.812612][ T7135] FAULT_INJECTION: forcing a failure. [ 174.812612][ T7135] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 174.828909][ T7135] CPU: 1 UID: 0 PID: 7135 Comm: syz.3.322 Not tainted syzkaller #0 PREEMPT(full) [ 174.828932][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.828948][ T7135] Call Trace: [ 174.828954][ T7135] [ 174.828961][ T7135] dump_stack_lvl+0x189/0x250 [ 174.828990][ T7135] ? __pfx____ratelimit+0x10/0x10 [ 174.829012][ T7135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.829033][ T7135] ? __pfx__printk+0x10/0x10 [ 174.829049][ T7135] ? __might_fault+0xb0/0x130 [ 174.829080][ T7135] should_fail_ex+0x414/0x560 [ 174.829107][ T7135] _copy_from_user+0x2d/0xb0 [ 174.829127][ T7135] do_sock_getsockopt+0x17d/0x450 [ 174.829146][ T7135] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 174.829161][ T7135] ? do_syscall_64+0xa0/0xfa0 [ 174.829192][ T7135] __x64_sys_getsockopt+0x1a5/0x250 [ 174.829208][ T7135] ? do_syscall_64+0xa0/0xfa0 [ 174.829237][ T7135] ? do_syscall_64+0xa0/0xfa0 [ 174.829261][ T7135] do_syscall_64+0xfa/0xfa0 [ 174.829283][ T7135] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.829304][ T7135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.829318][ T7135] ? clear_bhb_loop+0x60/0xb0 [ 174.829336][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.829351][ T7135] RIP: 0033:0x7f1171f8f749 [ 174.829369][ T7135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.829382][ T7135] RSP: 002b:00007f1172e3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 174.829398][ T7135] RAX: ffffffffffffffda RBX: 00007f11721e5fa0 RCX: 00007f1171f8f749 [ 174.829410][ T7135] RDX: 0000000000000015 RSI: 0000000000000006 RDI: 0000000000000003 [ 174.829419][ T7135] RBP: 00007f1172e3a090 R08: 0000200000000100 R09: 0000000000000000 [ 174.829429][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.829438][ T7135] R13: 00007f11721e6038 R14: 00007f11721e5fa0 R15: 00007f117230fa28 [ 174.829462][ T7135] [ 175.028022][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.060984][ T5978] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 175.072963][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 61, changing to 4 [ 175.084699][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 28271, setting to 1023 [ 175.102887][ T5978] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 175.112664][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.121497][ T5978] usb 2-1: Product: syz [ 175.127288][ T5978] usb 2-1: Manufacturer: syz [ 175.132170][ T5978] usb 2-1: SerialNumber: syz [ 175.141190][ T5978] usb 2-1: config 0 descriptor?? [ 175.151425][ T5978] usb 2-1: no audio or video endpoints found [ 175.821389][ T7151] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 175.870191][ T5902] usb 2-1: USB disconnect, device number 26 [ 176.268793][ T5978] usb 5-1: USB disconnect, device number 15 [ 176.637522][ T5902] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 176.852936][ T5902] usb 2-1: config 0 has an invalid interface number: 78 but max is 0 [ 176.902364][ T5902] usb 2-1: config 0 has no interface number 0 [ 176.922069][ T5902] usb 2-1: New USB device found, idVendor=413c, idProduct=8138, bcdDevice=e1.2f [ 176.942980][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.964907][ T5902] usb 2-1: Product: syz [ 176.985544][ T5902] usb 2-1: Manufacturer: syz [ 177.005587][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 177.005607][ T30] audit: type=1326 audit(1764451168.796:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.0.335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feda038f749 code=0xffff0000 [ 177.035914][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.042423][ T5902] usb 2-1: SerialNumber: syz [ 177.089224][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 177.110223][ T5902] usb 2-1: config 0 descriptor?? [ 177.447687][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 177.619969][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 177.650485][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.700161][ T9] usb 4-1: config 0 descriptor?? [ 177.950274][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 178.165869][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 178.299464][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 178.327002][ T9] [drm] Initialized udl on minor 2 [ 178.380001][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 178.470080][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 178.520163][ T5886] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 178.545021][ T9] usb 4-1: USB disconnect, device number 25 [ 178.563100][ T5886] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 178.887129][ T984] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 179.047261][ T984] usb 3-1: device descriptor read/64, error -71 [ 179.317520][ T984] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 179.358504][ T5886] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 179.518023][ T984] usb 3-1: device descriptor read/64, error -71 [ 179.539916][ T5886] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 179.566498][ T5886] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 179.618064][ T5886] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.671328][ T5886] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.720074][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.729431][ T984] usb usb3-port1: attempt power cycle [ 179.773365][ T5886] usb 5-1: Product: syz [ 179.790332][ T5886] usb 5-1: Manufacturer: syz [ 179.795021][ T5886] usb 5-1: SerialNumber: syz [ 180.068873][ T5902] usb 2-1: USB disconnect, device number 27 [ 180.132499][ T984] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 180.285824][ T984] usb 3-1: device descriptor read/8, error -71 [ 180.577463][ T984] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 180.678295][ T984] usb 3-1: device descriptor read/8, error -71 [ 180.687082][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 180.848539][ T984] usb usb3-port1: unable to enumerate USB device [ 180.908263][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 180.953534][ T24] usb 4-1: config 4 has an invalid interface number: 244 but max is 0 [ 181.014298][ T24] usb 4-1: config 4 has no interface number 0 [ 181.119025][ T24] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 181.174822][ T24] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 181.230240][ T24] usb 4-1: config 4 interface 244 has no altsetting 0 [ 181.272288][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 181.336211][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.369614][ T24] usb 4-1: Product: syz [ 181.401633][ T24] usb 4-1: Manufacturer: syz [ 181.425887][ T24] usb 4-1: SerialNumber: syz [ 181.749492][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.813045][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.877806][ T7239] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 182.157755][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 182.192217][ T24] ipheth 4-1:4.244: Unable to find endpoints [ 182.327763][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 182.342044][ T24] usb 4-1: USB disconnect, device number 26 [ 182.342199][ T9] usb 2-1: config 6 has an invalid interface number: 46 but max is 3 [ 182.375421][ T9] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 182.434047][ T9] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 182.492194][ T9] usb 2-1: config 6 has no interface number 0 [ 182.514840][ T9] usb 2-1: config 6 interface 46 altsetting 252 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 182.566799][ T9] usb 2-1: config 6 interface 46 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 182.607076][ T9] usb 2-1: config 6 interface 46 altsetting 252 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 182.660633][ T9] usb 2-1: config 6 interface 46 altsetting 252 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 182.710372][ T9] usb 2-1: config 6 interface 46 altsetting 252 has a duplicate endpoint with address 0x6, skipping [ 182.777808][ T9] usb 2-1: config 6 interface 46 altsetting 252 has a duplicate endpoint with address 0xD, skipping [ 182.832211][ T9] usb 2-1: config 6 interface 46 altsetting 252 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 182.887746][ T9] usb 2-1: config 6 interface 46 altsetting 252 has a duplicate endpoint with address 0xA, skipping [ 182.958346][ T9] usb 2-1: config 6 interface 46 altsetting 252 has 11 endpoint descriptors, different from the interface descriptor's value: 13 [ 183.017288][ T9] usb 2-1: config 6 interface 46 has no altsetting 0 [ 183.052352][ T9] usb 2-1: New USB device found, idVendor=1457, idProduct=5118, bcdDevice=57.4e [ 183.093011][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.113368][ T9] usb 2-1: Product: syz [ 183.166153][ T9] usb 2-1: Manufacturer: syz [ 183.191089][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 183.192145][ T9] usb 2-1: SerialNumber: syz [ 183.249462][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.359'. [ 183.275383][ T5886] usb 5-1: USB disconnect, device number 16 [ 183.349945][ T7242] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 183.358086][ T5856] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 183.369591][ T7262] netlink: 112 bytes leftover after parsing attributes in process `syz.3.358'. [ 183.436167][ T6271] udevd[6271]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.453887][ T9] ftdi_sio 2-1:6.46: FTDI USB Serial Device converter detected [ 183.484907][ T9] ftdi_sio ttyUSB0: unknown device type: 0x574e [ 183.494530][ T7254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.549491][ T5856] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 183.592243][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.632429][ T5856] usb 1-1: config 0 descriptor?? [ 183.666445][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 183.692312][ T5886] usb 2-1: USB disconnect, device number 28 [ 183.810618][ T5886] ftdi_sio 2-1:6.46: device disconnected [ 183.830335][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 183.847007][ T24] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 183.862515][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.924645][ T24] usb 4-1: config 0 descriptor?? [ 184.045161][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.363'. [ 184.085387][ T5856] ath6kl: Unsupported hardware version: 0x0 [ 184.118547][ T5856] ath6kl: Failed to init ath6kl core: -22 [ 184.130575][ T5856] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 184.326621][ T5978] usb 1-1: USB disconnect, device number 28 [ 184.423428][ T5856] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 184.454515][ T24] sigmamicro 0003:1C4F:0059.0006: hidraw0: USB HID v1.01 Device [HID 1c4f:0059] on usb-dummy_hcd.3-1/input0 [ 184.554065][ T7277] fuse: Bad value for 'fd' [ 184.631401][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 184.651080][ T5856] usb 3-1: config 0 has no interfaces? [ 184.674119][ T7255] netlink: 80 bytes leftover after parsing attributes in process `syz.3.358'. [ 184.685672][ T5856] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0700, bcdDevice= 2.ab [ 184.694462][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 184.710926][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.764202][ T5856] usb 3-1: Product: syz [ 184.792549][ T5856] usb 3-1: Manufacturer: syz [ 184.811557][ T5856] usb 3-1: SerialNumber: syz [ 184.912034][ T5856] usb 3-1: config 0 descriptor?? [ 184.923592][ T5886] usb 4-1: USB disconnect, device number 27 [ 184.997532][ T5978] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 185.197473][ T5978] usb 5-1: Using ep0 maxpacket: 16 [ 185.205514][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 185.262801][ T5978] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 185.276949][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.295462][ T5978] usb 5-1: Product: syz [ 185.336546][ T5978] usb 5-1: Manufacturer: syz [ 185.359525][ T5978] usb 5-1: SerialNumber: syz [ 185.428772][ T5978] usb 5-1: config 0 descriptor?? [ 185.443020][ T5978] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 185.473408][ T5978] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 185.589573][ T984] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 185.782313][ T984] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.812256][ T984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 185.845690][ T984] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 185.897806][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.928707][ T984] usb 1-1: config 0 descriptor?? [ 185.944552][ T984] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 185.958245][ T984] dvb-usb: bulk message failed: -22 (3/0) [ 185.986031][ T984] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 186.029255][ T984] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 186.037627][ T984] usb 1-1: media controller created [ 186.045335][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.072757][ T984] dvb-usb: bulk message failed: -22 (6/0) [ 186.087963][ T984] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 186.106691][ T984] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 186.137807][ T984] dvb-usb: schedule remote query interval to 150 msecs. [ 186.161239][ T984] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 186.318685][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 186.331893][ T5917] dvb-usb: error while querying for an remote control event. [ 186.497372][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 186.503537][ T5917] dvb-usb: error while querying for an remote control event. [ 186.568421][ T5978] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 186.631632][ T5978] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 186.653679][ T5978] em28xx 5-1:0.0: board has no eeprom [ 186.688371][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 186.705960][ T984] dvb-usb: error while querying for an remote control event. [ 186.807349][ T5978] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 186.831524][ T5978] em28xx 5-1:0.0: dvb set to bulk mode. [ 186.850046][ T984] em28xx 5-1:0.0: Binding DVB extension [ 186.907044][ T5978] dvb-usb: bulk message failed: -22 (1/0) [ 186.921432][ T5978] dvb-usb: error while querying for an remote control event. [ 187.034142][ T984] em28xx 5-1:0.0: Registering input extension [ 187.131049][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 187.142242][ T984] dvb-usb: error while querying for an remote control event. [ 187.209609][ T984] usb 3-1: USB disconnect, device number 28 [ 187.307120][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 187.314119][ T5917] dvb-usb: error while querying for an remote control event. [ 187.340721][ T7312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.371'. [ 187.477431][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 187.500839][ T984] dvb-usb: error while querying for an remote control event. [ 187.667342][ T984] usb 5-1: USB disconnect, device number 17 [ 187.678183][ T984] em28xx 5-1:0.0: Disconnecting em28xx [ 187.684177][ T984] em28xx 5-1:0.0: Closing input extension [ 187.690102][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 187.696847][ T5917] dvb-usb: error while querying for an remote control event. [ 187.731879][ T984] em28xx 5-1:0.0: Freeing device [ 187.858030][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 187.878101][ T5917] dvb-usb: error while querying for an remote control event. [ 188.057427][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 188.063653][ T984] dvb-usb: error while querying for an remote control event. [ 188.247273][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 188.271136][ T984] dvb-usb: error while querying for an remote control event. [ 188.355427][ T5856] usb 1-1: USB disconnect, device number 29 [ 188.397257][ T5920] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 188.451848][ T5856] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 188.589005][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 188.600276][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.620691][ T5920] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 188.636381][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.647478][ T5920] usb 5-1: Product: syz [ 188.651803][ T5920] usb 5-1: Manufacturer: syz [ 188.659145][ T5920] usb 5-1: SerialNumber: syz [ 188.670718][ T5920] usb 5-1: config 0 descriptor?? [ 188.700229][ T5920] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 188.716291][ T5920] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 188.967945][ T5856] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 189.192061][ T5856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.243790][ T5856] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.270628][ T5856] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 189.315175][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.360429][ T5920] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 189.385383][ T5856] usb 1-1: config 0 descriptor?? [ 189.849429][ T5920] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 189.865229][ T5920] em28xx 5-1:0.0: board has no eeprom [ 190.182740][ T7350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.278284][ T5920] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 190.298981][ T5920] em28xx 5-1:0.0: dvb set to bulk mode. [ 190.338849][ T9] em28xx 5-1:0.0: Binding DVB extension [ 190.487892][ T7354] fuse: Bad value for 'fd' [ 190.544756][ T5856] usb 1-1: string descriptor 0 read error: -71 [ 190.556618][ T5856] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 190.595105][ T5856] usb 1-1: USB disconnect, device number 30 [ 190.657702][ T984] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 190.819439][ T984] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 190.833061][ T984] usb 3-1: config 7 has no interface number 0 [ 190.851082][ T984] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 190.908739][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.930350][ T984] usb 3-1: Product: syz [ 190.948412][ T984] usb 3-1: Manufacturer: syz [ 190.976540][ T984] usb 3-1: SerialNumber: syz [ 191.394515][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 191.442983][ T7370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.448355][ T7372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.386'. [ 191.467328][ T7332] em28xx 5-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 191.482358][ T5920] usb 5-1: USB disconnect, device number 18 [ 191.499309][ T5920] em28xx 5-1:0.0: Disconnecting em28xx [ 191.509709][ T984] as10x_usb: device has been detected [ 191.516429][ T984] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 191.562003][ T984] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 191.599781][ T984] as10x_usb: error during firmware upload part1 [ 191.618798][ T984] Registered device Elgato EyeTV DTT Deluxe [ 191.660228][ T9] em28xx 5-1:0.0: Registering input extension [ 191.675949][ T5920] em28xx 5-1:0.0: Closing input extension [ 191.677018][ T5978] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 191.698120][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'. [ 191.725211][ T5920] em28xx 5-1:0.0: Freeing device [ 191.741672][ T9] usb 3-1: USB disconnect, device number 29 [ 191.806346][ T9] Unregistered device Elgato EyeTV DTT Deluxe [ 191.809467][ T9] as10x_usb: device has been disconnected [ 191.870286][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 191.887563][ T5978] usb 4-1: config 0 has an invalid interface number: 194 but max is 0 [ 191.895811][ T5978] usb 4-1: config 0 has no interface number 0 [ 191.922193][ T5978] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 191.934466][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.934582][ T7378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.388'. [ 191.967692][ T5978] usb 4-1: Product: syz [ 191.971942][ T5978] usb 4-1: Manufacturer: syz [ 191.998688][ T5978] usb 4-1: SerialNumber: syz [ 192.018897][ T5978] usb 4-1: config 0 descriptor?? [ 192.044240][ T5978] cypress_cy7c63 4-1:0.194: Cypress CY7C63xxx device now attached [ 192.173072][ T7385] netlink: 'syz.1.389': attribute type 27 has an invalid length. [ 192.211683][ T7386] netlink: 112 bytes leftover after parsing attributes in process `syz.4.391'. [ 192.284249][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'. [ 192.445104][ T7394] loop2: detected capacity change from 0 to 7 [ 192.454815][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.462780][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.503184][ T7394] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 192.518708][ T5920] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 192.527287][ T7394] loop2: p1 start 3018249949 is beyond EOD, truncated [ 192.554132][ T7394] loop2: p2 start 1879129398 is beyond EOD, truncated [ 192.583341][ T7394] loop2: p3 start 4093120540 is beyond EOD, truncated [ 192.590684][ T7394] loop2: p4 start 2524654898 is beyond EOD, truncated [ 192.598911][ T7394] loop2: p5 start 674059 is beyond EOD, truncated [ 192.606083][ T7394] loop2: p6 start 57445 is beyond EOD, truncated [ 192.632014][ T7394] loop2: p7 start 1646166690 is beyond EOD, truncated [ 192.668326][ T7394] loop2: p8 start 3277892638 is beyond EOD, truncated [ 192.691529][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.698602][ T5920] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 192.712945][ T7394] loop2: p9 start 4163259941 is beyond EOD, truncated [ 192.721910][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.801995][ T5920] usb 5-1: config 0 descriptor?? [ 193.052246][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.076503][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.213735][ T7398] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 193.272716][ T5920] sigmamicro 0003:1C4F:0059.0007: hidraw0: USB HID v1.01 Device [HID 1c4f:0059] on usb-dummy_hcd.4-1/input0 [ 193.428990][ T7385] vlan2: left allmulticast mode [ 193.444514][ T7385] veth0_to_bond: left allmulticast mode [ 193.457023][ T7389] netlink: 80 bytes leftover after parsing attributes in process `syz.4.391'. [ 193.485798][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 193.738575][ T5920] usb 4-1: USB disconnect, device number 28 [ 193.748940][ T6364] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.802427][ T5920] cypress_cy7c63 4-1:0.194: Cypress CY7C63xxx device now disconnected [ 193.852041][ T6364] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.883851][ T6364] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.902500][ T6364] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.950792][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.993088][ T24] usb 5-1: USB disconnect, device number 19 [ 194.040072][ T7407] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 194.061387][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.208013][ T5978] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 194.228687][ T7414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.396'. [ 194.242437][ T7416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.396'. [ 194.390293][ T5978] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.426542][ T5978] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.465829][ T5978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.493141][ T5978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.541918][ T5978] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.568108][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.619702][ T5978] usb 1-1: Product: syz [ 194.644436][ T5978] usb 1-1: Manufacturer: syz [ 194.674345][ T5978] cdc_wdm 1-1:1.0: skipping garbage [ 194.691083][ T5978] cdc_wdm 1-1:1.0: skipping garbage [ 194.728771][ T5978] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 194.754843][ T5978] cdc_wdm 1-1:1.0: Unknown control protocol [ 194.897007][ T5886] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 194.921965][ T30] audit: type=1326 audit(1764451186.706:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.0.395" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feda038f749 code=0x0 [ 194.922058][ T30] audit: type=1326 audit(1764451186.716:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7405 comm="syz.0.395" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feda038f749 code=0x0 [ 195.007624][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 195.052787][ T5886] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 195.090121][ T5886] usb 2-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config [ 195.171010][ T5886] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.185510][ T5886] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.205042][ T5886] usb 2-1: config 1 interface 1 has no altsetting 0 [ 195.207738][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 195.220494][ T5886] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.242465][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.246228][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.269894][ T24] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 195.279609][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.286981][ T5886] usb 2-1: Product: syz [ 195.291845][ T5886] usb 2-1: Manufacturer: syz [ 195.293175][ T24] usb 4-1: config 0 descriptor?? [ 195.322086][ T5886] usb 2-1: SerialNumber: syz [ 195.349284][ T5886] cdc_ncm 2-1:1.0: skipping garbage [ 195.361040][ T5886] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 195.368829][ T5886] cdc_ncm 2-1:1.0: bind() failure [ 195.507240][ T5902] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 195.681009][ T5902] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 195.694673][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.734900][ T5902] usb 5-1: config 0 has no interface number 0 [ 195.757893][ T5902] usb 5-1: config 0 interface 205 has no altsetting 0 [ 195.769778][ T7438] 8021q: adding VLAN 0 to HW filter on device team1 [ 195.782706][ T5902] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 195.794710][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.818226][ T5902] usb 5-1: Product: syz [ 195.862470][ T5902] usb 5-1: Manufacturer: syz [ 195.877282][ T5902] usb 5-1: SerialNumber: syz [ 195.927493][ T5902] usb 5-1: config 0 descriptor?? [ 195.970414][ T5902] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 196.020092][ T5902] dvb-usb: bulk message failed: -22 (3/0) [ 196.075632][ T5902] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 196.115367][ T5902] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 196.145890][ T7445] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 196.192574][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.205171][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.305812][ T5902] usb 5-1: media controller created [ 196.327031][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.348559][ T5902] dvb-usb: bulk message failed: -22 (6/0) [ 196.361666][ T5902] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 196.391941][ T5902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 196.502867][ T5902] dvb-usb: schedule remote query interval to 150 msecs. [ 196.530676][ T5902] dvb-usb: bulk message failed: -22 (3/0) [ 196.557452][ T5902] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 196.677729][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 196.685709][ T5902] dvb-usb: error while querying for an remote control event. [ 196.867612][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 196.896199][ T5902] dvb-usb: error while querying for an remote control event. [ 197.022080][ T5920] usb 1-1: USB disconnect, device number 31 [ 197.097770][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 197.149457][ T5902] dvb-usb: error while querying for an remote control event. [ 197.357158][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 197.382520][ T5902] dvb-usb: error while querying for an remote control event. [ 197.430509][ T7451] netlink: 'syz.2.406': attribute type 27 has an invalid length. [ 197.555975][ T7452] __nla_validate_parse: 1 callbacks suppressed [ 197.555999][ T7452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.406'. [ 197.812303][ T5920] usb 5-1: USB disconnect, device number 20 [ 198.007128][ T5886] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 198.139607][ T5920] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 198.161551][ T5886] usb 2-1: USB disconnect, device number 29 [ 198.346739][ T7451] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.347294][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 198.355173][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.410524][ T7457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 198.711702][ T7451] wg1: left promiscuous mode [ 198.720675][ T7451] wg1: left allmulticast mode [ 198.814199][ T7463] loop2: detected capacity change from 0 to 7 [ 198.836465][ T7463] loop2: [ 198.847577][ T7463] loop2: partition table partially beyond EOD, truncated [ 199.015010][ T7451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.095348][ T7451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.484225][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 199.517624][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 199.536187][ T24] usb 4-1: USB disconnect, device number 29 [ 199.661696][ T7474] netlink: 112 bytes leftover after parsing attributes in process `syz.3.412'. [ 199.704880][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.712223][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.817827][ T5980] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 200.017684][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 200.041293][ T5980] usb 5-1: config 0 has no interfaces? [ 200.078899][ T5980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 200.204197][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.259043][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 200.298819][ T24] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 200.309584][ T7456] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 200.314562][ T5980] usb 5-1: Product: syz [ 200.348763][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.369104][ T6011] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.397072][ T5980] usb 5-1: Manufacturer: syz [ 200.417962][ T24] usb 4-1: config 0 descriptor?? [ 200.423186][ T5980] usb 5-1: SerialNumber: syz [ 200.428013][ T6011] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.477563][ T6011] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.486836][ T5980] usb 5-1: config 0 descriptor?? [ 200.514889][ T6011] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.817034][ T7483] x_tables: duplicate underflow at hook 2 [ 200.906340][ T7465] loop6: detected capacity change from 0 to 524288000 [ 200.914112][ T24] sigmamicro 0003:1C4F:0059.0008: hidraw0: USB HID v1.01 Device [HID 1c4f:0059] on usb-dummy_hcd.3-1/input0 [ 201.079835][ T7473] netlink: 80 bytes leftover after parsing attributes in process `syz.3.412'. [ 201.101028][ T7466] support for the xor transformation has been removed. [ 201.114636][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 201.232189][ T24] usb 4-1: USB disconnect, device number 30 [ 201.383851][ T7493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.416'. [ 201.541562][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.417'. [ 201.759304][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.418'. [ 202.012940][ T7507] loop2: detected capacity change from 0 to 7 [ 202.025500][ T6014] loop2: [ 202.029851][ T6014] loop2: partition table partially beyond EOD, truncated [ 202.045388][ T7507] loop2: [ 202.050083][ T7507] loop2: partition table partially beyond EOD, truncated [ 202.097693][ T5922] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 202.117267][ T5956] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 202.287835][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 202.348583][ T5956] usb 1-1: Using ep0 maxpacket: 16 [ 202.376264][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.412071][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.445783][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.471125][ T5956] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 202.534093][ T5922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.567930][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.598668][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.609498][ T5922] usb 2-1: Product: syz [ 202.614617][ T5956] usb 1-1: config 0 descriptor?? [ 202.621159][ T5922] usb 2-1: Manufacturer: syz [ 202.630108][ T5922] usb 2-1: SerialNumber: syz [ 202.733485][ T24] usb 5-1: USB disconnect, device number 21 [ 203.044717][ T5956] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 203.109221][ T7521] loop2: detected capacity change from 0 to 7 [ 203.118369][ T7521] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 203.127304][ T7521] loop2: p1 start 3018249949 is beyond EOD, truncated [ 203.134294][ T7521] loop2: p2 start 1879129398 is beyond EOD, truncated [ 203.142073][ T7521] loop2: p3 start 4093120540 is beyond EOD, truncated [ 203.155278][ T7521] loop2: p4 start 2524654898 is beyond EOD, truncated [ 203.162673][ T7521] loop2: p5 start 674059 is beyond EOD, truncated [ 203.173553][ T7521] loop2: p6 start 57445 is beyond EOD, truncated [ 203.183527][ T7521] loop2: p7 start 1646166690 is beyond EOD, truncated [ 203.194439][ T7521] loop2: p8 start 3277892638 is beyond EOD, truncated [ 203.209789][ T7521] loop2: p9 start 4163259941 is beyond EOD, truncated [ 203.449982][ T5956] usb 1-1: USB disconnect, device number 32 [ 203.839885][ T7530] input: syz0 as /devices/virtual/input/input18 [ 203.920933][ T7530] fuse: Bad value for 'rootmode' [ 204.082670][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 204.321047][ T7544] netlink: 112 bytes leftover after parsing attributes in process `syz.0.430'. [ 204.617805][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 204.782616][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.810889][ T24] usb 1-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 204.841326][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.842945][ T5922] usb 2-1: 0:2 : does not exist [ 204.871483][ T7532] netlink: 'syz.2.428': attribute type 6 has an invalid length. [ 204.903838][ T24] usb 1-1: config 0 descriptor?? [ 204.908159][ T5922] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 205.097528][ T5922] usb 2-1: USB disconnect, device number 30 [ 205.308434][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.372207][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 205.399895][ T24] sigmamicro 0003:1C4F:0059.000A: hidraw0: USB HID v1.01 Device [HID 1c4f:0059] on usb-dummy_hcd.0-1/input0 [ 205.437988][ T5956] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 205.587810][ T7540] netlink: 80 bytes leftover after parsing attributes in process `syz.0.430'. [ 205.597051][ T5956] usb 5-1: device descriptor read/64, error -71 [ 205.637199][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 205.779146][ T5910] usb 1-1: USB disconnect, device number 33 [ 205.845221][ T5956] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 206.007649][ T5956] usb 5-1: device descriptor read/64, error -71 [ 206.118202][ T5956] usb usb5-port1: attempt power cycle [ 206.137222][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 206.299915][ T24] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 206.309223][ T24] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 206.318422][ T24] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 206.328787][ T24] usb 4-1: config 220 has no interface number 2 [ 206.335185][ T24] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 206.349362][ T24] usb 4-1: config 220 interface 0 has no altsetting 0 [ 206.357358][ T24] usb 4-1: config 220 interface 76 has no altsetting 0 [ 206.364290][ T24] usb 4-1: config 220 interface 1 has no altsetting 0 [ 206.382351][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 206.394713][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.402918][ T24] usb 4-1: Product: syz [ 206.409246][ T24] usb 4-1: Manufacturer: syz [ 206.414013][ T24] usb 4-1: SerialNumber: syz [ 206.457748][ T5956] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 206.506839][ T5956] usb 5-1: device descriptor read/8, error -71 [ 206.674672][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.446'. [ 206.679963][ T7593] binder: 7592:7593 unknown command 0 [ 206.694378][ T7593] binder: 7592:7593 ioctl c0306201 200000000080 returned -22 [ 206.695447][ T7596] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 206.712378][ T7567] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 206.755194][ T7596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.763510][ T7597] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 206.767694][ T5956] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 206.782224][ T7597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.438'. [ 206.802696][ T7596] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 206.848424][ T5956] usb 5-1: device descriptor read/8, error -71 [ 206.850001][ T7597] batadv0: entered promiscuous mode [ 206.892319][ T7597] batadv0: entered allmulticast mode [ 206.916467][ T7597] bond0: (slave batadv0): Releasing backup interface [ 206.953180][ T7597] bridge0: port 3(batadv0) entered blocking state [ 206.967976][ T5956] usb usb5-port1: unable to enumerate USB device [ 206.987246][ T7597] bridge0: port 3(batadv0) entered disabled state [ 207.067845][ T6011] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 207.079394][ T6011] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 207.094816][ T7606] syzkaller1: entered promiscuous mode [ 207.129823][ T7606] syzkaller1: entered allmulticast mode [ 207.138372][ T24] usb 4-1: selecting invalid altsetting 0 [ 207.180741][ T24] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 207.225221][ T24] uvcvideo 4-1:220.0: No valid video chain found. [ 207.257181][ T5910] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 207.265231][ T7613] netlink: 'syz.1.450': attribute type 27 has an invalid length. [ 207.284795][ T24] usb 4-1: selecting invalid altsetting 0 [ 207.294641][ T24] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 207.322861][ T7613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'. [ 207.373435][ T24] usb 4-1: USB disconnect, device number 31 [ 207.443835][ T5910] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 207.498587][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.568029][ T7619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.451'. [ 207.632023][ T7618] netlink: 112 bytes leftover after parsing attributes in process `syz.2.452'. [ 207.658020][ T5910] usb 1-1: Product: syz [ 207.658062][ T5910] usb 1-1: Manufacturer: syz [ 207.658082][ T5910] usb 1-1: SerialNumber: syz [ 207.734282][ T5910] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 207.778306][ T5978] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 207.867834][ T5922] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 208.007158][ T5910] usb 1-1: USB disconnect, device number 34 [ 208.051642][ T5922] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.060163][ T5922] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 208.073921][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.106182][ T5922] usb 3-1: config 0 descriptor?? [ 208.584922][ T5922] sigmamicro 0003:1C4F:0059.000B: hidraw0: USB HID v1.01 Device [HID 1c4f:0059] on usb-dummy_hcd.2-1/input0 [ 208.892390][ T5922] usb 3-1: USB disconnect, device number 30 [ 208.911438][ T5978] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 208.993261][ T5978] ath9k_htc: Failed to initialize the device [ 209.023058][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.052267][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.069858][ T5910] usb 1-1: ath9k_htc: USB layer deinitialized [ 209.407141][ T5910] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 209.527120][ T5922] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 209.547383][ T5910] usb 1-1: device descriptor read/64, error -71 [ 209.641483][ T7642] netlink: 'syz.2.459': attribute type 10 has an invalid length. [ 209.650410][ T7642] __nla_validate_parse: 2 callbacks suppressed [ 209.650431][ T7642] netlink: 156 bytes leftover after parsing attributes in process `syz.2.459'. [ 209.797136][ T5910] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 209.802304][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.822177][ T5922] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 209.834263][ T5922] usb 2-1: can't read configurations, error -71 [ 209.927173][ T5956] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 209.941201][ T5910] usb 1-1: device descriptor read/64, error -71 [ 210.058532][ T5910] usb usb1-port1: attempt power cycle [ 210.102575][ T5956] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 210.122425][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.153536][ T5956] usb 3-1: Product: syz [ 210.165365][ T5956] usb 3-1: Manufacturer: syz [ 210.183310][ T5956] usb 3-1: SerialNumber: syz [ 210.400102][ T5910] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 210.448459][ T5910] usb 1-1: device descriptor read/8, error -71 [ 210.667997][ T5956] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 210.694937][ T5956] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 210.717505][ T5910] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 210.748857][ T5910] usb 1-1: device descriptor read/8, error -71 [ 210.870028][ T5910] usb usb1-port1: unable to enumerate USB device [ 210.937788][ T5922] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 211.098485][ T5922] usb 2-1: no configurations [ 211.105773][ T5922] usb 2-1: can't read configurations, error -22 [ 211.116471][ T5922] usb usb2-port1: attempt power cycle [ 211.234386][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.247454][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.467171][ T5978] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 211.487544][ T5922] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 211.509183][ T5922] usb 2-1: no configurations [ 211.514011][ T5922] usb 2-1: can't read configurations, error -22 [ 211.628726][ T5978] usb 4-1: not running at top speed; connect to a high speed hub [ 211.638967][ T5978] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 211.647900][ T5922] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 211.649703][ T5978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.676974][ T5978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.683514][ T5922] usb 2-1: no configurations [ 211.686814][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.699687][ T5922] usb 2-1: can't read configurations, error -22 [ 211.700430][ T5978] usb 4-1: Product:  [ 211.710697][ T5978] usb 4-1: Manufacturer: ж [ 211.715350][ T5978] usb 4-1: SerialNumber: ⓦ伪임㊟ٖ⼥鵎±鍌ⱊ崠휣㝉嬾蝔쇸笼盺斺䢋Ͽ簼拫푕暎纏唰ꗻ혦翹엃ͽ뎬ݫꮉ乣⇸筬챇缹 [ 211.717814][ T5922] usb usb2-port1: unable to enumerate USB device [ 211.909080][ T7655] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 211.998135][ T5978] usb 4-1: 0:2 : does not exist [ 212.043999][ T5978] usb 4-1: USB disconnect, device number 32 [ 212.110161][ T6271] udevd[6271]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.532396][ T5956] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 212.559920][ T5956] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 212.582235][ T5956] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 212.612669][ T5956] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 212.642103][ T5956] usb 3-1: USB disconnect, device number 31 [ 212.795228][ T7668] tipc: Started in network mode [ 212.817745][ T7668] tipc: Node identity ac14140f, cluster identity 4711 [ 212.821656][ T7671] sg_read: process 337 (syz.2.468) changed security contexts after opening file descriptor, this is not allowed. [ 212.840758][ T7668] tipc: New replicast peer: 255.255.255.255 [ 212.859302][ T7668] tipc: Enabled bearer , priority 10 [ 212.998447][ T7678] netlink: 'syz.3.467': attribute type 27 has an invalid length. [ 213.187101][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.467'. [ 213.199613][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.207520][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.548578][ T5978] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 213.867031][ T5978] usb 1-1: device descriptor read/64, error -71 [ 214.117117][ T5978] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 214.183934][ T7678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.255141][ T7678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.309014][ T5978] usb 1-1: device descriptor read/64, error -71 [ 214.427807][ T5978] usb usb1-port1: attempt power cycle [ 214.877257][ T5978] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 214.920079][ T5978] usb 1-1: device descriptor read/8, error -71 [ 215.168020][ T5978] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 215.203515][ T5856] tipc: Node number set to 2886997007 [ 215.218513][ T5978] usb 1-1: device descriptor read/8, error -71 [ 215.224261][ T6011] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.300036][ T6011] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.327684][ T5978] usb usb1-port1: unable to enumerate USB device [ 215.359408][ T6011] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.405525][ T6011] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.606718][ T5922] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 215.664978][ T5922] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.702579][ T7703] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 215.848672][ T7708] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 216.067016][ T5922] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 216.152891][ T7721] input: syz1 as /devices/virtual/input/input19 [ 216.389741][ T7721] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 216.441451][ T7726] tipc: Can't bind to reserved service type 2 [ 216.494840][ T7721] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.501951][ T7481] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 216.518005][ T7721] bond0: (slave team0): Enslaving as an active interface with an up link [ 216.675735][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 216.698541][ T5922] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 216.708019][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.716138][ T5922] usb 2-1: Product: syz [ 216.720981][ T5922] usb 2-1: Manufacturer: syz [ 216.729776][ T5922] usb 2-1: SerialNumber: syz [ 216.758521][ T5922] usb 2-1: config 0 descriptor?? [ 216.879321][ T7481] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.917022][ T7481] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 216.964890][ T7481] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.984116][ T7481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.997753][ T7481] usb 3-1: Product: syz [ 217.001992][ T7481] usb 3-1: Manufacturer: syz [ 217.006817][ T7481] usb 3-1: SerialNumber: syz [ 217.020301][ T7481] cdc_mbim 3-1:1.0: skipping garbage [ 217.208914][ T7730] netlink: 112 bytes leftover after parsing attributes in process `syz.4.483'. [ 217.234466][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.246179][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.457449][ T5903] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 217.561047][ T7714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.478'. [ 217.689775][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.697356][ T5903] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 217.706634][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.726469][ T5903] usb 5-1: config 0 descriptor?? [ 217.755000][ T7741] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.767525][ T5980] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 217.927393][ T5980] usb 1-1: Using ep0 maxpacket: 16 [ 217.935103][ T5980] usb 1-1: too many configurations: 63, using maximum allowed: 8 [ 217.958148][ T5980] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 217.967064][ T5980] usb 1-1: can't read configurations, error -61 [ 218.127351][ T5980] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 218.157651][ T5903] sigmamicro 0003:1C4F:0059.000D: hidraw0: USB HID v1.01 Device [HID 1c4f:0059] on usb-dummy_hcd.4-1/input0 [ 218.327068][ T5980] usb 1-1: Using ep0 maxpacket: 16 [ 218.344371][ T5980] usb 1-1: too many configurations: 63, using maximum allowed: 8 [ 218.356816][ T7730] netlink: 80 bytes leftover after parsing attributes in process `syz.4.483'. [ 218.381838][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 218.397884][ T7723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 218.413184][ T5980] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 218.428011][ T7481] cdc_mbim 3-1:1.0: setting tx_max = 48 [ 218.500458][ T5980] usb 1-1: can't read configurations, error -61 [ 218.516958][ T7481] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 218.528110][ T5980] usb usb1-port1: attempt power cycle [ 218.553913][ T7476] usb 5-1: USB disconnect, device number 26 [ 218.583339][ T7481] wwan wwan0: port wwan0mbim0 attached [ 218.690749][ T7481] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, ca:98:00:bb:2c:dc [ 218.765568][ T7481] usb 3-1: USB disconnect, device number 32 [ 218.794312][ T7481] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 218.811865][ T7476] usb 2-1: USB disconnect, device number 35 [ 218.906162][ T7481] wwan wwan0: port wwan0mbim0 disconnected [ 218.913913][ T5980] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 218.968464][ T5980] usb 1-1: Using ep0 maxpacket: 16 [ 218.999028][ T5980] usb 1-1: too many configurations: 63, using maximum allowed: 8 [ 219.013878][ T5980] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 219.024577][ T5980] usb 1-1: can't read configurations, error -61 [ 219.175167][ T7752] netlink: 'syz.1.487': attribute type 27 has an invalid length. [ 219.187384][ T5980] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 219.241316][ T7752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.487'. [ 219.281532][ T5980] usb 1-1: Using ep0 maxpacket: 16 [ 219.294086][ T5980] usb 1-1: too many configurations: 63, using maximum allowed: 8 [ 219.346975][ T5980] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 219.373372][ T5980] usb 1-1: can't read configurations, error -61 [ 219.386423][ T7756] syzkaller1: entered promiscuous mode [ 219.413088][ T7756] syzkaller1: entered allmulticast mode [ 219.413103][ T5980] usb usb1-port1: unable to enumerate USB device [ 219.438348][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.449019][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.023195][ T7759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.087682][ T7476] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 220.258831][ T7476] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.277580][ T7476] usb 4-1: config 0 has no interface number 0 [ 220.287402][ T7476] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 220.315413][ T7476] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 220.332995][ T7476] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 220.342597][ T7476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.354734][ T7476] usb 4-1: config 0 descriptor?? [ 220.371703][ T7771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.391646][ T7476] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 220.576025][ T7773] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.620998][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.665565][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.699504][ T7476] usb 4-1: USB disconnect, device number 33 [ 220.705545][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 221.690257][ T7799] netlink: 112 bytes leftover after parsing attributes in process `syz.2.500'. [ 222.048154][ T5980] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 222.055492][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 222.239495][ T5980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 222.253258][ T5980] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 222.284053][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.345908][ T5980] usb 3-1: config 0 descriptor?? [ 222.655773][ T7810] fuse: Bad value for 'rootmode' [ 222.937843][ T5980] sigmamicro 0003:1C4F:0059.000E: hidraw0: USB HID v1.01 Device [HID 1c4f:0059] on usb-dummy_hcd.2-1/input0 [ 223.051189][ T7797] netlink: 80 bytes leftover after parsing attributes in process `syz.2.500'. [ 223.097167][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 223.167038][ T7476] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 223.411798][ T7476] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 223.431458][ T7467] usb 3-1: USB disconnect, device number 33 [ 223.457560][ T7476] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 223.491934][ T7476] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.535114][ T7476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.566570][ T7812] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 223.605264][ T7812] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 223.671867][ T7476] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.937993][ T9] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 223.967365][ T7476] usb 5-1: USB disconnect, device number 27 [ 224.155751][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.240934][ T9] usb 1-1: config index 0 descriptor too short (expected 33540, got 36) [ 224.330143][ T9] usb 1-1: config 108 has too many interfaces: 60, using maximum allowed: 32 [ 224.387853][ T9] usb 1-1: config 108 has an invalid descriptor of length 0, skipping remainder of the config [ 224.465766][ T9] usb 1-1: config 108 has 1 interface, different from the descriptor's value: 60 [ 224.518104][ T9] usb 1-1: config 108 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.618574][ T7834] xt_hashlimit: max too large, truncated to 1048576 [ 224.736462][ T9] usb 1-1: config 108 interface 0 has no altsetting 0 [ 224.763177][ T7834] fuse: Unknown parameter '000000000000000000030x0000000000000009' [ 224.848877][ T9] usb 1-1: string descriptor 0 read error: -22 [ 224.995118][ T9] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 225.035093][ T9] usb 1-1: New USB device strings: Mfr=1, Product=235, SerialNumber=2 [ 225.448587][ T7825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.508'. [ 225.847062][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 226.075397][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.515'. [ 226.127658][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 226.209017][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.279706][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.339550][ T5980] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 226.355549][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.415523][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 226.493194][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 226.497492][ T5980] usb 2-1: Using ep0 maxpacket: 32 [ 226.535701][ T5980] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 226.547690][ T5980] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 226.563513][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 226.585126][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 226.604761][ T9] usb 5-1: SerialNumber: syz [ 226.629634][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 226.630254][ T5980] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 226.671677][ T9] usbtest 5-1:1.0: Linux gadget zero [ 226.686993][ T9] usbtest 5-1:1.0: high-speed {control in/out bulk-in int-in} tests (+alt) [ 226.715574][ T5980] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 226.739681][ T5980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.760512][ T5980] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 226.777099][ T5980] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 226.834903][ T5980] usb 2-1: Product: syz [ 226.930156][ T5980] usb 2-1: Manufacturer: syz [ 226.934824][ T5980] usb 2-1: SerialNumber: syz [ 226.981554][ T5980] usb 2-1: config 0 descriptor?? [ 227.041775][ T5980] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 227.058253][ T5922] usb 5-1: USB disconnect, device number 28 [ 227.077655][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 227.097652][ T5980] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 227.141713][ T7481] usb 1-1: USB disconnect, device number 47 [ 227.257315][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 227.264050][ T7848] netlink: 27 bytes leftover after parsing attributes in process `syz.1.516'. [ 227.274356][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 227.306004][ T9] usb 3-1: config 0 has no interface number 0 [ 227.319618][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 227.333698][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.363272][ T9] usb 3-1: Product: syz [ 227.407692][ T9] usb 3-1: Manufacturer: syz [ 227.422334][ T9] usb 3-1: SerialNumber: syz [ 227.466257][ T9] usb 3-1: config 0 descriptor?? [ 227.488633][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 227.721494][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 227.784853][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 227.907856][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 228.274047][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 228.284171][ T9] usb 3-1: USB disconnect, device number 34 [ 228.339791][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 228.422494][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 228.473688][ T9] quatech2 3-1:0.51: device disconnected [ 229.342831][ T7880] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 230.348196][ T5922] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 230.436606][ T7890] binder: 7889:7890 ioctl f517 0 returned -22 [ 230.529453][ T5922] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 230.588319][ T7893] input: syz0 as /devices/virtual/input/input20 [ 230.637731][ T5922] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 230.709734][ T7893] input: failed to attach handler leds to device input20, error: -6 [ 230.756497][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.787621][ T5922] usb 5-1: Product: syz [ 230.792023][ T5922] usb 5-1: Manufacturer: syz [ 230.800953][ T5922] usb 5-1: SerialNumber: syz [ 231.243636][ T5922] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 231.256712][ T5922] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 231.268799][ T7476] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 231.449930][ T7476] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 231.465168][ T7476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 231.482323][ T7476] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 231.497640][ T7476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.506087][ T7476] usb 3-1: Product: syz [ 231.511975][ T7476] usb 3-1: Manufacturer: syz [ 231.517317][ T7476] usb 3-1: SerialNumber: syz [ 231.532112][ T7476] usb 3-1: config 0 descriptor?? [ 231.585121][ T5922] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 231.647102][ T5922] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 231.682504][ T5922] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 231.726508][ T5922] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 231.792679][ T7908] loop2: detected capacity change from 0 to 7 [ 231.808527][ T5922] usb 5-1: USB disconnect, device number 29 [ 231.833658][ T7908] loop2: [ 231.850263][ T7908] loop2: partition table partially beyond EOD, truncated [ 231.880984][ T7476] powermate: unknown product id 0240 [ 231.970841][ T7476] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 232.187283][ T6011] wlan1: Trigger new scan to find an IBSS to join [ 232.225831][ C0] powermate: config urb returned -71 [ 232.234858][ C0] powermate: config urb returned -71 [ 232.241189][ C0] powermate: config urb returned -71 [ 232.246727][ C0] powermate: config urb returned -71 [ 232.301897][ T7476] usb 3-1: USB disconnect, device number 35 [ 232.301969][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 232.338995][ T7848] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 232.512056][ T7481] usb 2-1: USB disconnect, device number 36 [ 232.584365][ T7481] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 232.917119][ T7467] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 233.027142][ T5903] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 233.090172][ T7467] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 233.099405][ T7467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.118103][ T7467] usb 4-1: config 0 descriptor?? [ 233.189292][ T5903] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.200897][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.207710][ T5903] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 233.219241][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.232873][ T5903] usb 1-1: config 0 descriptor?? [ 233.297789][ T5922] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 233.466030][ T5922] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 233.475683][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.484453][ T5922] usb 5-1: Product: syz [ 233.490737][ T5922] usb 5-1: Manufacturer: syz [ 233.496489][ T5922] usb 5-1: SerialNumber: syz [ 233.548401][ T7467] ath6kl: Unsupported hardware version: 0x0 [ 233.548467][ T5922] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 233.564589][ T7467] ath6kl: Failed to init ath6kl core: -22 [ 233.619760][ T7467] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 233.661508][ T5856] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.679035][ T5903] hid-alps 0003:044E:1215.000F: unknown main item tag 0x1 [ 233.743342][ T5903] hid-alps 0003:044E:1215.000F: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 233.786775][ T5922] usb 4-1: USB disconnect, device number 34 [ 233.854810][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 233.874291][ T7476] usb 1-1: USB disconnect, device number 48 [ 234.110914][ T7948] fido_id[7948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 234.412907][ T7476] usb 5-1: USB disconnect, device number 30 [ 234.679983][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.543'. [ 234.745458][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.759481][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.985606][ T5856] usb 5-1: Service connection timeout for: 256 [ 235.017204][ T5903] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 235.029261][ T5856] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 235.034667][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.061284][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.103079][ T5856] ath9k_htc: Failed to initialize the device [ 235.138806][ T7476] usb 5-1: ath9k_htc: USB layer deinitialized [ 235.158212][ T6365] wlan1: Trigger new scan to find an IBSS to join [ 235.181931][ T7972] netlink: 32 bytes leftover after parsing attributes in process `syz.1.546'. [ 235.233578][ T7972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.546'. [ 235.250823][ T5903] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 235.283357][ T5903] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 235.294892][ T5980] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 235.320679][ T5903] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 235.343975][ T7980] fuse: Bad value for 'fd' [ 235.361498][ T5903] usb 4-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.401077][ T7980] ipip0: entered promiscuous mode [ 235.406295][ T7980] ipip0: entered allmulticast mode [ 235.421813][ T5903] usb 4-1: config 16 interface 0 has no altsetting 0 [ 235.432950][ T5903] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 235.442862][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.490828][ T5980] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 235.499412][ T5980] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 235.510291][ T5980] usb 1-1: config 8 has no interface number 0 [ 235.540303][ T5980] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 235.553874][ T7481] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 235.615811][ T5980] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 235.640871][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.661370][ T5903] usb 4-1: string descriptor 0 read error: -71 [ 235.669569][ T5903] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 235.720538][ T7481] usb 2-1: Using ep0 maxpacket: 8 [ 235.729885][ T5903] imon 4-1:16.0: unable to initialize intf0, err -19 [ 235.738603][ T7986] kvm: kvm [7984]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xffffffffffffffff [ 235.761749][ T5980] usb 1-1: Product: syz [ 235.775517][ T7481] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 235.786403][ T5903] imon:imon_probe: failed to initialize context! [ 235.793732][ T5980] usb 1-1: Manufacturer: syz [ 235.800741][ T5980] usb 1-1: SerialNumber: syz [ 235.807781][ T7481] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 235.830277][ T5903] imon 4-1:16.0: unable to register, err -19 [ 235.838747][ T7481] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 235.875978][ T5903] usb 4-1: USB disconnect, device number 35 [ 235.883363][ T7481] usb 2-1: Product: syz [ 235.889180][ T7481] usb 2-1: Manufacturer: syz [ 235.896558][ T7481] usb 2-1: SerialNumber: syz [ 236.123501][ T7481] usb 2-1: Handspring Visor / Palm OS: port 48, is for unknown use [ 236.143432][ T5980] usb 1-1: USB disconnect, device number 49 [ 236.152686][ T6374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.178814][ T7481] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 236.217438][ T7481] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 236.558820][ T7481] usb 2-1: palm_os_3_probe - error -110 getting bytes available request [ 236.593695][ T7481] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 236.660961][ T7481] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 236.756743][ T7481] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 236.800411][ T7481] usb 2-1: USB disconnect, device number 37 [ 236.830739][ T7481] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 236.864761][ T7481] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 236.879360][ T7481] visor 2-1:1.0: device disconnected [ 237.098160][ T7999] random: crng reseeded on system resumption [ 237.526770][ T8013] netlink: 44 bytes leftover after parsing attributes in process `syz.2.555'. [ 238.109613][ T5856] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 238.312074][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.340748][ T8032] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 238.357627][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.394487][ T5856] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 238.425308][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.476549][ T5856] usb 5-1: config 0 descriptor?? [ 238.966563][ T5856] saitek 0003:06A3:0CFA.0010: unknown main item tag 0x0 [ 239.056096][ T5856] saitek 0003:06A3:0CFA.0010: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.4-1/input0 [ 239.489708][ T8054] ------------[ cut here ]------------ [ 239.495386][ T8054] WARNING: CPU: 1 PID: 8054 at arch/x86/kvm/lapic.c:3483 kvm_apic_accept_events+0x341/0x490 [ 239.506025][ T8054] Modules linked in: [ 239.510667][ T8054] CPU: 1 UID: 0 PID: 8054 Comm: syz.0.565 Not tainted syzkaller #0 PREEMPT(full) [ 239.520175][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.530666][ T8054] RIP: 0010:kvm_apic_accept_events+0x341/0x490 [ 239.537682][ T8054] Code: eb 0c e8 92 ca 71 00 eb 05 e8 8b ca 71 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 70 ca 71 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f [ 239.559477][ T8054] RSP: 0018:ffffc90003327bf0 EFLAGS: 00010283 [ 239.565875][ T8054] RAX: ffffffff814e3940 RBX: 0000000000000002 RCX: 0000000000080000 [ 239.574247][ T8054] RDX: ffffc9000b549000 RSI: 0000000000000396 RDI: 0000000000000397 [ 239.582480][ T8054] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff814689b6 [ 239.591130][ T8054] R10: dffffc0000000000 R11: ffffed10047e9a58 R12: 0000000000000002 [ 239.599365][ T8054] R13: dffffc0000000000 R14: ffff88802fbf6e00 R15: ffff888023f4d558 [ 239.607683][ T8054] FS: 00007feda11826c0(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 239.616835][ T8054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.624066][ T8054] CR2: 000000000005fff8 CR3: 0000000032cb4000 CR4: 00000000003526f0 [ 239.632133][ T8054] Call Trace: [ 239.635441][ T8054] [ 239.638471][ T8054] kvm_arch_vcpu_ioctl_get_mpstate+0x128/0x480 [ 239.644678][ T8054] ? kvm_arch_vcpu_ioctl_get_mpstate+0xd6/0x480 [ 239.651442][ T8054] kvm_vcpu_ioctl+0x625/0xe90 [ 239.656231][ T8054] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 239.661742][ T8054] ? __fget_files+0x2a/0x420 [ 239.666442][ T8054] ? __fget_files+0x3a0/0x420 [ 239.671671][ T8054] ? __fget_files+0x2a/0x420 [ 239.676332][ T8054] ? bpf_lsm_file_ioctl+0x9/0x20 [ 239.681718][ T8054] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 239.687037][ T8054] __se_sys_ioctl+0xfc/0x170 [ 239.691698][ T8054] do_syscall_64+0xfa/0xfa0 [ 239.696245][ T8054] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.701561][ T8054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.708037][ T8054] ? clear_bhb_loop+0x60/0xb0 [ 239.712879][ T8054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.718892][ T8054] RIP: 0033:0x7feda038f749 [ 239.723368][ T8054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.743954][ T8054] RSP: 002b:00007feda1182038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.753138][ T8054] RAX: ffffffffffffffda RBX: 00007feda05e5fa0 RCX: 00007feda038f749 [ 239.761221][ T8054] RDX: 00002000000001c0 RSI: 000000008004ae98 RDI: 0000000000000005 [ 239.769589][ T8054] RBP: 00007feda0413f91 R08: 0000000000000000 R09: 0000000000000000 [ 239.778088][ T8054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.786461][ T8054] R13: 00007feda05e6038 R14: 00007feda05e5fa0 R15: 00007feda070fa28 [ 239.795608][ T8054] [ 239.799155][ T8054] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 239.806876][ T8054] CPU: 1 UID: 0 PID: 8054 Comm: syz.0.565 Not tainted syzkaller #0 PREEMPT(full) [ 239.816114][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.826522][ T8054] Call Trace: [ 239.829927][ T8054] [ 239.833142][ T8054] dump_stack_lvl+0x99/0x250 [ 239.838378][ T8054] ? __asan_memcpy+0x40/0x70 [ 239.843010][ T8054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.848268][ T8054] ? __pfx__printk+0x10/0x10 [ 239.853271][ T8054] vpanic+0x237/0x6d0 [ 239.857293][ T8054] ? __pfx_vpanic+0x10/0x10 [ 239.861939][ T8054] panic+0xb9/0xc0 [ 239.866299][ T8054] ? __pfx_panic+0x10/0x10 [ 239.870929][ T8054] __warn+0x31b/0x4b0 [ 239.874967][ T8054] ? kvm_apic_accept_events+0x341/0x490 [ 239.880551][ T8054] ? kvm_apic_accept_events+0x341/0x490 [ 239.886138][ T8054] report_bug+0x2be/0x4f0 [ 239.890567][ T8054] ? kvm_apic_accept_events+0x341/0x490 [ 239.896167][ T8054] ? kvm_apic_accept_events+0x341/0x490 [ 239.901848][ T8054] ? kvm_apic_accept_events+0x343/0x490 [ 239.907434][ T8054] handle_bug+0x84/0x160 [ 239.911732][ T8054] exc_invalid_op+0x1a/0x50 [ 239.916280][ T8054] asm_exc_invalid_op+0x1a/0x20 [ 239.921158][ T8054] RIP: 0010:kvm_apic_accept_events+0x341/0x490 [ 239.927448][ T8054] Code: eb 0c e8 92 ca 71 00 eb 05 e8 8b ca 71 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 70 ca 71 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f [ 239.947256][ T8054] RSP: 0018:ffffc90003327bf0 EFLAGS: 00010283 [ 239.953457][ T8054] RAX: ffffffff814e3940 RBX: 0000000000000002 RCX: 0000000000080000 [ 239.962113][ T8054] RDX: ffffc9000b549000 RSI: 0000000000000396 RDI: 0000000000000397 [ 239.970216][ T8054] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff814689b6 [ 239.978236][ T8054] R10: dffffc0000000000 R11: ffffed10047e9a58 R12: 0000000000000002 [ 239.986252][ T8054] R13: dffffc0000000000 R14: ffff88802fbf6e00 R15: ffff888023f4d558 [ 239.994390][ T8054] ? kvm_arch_vcpu_ioctl_get_mpstate+0xd6/0x480 [ 240.000812][ T8054] ? kvm_apic_accept_events+0x340/0x490 [ 240.006447][ T8054] kvm_arch_vcpu_ioctl_get_mpstate+0x128/0x480 [ 240.012639][ T8054] ? kvm_arch_vcpu_ioctl_get_mpstate+0xd6/0x480 [ 240.018987][ T8054] kvm_vcpu_ioctl+0x625/0xe90 [ 240.023717][ T8054] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 240.028983][ T8054] ? __fget_files+0x2a/0x420 [ 240.033622][ T8054] ? __fget_files+0x3a0/0x420 [ 240.038333][ T8054] ? __fget_files+0x2a/0x420 [ 240.042952][ T8054] ? bpf_lsm_file_ioctl+0x9/0x20 [ 240.047929][ T8054] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 240.053196][ T8054] __se_sys_ioctl+0xfc/0x170 [ 240.057887][ T8054] do_syscall_64+0xfa/0xfa0 [ 240.062526][ T8054] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.067937][ T8054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.074270][ T8054] ? clear_bhb_loop+0x60/0xb0 [ 240.079069][ T8054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.085075][ T8054] RIP: 0033:0x7feda038f749 [ 240.089528][ T8054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.109852][ T8054] RSP: 002b:00007feda1182038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.118491][ T8054] RAX: ffffffffffffffda RBX: 00007feda05e5fa0 RCX: 00007feda038f749 [ 240.128264][ T8054] RDX: 00002000000001c0 RSI: 000000008004ae98 RDI: 0000000000000005 [ 240.136785][ T8054] RBP: 00007feda0413f91 R08: 0000000000000000 R09: 0000000000000000 [ 240.146217][ T8054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.154312][ T8054] R13: 00007feda05e6038 R14: 00007feda05e5fa0 R15: 00007feda070fa28 [ 240.162336][ T8054] [ 240.165902][ T8054] Kernel Offset: disabled [ 240.170264][ T8054] Rebooting in 86400 seconds..