last executing test programs: 7m4.977207529s ago: executing program 1 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000344000480240001800b000100736f636b657400001400028008000240fffffff308000140000000011c0001800a00010071756575650000000c00028006000140000200000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x2001}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5400000006bd4e0400000000000000000200000028000480240001800a020100726564697200000014000280080001400000000f08000340000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) r6 = accept(r3, 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) syz_usb_ep_write(r7, 0x81, 0x0, &(0x7f0000000000)) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x6, &(0x7f0000000000)='BBBBBB') sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x20}}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) bind$alg(0xffffffffffffffff, 0x0, 0x0) shutdown(r6, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 7m1.725646208s ago: executing program 1 (id=238): madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x14) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r0, 0x2000001, 0x30, r1, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r0, 0x2000001, 0x30, r1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0xa) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0xa) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040), 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000000c0)) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x80000000, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x0, 0x6, 0x5, &(0x7f0000000140)={0x10, "4c61e132cde7bf18003d1c5850a68e067cb694a6720de00919da53e6880f9fb682"}}) (async) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x0, 0x6, 0x5, &(0x7f0000000140)={0x10, "4c61e132cde7bf18003d1c5850a68e067cb694a6720de00919da53e6880f9fb682"}}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r5 = dup2(0xffffffffffffffff, r1) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x480200, 0x12, 0x38}, 0x18) (async) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x480200, 0x12, 0x38}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc4}}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc4}}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="73fca9c9c11656bbb1d43724bc33c30496474c8dc708ac12b8850fe893e1a745f3af30525bcd249735604a6d3c517cf11ef46e7cfad7915a70dd81d321f9deb84d15dc1d395fcf16bafd472bf17968ff9f6bb9d59d6600586a989289ee1910fa7e99aa79a1512841595cc274035b56d6d48830140539500c5df968d3d2d0178400ce4175c114f498c5a4a43ae0a054514f715b2b07cf081bc0d5805ddb6a52fba1ff9467a696e9830859c039b7b14a30ba", 0xb1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0xf7, 0x1, 0x0, 0x1, @private2, @mcast1, 0x8, 0x40, 0x1, 0xf}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0xf7, 0x1, 0x0, 0x1, @private2, @mcast1, 0x8, 0x40, 0x1, 0xf}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa0, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x80000000}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000740)={{0xf, 0x6}, 0x100, './file0\x00'}) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r0, 0x2000000, 0x4010, r2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r0, 0x2000000, 0x4010, r2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000940)={&(0x7f0000000880)=""/158, 0x9e, 0x5, 0x3}) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000980)) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000d80)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000dc0)=0x2c) (async) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000d80)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000dc0)=0x2c) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000e00)=0x8) fsopen(&(0x7f0000000e40)='binfmt_misc\x00', 0x0) 7m1.650210087s ago: executing program 1 (id=239): ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x4000000}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400000002000000", @ANYRES32=0x0, @ANYBLOB="01310100220002003c0012800e000100a538ce75727370616e000080280002a0141e050000000000000000000000ffffac141426080004000000050000000c0051000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') close(r0) 7m1.362624997s ago: executing program 1 (id=242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r5, &(0x7f0000000700)=""/90, 0x5a) userfaultfd(0xc00) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace(0x420e, r10) r11 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x104, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, {0xa, 0x0, 0x0, @loopback}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0x16}) syz_fuse_handle_req(r1, &(0x7f00000087c0)="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", 0x2000, &(0x7f0000001100)={&(0x7f0000000300)={0x50, 0xffffffffffffffda, 0x10000, {0x7, 0x2b, 0x4, 0x20000, 0xc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}}, &(0x7f0000000280)={0x18, 0x0, 0x2, {0x381ab223}}, &(0x7f0000000440)={0x18, 0xffffffffffffffda, 0xef1, {0xd4920}}, &(0x7f0000000500)={0x18, 0x0, 0x3, {0xa}}, &(0x7f0000000540)={0x18, 0x0, 0x40, {0x3}}, &(0x7f0000000580)={0x28, 0x0, 0x3, {{0x9, 0x7fffffffffffffff, 0x0, r10}}}, &(0x7f00000005c0)={0x60, 0xffffffffffffffda, 0x10000, {{0x7fff, 0x8, 0x5, 0x6, 0x3ff, 0x0, 0x3, 0x200}}}, &(0x7f0000000680)={0x18, 0x0, 0x34, {0x5}}, &(0x7f00000006c0)={0x14, 0xffffffffffffffda, 0x8, {'^!/\x00'}}, &(0x7f0000000840)={0x20, 0x0, 0x2}, &(0x7f0000000880)={0x78, 0xfffffffffffffffe, 0x8, {0x81, 0x1, 0x0, {0x2, 0xfffffffffffffff9, 0x80000001, 0x2, 0x9, 0x7f, 0x8, 0xfffffffb, 0x1d, 0x1000, 0x1, r3, r4, 0x3, 0x800}}}, &(0x7f0000000900)={0x90, 0x2f, 0x6, {0x3, 0x0, 0x8, 0x5, 0x2, 0x5, {0x5, 0x8, 0x1, 0x200, 0xc062, 0x1, 0xecb, 0xd, 0xffffffff, 0x8000, 0x3, r3, 0x0, 0xa, 0x9}}}, &(0x7f00000009c0)={0x170, 0x0, 0x0, [{0x5, 0x1, 0x12, 0x2, '/dev/snd/midiC#D#\x00'}, {0x3, 0x3, 0x5, 0x401, '%!^/j'}, {0x6, 0x7d, 0xa, 0x5, '/dev/fuse\x00'}, {0x1, 0x401, 0x9, 0x0, '-.[\\\xd6[+@)'}, {0x0, 0x8000, 0x2, 0x4, '^U'}, {0x0, 0x3, 0x1, 0x0, ')'}, {0x4, 0x8001, 0x5, 0x7899, 'fuse\x00'}, {0x5, 0x8000000, 0x2, 0x0, '\xff\xff'}, {0x1, 0x7fff, 0x6, 0x5, '#///{\xde'}, {0x6, 0x6, 0x2, 0x101, '\xff\xff'}]}, &(0x7f0000000c00)={0x1f0, 0x0, 0x9, [{{0x3, 0x1, 0xf, 0x2, 0xfff, 0x0, {0x4, 0x1000, 0xb0, 0x900, 0xa, 0x7ff, 0x1, 0x0, 0xd, 0x8000, 0x1, 0x0, 0x0, 0x3, 0x1}}, {0x2, 0x6f, 0x5, 0x10001, '&(]%,'}}, {{0x4, 0x0, 0x400, 0x3, 0x84, 0x5, {0x0, 0x7, 0x100, 0xa, 0xbcf, 0xf, 0x2, 0x1f0, 0x6, 0x1000, 0x3, r3, r4, 0x3, 0x4}}, {0x50000000000, 0x4, 0x2, 0x6, '\xff\xff'}}, {{0x2, 0x1, 0x6, 0xa5, 0x3, 0xb, {0x8, 0x1, 0x1, 0xbb8d, 0x9d, 0x4, 0x7fff, 0x80, 0x7, 0xa000, 0x5, r3, r4, 0xbaba, 0x8}}, {0x0, 0x3, 0x2, 0x8000, '}$'}}]}, &(0x7f0000000e40)={0xa0, 0xfffffffffffffffe, 0x1, {{0x6, 0x2, 0x1000, 0x200, 0x2, 0x6, {0x6, 0x0, 0x3, 0xde, 0x38, 0x8, 0x8, 0x800, 0xfff, 0x1000, 0x4, r3, 0x0, 0x0, 0x4}}, {0x0, 0x4}}}, &(0x7f0000000f00)={0x20, 0x0, 0x6, {0xfffffffc, 0x4, 0x3, 0xffff83a6}}, &(0x7f0000000fc0)={0x130, 0x0, 0x7f, {0x800, 0x0, 0x0, '\x00', {0x1000, 0x9, 0xcb43, 0xb7d3, 0x0, r4, 0x7000, '\x00', 0x251, 0x20, 0x2, 0x5, {0x4, 0x3}, {0x0, 0x3}, {0x2, 0x5}, {0x8, 0x4}, 0xf, 0x7000000, 0xfffffffe, 0x8}}}}) io_uring_enter(r11, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x2, 0x64bf8fe95ba35d0d, &(0x7f00000001c0)={r14, r15+10000000}, 0x0) 7m0.187152555s ago: executing program 1 (id=246): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x20ecd]}, 0x8) recvmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@ll, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000280)=""/2, 0x2}, {&(0x7f0000006300)=""/4098, 0x1002}, {&(0x7f0000000300)=""/135, 0x87}], 0x4, &(0x7f0000000400)=""/3, 0x3}, 0x3) mkdirat(r0, &(0x7f0000000740)='./file0\x00', 0x271) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 32) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x19) (async, rerun: 32) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) (async, rerun: 32) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="ff356bc61f87648be733fdb2e4fc70b1ee39c0cbd3e661b8860b064c8d78cb682c8de3567c435dd4534a81e2504811b22d79528299bed19e5bb9ab0e9faf1ff612721a6b4c2f53209584242736be8912adc4fc82449e7a1ced47524f62ad67618df0cb6a45988a31b9ad72579752c0b57437ce7a1a0c50f374a4af996f5e718c6dc788ebc9665cdc600bd33a04a7e3b031940a3a62d68e8ae92c0148d0cc75db5f6c1373691cc7f80509c7e7ac55b5505bd277006273e7dee324c76a59841d09b8aa66a4c70ee4cae3bf343044aa08053e6842a6", 0xd4, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000005c0)={0x0, r3, r6}, &(0x7f0000000780)=""/152, 0x98, &(0x7f0000000640)={&(0x7f0000000600)={'sha3-512-ce\x00'}, &(0x7f0000000840)="f5a380bb96473d679aebbf90121b75320b01af92730b3dccd3fe2652c041585aaf3577df44246aeb6bec23045b491905557dd4951443515a2aa5e84b9a002c614cea1d5d5010e5d9ed6726c5d9ce658eeeac37535c3dd80f3a5c7ce6169baa90fecfabc08ba0c03a5ee4cd357ab5fef83cfd265bb6163ccf0595993cbb2db587153895bb08aa09faf05bbe404d7884ec5abd3d0b63ec2d5087f5625952b76db87fab2450b03bd5fbc3d7856aa91a07330e15b89b6dea6f985cd8a2a010559bed18065717693f4277da7896bf292ce26c43ef4f2f0710012d1195c11bd1d5e8154c68700ce197eb4547223bb354c97a024fcbc5f9", 0xf4}) (async, rerun: 64) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000480)=ANY=[]) (async, rerun: 64) syz_fuse_handle_req(r1, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b39de2c5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3aa35dd00", 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x10010000, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x457, 0x0, 0x0, 0x10, 0xfff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) stat(&(0x7f0000000140)='./file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0x7, 0x9, 0x1af3, 0xa, 0x80000006, 0x5, 0x6, 0x8, 0x6000, 0x11, 0xffffffffffffffff, 0x0, 0x800003, 0x1c00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m59.760824572s ago: executing program 1 (id=248): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000ffffffd410a400000000001c010000000000009500000000000000dae28b99db2e6c9338478f0763789e1011ce79d56c73e324c294ee"], 0x0, 0x5}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004806f66666c6f616400000000100002800900010073797a30000000000900010073797a300000000009000200730000001100010000000000000000000000000a00000000000000009e2cf8ddf6fcf36e4704934c1ed2a7175d1a0617efc825d60c5c1067cda19bb9d148d5187b2037aa70996bea5801d42a52c4db612b8e823c5e5984d0abf78d9bdce2edba"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f0000000180)="282fa8", 0x3, 0x5}]) sendfile(r3, r4, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c010005200100000000000000000000e2ff0000000000000000000000000000000000004e21003413118c84ef9c7abbd5ddcf0877e9b431b76cf02baefc68d5da1338ab6ba2fd", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r7], 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x6, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4081) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 6m58.890025446s ago: executing program 32 (id=248): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000ffffffd410a400000000001c010000000000009500000000000000dae28b99db2e6c9338478f0763789e1011ce79d56c73e324c294ee"], 0x0, 0x5}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004806f66666c6f616400000000100002800900010073797a30000000000900010073797a300000000009000200730000001100010000000000000000000000000a00000000000000009e2cf8ddf6fcf36e4704934c1ed2a7175d1a0617efc825d60c5c1067cda19bb9d148d5187b2037aa70996bea5801d42a52c4db612b8e823c5e5984d0abf78d9bdce2edba"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f0000000180)="282fa8", 0x3, 0x5}]) sendfile(r3, r4, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c010005200100000000000000000000e2ff0000000000000000000000000000000000004e21003413118c84ef9c7abbd5ddcf0877e9b431b76cf02baefc68d5da1338ab6ba2fd", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r7], 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x6, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4081) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 7.218868222s ago: executing program 3 (id=2119): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) poll(&(0x7f0000001280)=[{r4, 0x190}], 0x1, 0xfffffffb) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)='=', 0x1}], 0x1}, 0x41) sendmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="fc501eebeb1342964b20977d8089e237341d", 0x12}], 0x1}, 0x4048841) close(r5) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a", 0x47}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d8ff", @ANYRES32=0x0, @ANYBLOB="08004d0100000000"], 0x24}, 0x1, 0x0, 0x0, 0x8091}, 0x48080) r7 = socket$inet(0x2, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r10, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0xb0, 0x0, 0x0, 0x200, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x17}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b9}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xd8b}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a3000000000090003"], 0xa0}}, 0x8040) 5.755677393s ago: executing program 4 (id=2125): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4dfc, 0x3, 'sed\x00', 0x22, 0x80005, 0x18}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x3, 0xc, 0x2}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002c0000fffd001190780054760d870000000017"], 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, &(0x7f00000000c0), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000000), 0x4) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r4, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x404302, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x101, 0x10880) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$unix(r7, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x88) write$dsp(r5, &(0x7f0000000080)="d034c2ad8b4edc65be308bed9b7082fc7118e1dedf2c345073bdb2430b7bfa530737f6296a4f9202faee1a70ebb1bafcc9046f45160372b6aa97a12915", 0x3d) 5.599699582s ago: executing program 0 (id=2127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa2265bdf9e06e7cb}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x7, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44005}, 0x14) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x6, 0x480) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000180)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvtap0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r5 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "4af917f5f12328cbc5bf4a3233ff3094b24af94410606ad3862e222a6de39594537ef67e2b481f881072bd930acc28d46cddbccf951a5f63fc8f79698c6a19b0", 0x2a}, 0x48, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r4, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x552}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x6bacf789}}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xfff}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x20e}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040004}, 0x20044010) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x1, &(0x7f0000000540)) prlimit64(r3, 0x1, &(0x7f0000000580)={0x4, 0x4}, &(0x7f00000005c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x25}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1eeb}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x2c}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x56d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$inet(0x2, 0x800, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'sit0\x00', r2, 0x7, 0x1, 0x1, 0x1, {{0xb, 0x4, 0x0, 0x4, 0x2c, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x13}, {[@rr={0x7, 0x17, 0x6, [@loopback, @local, @loopback, @loopback, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000880)={'gre0\x00', &(0x7f0000000800)={'syztnl1\x00', r10, 0x40, 0x7, 0x9, 0x2d, {{0xe, 0x4, 0x3, 0x2e, 0x38, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x23, 0xed, [@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x181840, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x58, &(0x7f0000000900)}, 0x10) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000a00)={0x0, 0x10, &(0x7f00000009c0)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000a40)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000000a80)={r13, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x7eb7}, &(0x7f0000000b40)=0x90) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, r7, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x74}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4040001) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) ioctl$KVM_RUN(r14, 0xae80, 0x0) setrlimit(0x3, &(0x7f0000000d00)={0x1, 0x2}) bind$alg(r14, &(0x7f0000000d40)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus640-sse2)\x00'}, 0x58) 5.267432804s ago: executing program 4 (id=2128): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f00000000c0)={0x3d, 0x0, 0x1000004f, 0x1, 0x2, 0x9, 0x8000000009, 0x8000000000000001, 0x0, 0x7ffffffb}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}}, 0x1c) preadv(r7, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/195, 0xc3}], 0x1, 0x400, 0x800) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000101a81, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f00000004c0)=0x97) socket$kcm(0x2, 0x3, 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) 5.19548492s ago: executing program 0 (id=2129): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040630415120000000000010902240001000000090904000401030000000921040004012207000905810320"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x24, 0x4b, {0x4b, 0x5, "3b069599d5e3863b5180c9e4ebc29d6354672b7e63af913341b155978f7b0b038829bb922877a9d681d4dcd5992a972b6b80d1a042a1c37bb5e62f6c6e039120ac6b385d4caa29ff80"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x1, 0xc0, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x3, 0x1, 0x1, 0x20, 0x83, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0xe, 0x2, "7e06a4fc"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x8, 0xb, "78fa750a"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x100, 0x9f, 0x3, "674bf51ed56274"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x6, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x7, 0x8, {0x7, 0x25, 0x1, 0x82, 0x26, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0x59, 0x4}, @as_header={0x7, 0x24, 0x1, 0x3, 0x9, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x81, 0x4, 0x3, 0x1, "", "6796"}, @as_header={0x7, 0x24, 0x1, 0xf6, 0x61, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x8f, 0xf, {0x7, 0x25, 0x1, 0x3, 0x7, 0x401}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x7, 0x4, 0x6, 0x20, 0x99}, 0x93, &(0x7f0000000140)={0x5, 0xf, 0x93, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x3, 0x5, 0x4, 0x97, 0x2}, @generic={0x76, 0x10, 0x2, "2516e328286891ad74fd2191966840fedd76b539067bf8f96efd85902c82925f1612d9c13118eb275accebf8addaa446c7e746e32c59cbbfdb679a03439af0973e84a6ddf36f45214b9bee7d8e0bd4d6846b22ab1a3d6bc5d54fd9653ecc18a5ee96738786be435893daea553ba92c605e4c21"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x2, 0x6, 0x17d0}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x1f, &(0x7f0000000400)=ANY=[@ANYBLOB="1f037f259a1d2c6a3e9a3fff2f802a292d2133d1a95057e65b5883c59e63c5edba9d8c4d53821998d10f6c8e386756177257df1074835bcbb4568ef0427061cf839daac3ff6ef660c501622603c5ce272b15df6effffffff84146a6a320772217ace9b8d0ba4ce22c4fd05f3ec8f0a944956b62b18f8b2fe8aa18cad264b88e3542a65ccb96c93e9f14664ae2e2178a1214fb73db937b388f1c8b3e52a56a29aa46b91d2a957ac234d5117825c7aca0d1c0100a04ba544873f2aa29fb4a736135985c0f24706f3b51f2bf59193f4553c46000000000000000000"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2001}}]}) 4.883801108s ago: executing program 2 (id=2130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000340)={0x700, 0x0, {0x7f, 0x7, 0x300f, 0x6, 0x0, 0x4, 0x0, 0x7}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = shmget(0x3, 0x3000, 0x80, &(0x7f000000d000/0x3000)=nil) shmat(r2, &(0x7f0000008000/0x1000)=nil, 0x3000) writev(r1, &(0x7f0000000340)=[{0x0}], 0x1) 4.831909981s ago: executing program 2 (id=2131): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000020605000000000000000000000000000900020073797a32000000000500040000000000050005000200000016000300686173683a6e65742c706f72742c6e657400000014000580080006000000000008001340fffffffc0500010007"], 0x64}, 0x1, 0x0, 0x0, 0x20008045}, 0x20000000) setresgid(0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f000013b000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000001180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="d800000000000000f9fffffff7ffffff05000000000000000200000000000000030000000000000002000000000000000500511c5a9f39d06f6841b3180100040002000200000000000000090000000000000000000000000000975b611b000000000003000000000000000000000000000000ffffff7f5700000003", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="040000000300000000000000000000000000200037050000000000002b000000090000003a2d285cc980000000c30000f3397dd86d4d928d24d3a461b60245898556c60000000000002b133b0000000000000000"], 0x0, 0x0, 0x0}) getdents64(r8, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="10"], 0x0, 0x0, 0x0, 0x0}) getdents64(r8, 0x0, 0x3705) write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) 4.573271063s ago: executing program 2 (id=2132): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000040)=0x5, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unshare(0x22020600) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00'], 0x20}], 0x1}, 0x0) 4.419910277s ago: executing program 2 (id=2133): futex(&(0x7f000000cffc)=0x1, 0xd, 0x4, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)={0x2, 0x2, 0x7fffffffffffffff, 0x3}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b", 0x4ef6f231559086f6}], 0x1}}], 0x1, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x5a9, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0xffffffffffffffff, 0x32a, 0x2, 0xffffffff, 0x100000004, 0xffe, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) 4.107732212s ago: executing program 3 (id=2136): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000080)='+\x00', 0x2, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000000c0)=0x1d, 0x4) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x1c}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40040) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="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", 0x1000, 0x4, &(0x7f0000001200)={0xa, 0x4e21, 0x0, @private2, 0xffffff99}, 0x1c) mkdirat(0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', 0x8) r1 = syz_open_dev$sg(&(0x7f0000001280), 0x7fffffffffffffff, 0x20100) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000012c0)) pipe2(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001500)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xc, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x4}, @float={0x1, 0x0, 0x0, 0x10, 0x4}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x0, 0x6c, 0x2}]}, {0x0, [0x30, 0x61, 0x61, 0x30, 0x2e, 0x5f, 0x61, 0x0, 0x5f, 0x30]}}, &(0x7f00000015c0)=""/182, 0x50, 0xb6, 0x0, 0x9}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0x20, &(0x7f0000001840)={&(0x7f0000001700)=""/235, 0xeb, 0x0, &(0x7f0000001800)=""/10, 0xa}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x17, 0x18, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}, @jmp={0x5, 0x1, 0x0, 0x7, 0x7, 0x50, 0x1}, @jmp={0x5, 0x1, 0x0, 0x5, 0x8, 0x2, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc4b, 0x0, 0x0, 0x0, 0x5}, @ldst={0x3, 0x1, 0x1, 0x6, 0x2, 0x30, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001400)='syzkaller\x00', 0x2, 0x5a, &(0x7f0000001440)=""/90, 0x41100, 0x14, '\x00', r4, @fallback=0x2e, r5, 0x8, &(0x7f00000016c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x6, &(0x7f0000001900), &(0x7f0000001940)=[{0x5, 0x1, 0xd, 0x8}, {0x3, 0x4, 0x9, 0x1}, {0x4, 0x2, 0x6, 0x9}, {0x0, 0x5, 0x0, 0xc}, {0x3, 0x1, 0x8, 0xb}, {0x3, 0x2, 0xf, 0xc}]}, 0x94) r8 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r8, 0xb, &(0x7f0000001a80)=""/52) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x18, 0x12, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000001b80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', r4, 0x0, r3, 0x8, &(0x7f0000001bc0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001c00)={0x4, 0x6, 0x0, 0x46ba}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001c40)=[r7, r2, r2, r7, r7, r2, r2, r3, r2, r3], &(0x7f0000001c80)=[{0x0, 0x1, 0x8, 0x9}, {0x1, 0x1, 0x1, 0xa}, {0x5, 0x4, 0x8, 0xa}], 0x10, 0x7eb6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)={@cgroup=r7, r9, 0x1b, 0x8, 0x0, @void, @value=r7}, 0x20) setxattr$trusted_overlay_upper(&(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00), &(0x7f0000001e40)={0x0, 0xfb, 0x6a, 0x1, 0x4, "5dc829ebe36435039ae6aafe05b935f4", "cb642659dc9f4591f09c3110cdae1944d28b27902432401be4ad966e90833f284eab313ce66f9cd07a16aa96922e9bd5578c5218aec87d2c14f278259530af294a9d40ee6fd4375e8e0571f5a5f4823b5236527d92"}, 0x6a, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000001ec0)={0x0, 0x40}, &(0x7f0000001f00)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000001f40)={r10, 0x8}, &(0x7f0000001f80)=0x8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000002700)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002040)={0x678, r11, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x61}}}}, [@NL80211_ATTR_TID_CONFIG={0x658, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x260, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x234, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x120, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0xc782, 0x2d7, 0x9, 0x9, 0x2, 0x8, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x30, 0x0, 0x3, 0xf097, 0x1ff, 0x74b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x6865, 0x7, 0xe535, 0x4, 0x4, 0xcb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa40e, 0xd, 0x1c00, 0x8000, 0x2, 0x9, 0x9479, 0x7f]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x1}, {0x0, 0x2}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x1}, {0x4, 0xa}, {0x4}, {0x0, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x3}, {0x5}, {0x7, 0x3}, {0x5}, {0x5, 0x4}, {0x4, 0x2}, {0x4, 0x5}, {0x3, 0x2}, {0x5, 0x5}, {0x7, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x5, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x9}, {0x3, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x5, 0x5}, {0x5}, {0x2, 0x5}, {0x1, 0x4}, {0x2, 0x4}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x6, 0x6}, {0x7, 0xa}, {0x4, 0x8}, {0x2, 0x3}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x7}, {0x7, 0x3}, {0x4, 0x3}, {0x2, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x6, 0x1}, {0x4, 0x7}, {0x4, 0x1}, {0x4, 0x3}, {0x4, 0x7}, {0x2, 0x3}, {0x6, 0x7}, {0x3, 0x6}, {0x2, 0x8}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x60, 0x18, 0x36, 0x9, 0x2, 0x36, 0x2, 0x48, 0x6, 0x4, 0x1b]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x1}, {0x6, 0x8}, {0x7, 0x7}, {0x6, 0xa}, {0x0, 0x7}, {0x5, 0x2}, {0x2, 0x3}, {0x6, 0x9}, {0x7, 0x9}, {0x2, 0x3}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x3}, {0x5, 0x8}, {0x7, 0x3}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x6}, {0x4, 0x6}, {0x2, 0x6}, {0x7, 0x2}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x6, 0x3}, {0x5, 0x2}, {0x1, 0xa}, {0x6, 0x3}, {0x6, 0x6}, {0x7}, {0x2, 0x8}, {0x7, 0x5}, {0x4, 0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x8}, {0x5, 0x9}, {0x4, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x8}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x5, 0x7}, {0x3, 0x1e}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x691, 0x7ff, 0x3, 0x81, 0xbd3c, 0x2, 0x10, 0x6b0]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a, 0x101, 0x33, 0x8000, 0x4, 0x2, 0x8001, 0x7]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x9, 0x7, 0x56c, 0x8, 0x0, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x2}, {0x2, 0x8}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0xa}, {0x4, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x0, 0x3}, {0x1, 0xa}, {0x5, 0xa}, {0x6, 0x1}, {0x7, 0x6}, {0x4, 0x9}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x7, 0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x7, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x4, 0x4}, {0x6, 0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0x3}, {0x0, 0x3}, {0x6}, {0x5, 0x2}, {0x0, 0x4}, {0x5}, {0x0, 0x4}, {0x3, 0x2}, {0x0, 0xa}, {0x7, 0x9}, {0x5, 0x9}, {0x6, 0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x1}, {0x6, 0x7}, {0x3, 0x3}, {0x4, 0x3}, {0x3}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0x4}, {0x7, 0x2}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x2}, {0x4, 0x9}, {0x5, 0x6}, {0x4, 0x8}, {0x1, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x3}, {0x0, 0x6}, {0x4, 0x6}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x2, 0x9}, {0x2, 0x6}, {0x5}, {0x5, 0x4}, {0x1, 0x4}, {0x5, 0x8}, {0x7, 0x5}, {0x1, 0x2}, {0x6, 0xa}, {0x7, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {}, {0x7, 0x1}, {0x2, 0xa}, {0x3, 0x3}, {0x2, 0x7}, {0x3, 0x1}, {0x3, 0x8}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x4, 0x8}, {0x0, 0x6}, {0x2}, {0x1, 0x9}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x9}, {0x2, 0x5}, {0x5, 0x4}, {0x1, 0x5}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x400, 0x4, 0x5, 0x40, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x19}, {0x5, 0x2}, {0x5, 0x9}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9e, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x1}, {0x5, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x4, 0x2}, {0x7, 0x5}, {0x2, 0x3}, {0x5, 0x9}, {0x2, 0x2}, {0x2, 0x6}, {0x6, 0x6}, {0x7, 0x7}, {0x1, 0x8}, {0x4, 0x2}, {0x1, 0x1}, {0x3, 0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x4}, {0x6}, {0x7, 0x8}, {0x5, 0xa}, {0x7, 0x8}, {0x4, 0x8}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x3, 0x5}, {0x4, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {0x6, 0x2}, {0x6, 0x9}, {0x6, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x6}, {0x6, 0x6}, {}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xad58, 0xfffc, 0x9, 0x2, 0x7, 0xe, 0x9, 0x6]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x60, 0x4, 0xc, 0x7, 0x1b, 0x24, 0x18, 0x5, 0x0, 0x36, 0xc, 0x2, 0xc, 0x24, 0x6, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x9, 0x6, 0x2, 0x18, 0x401d7d68a22da675, 0x1, 0xb, 0x6c, 0x18, 0x2, 0x60, 0x2, 0x1, 0x18, 0x18, 0x4, 0x2, 0x6, 0x3, 0x16, 0x24, 0x24, 0x1, 0x24, 0x60, 0x24, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa3d, 0x5, 0x1, 0x7fff, 0x5, 0x1, 0xd0d, 0x9]}}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x0, 0x81, 0xff81, 0x8, 0x8, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x60, 0x3, 0xdda3c3f8c478a333, 0x24, 0xc, 0x2, 0x16, 0x48, 0x0, 0xc, 0x12, 0x5, 0xb, 0x5c, 0x7, 0x24, 0x30, 0xb, 0x1, 0x30, 0x60, 0x1, 0x18, 0xc, 0x1, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xff, 0x8000, 0x6, 0x7, 0x1, 0x2, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x6, 0x7628, 0x9, 0x9, 0x5, 0x6, 0x4000]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x12, 0x6, 0x12, 0x5, 0x30, 0x12, 0x6c, 0x24, 0x48, 0x6c, 0x5, 0x24, 0x48, 0x60, 0x1, 0x9, 0x6, 0x1, 0x1, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11, 0xf1, 0x4, 0x3, 0x0, 0x1, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x6}, {0x0, 0x5}, {0x7}, {0x3, 0x4}, {0x3, 0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x4, 0x9}, {0x0, 0x9}, {0x0, 0xa}, {0x3, 0x9}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x1, 0x454, 0xf, 0x4eb0, 0x5, 0xe]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x18, 0x24, 0xb, 0x3, 0x18, 0xb]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x5}, {0x2, 0x1f}, {0x6, 0xa}, {0x0, 0x9}, {0x6, 0x3}, {0x1, 0x5}, {0x6}, {0x6, 0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x2, 0x4}, {0x1, 0x5}, {0x4, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {}, {0x5, 0xa}, {0x4}, {0x5, 0x3}, {0x0, 0x8}, {0x2, 0x4}, {0x5, 0x6}, {0x4, 0x9}, {0x3, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x4, 0x7}, {}, {0x7, 0x2}, {0x3, 0x6}, {0x3}, {0x0, 0x2}, {0x0, 0x9}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x3}, {0x6, 0x8}, {0x2, 0x3}, {0x0, 0x2}, {0x6, 0x1}, {0x6, 0x9}, {0x7, 0xa}, {0x1, 0x4}, {0x3, 0x9}, {0x1, 0x9}, {0x4, 0x8}, {0x4, 0x6}, {0x6, 0x2}, {0x6, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x5, 0x8}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x6, 0x36, 0xb, 0x4, 0x9, 0x36, 0x24, 0x12, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x3}, {0x3, 0x3}, {0x5}, {0x5, 0x4}, {0x7, 0x2}, {0x7, 0x1}, {0x6, 0x8}, {0x2, 0x1c}, {0x5, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0x7}, {0x3, 0x8}, {0x3, 0x4}, {0x5, 0x3}, {0x6, 0x4}, {0x7, 0x5}, {0x6, 0x10}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x9}, {0x0, 0x1}, {0x7, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x1}, {0x7, 0x8}, {0x2, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {0x2}, {0x5, 0x5}, {0x2}, {0x4, 0x5}, {0x3, 0x1}, {0x7, 0x3}, {0x3, 0x5}, {0x6, 0x2}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x6}, {0x6, 0x3}, {0x3, 0xa}, {0x7, 0x2}, {0x0, 0xa}, {0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x0, 0x7}, {0x4, 0x6}, {0x2, 0x6}, {0x3, 0xa}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0x1}, {0x7, 0x1}, {0x5, 0x6}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x8}, {0x3, 0x4}, {0x3, 0x2}, {0x6, 0x8}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0xa}, {0x2}, {0x2, 0xa}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x9}, {0x2, 0xa}, {0x1, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x3, 0x5}, {}, {0x3, 0xa}, {}, {0x3, 0xa}, {0x6, 0x3}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x9}, {0x0, 0x2}, {0x6}, {0x6, 0x4}, {0x6, 0x3}, {0x6, 0x5}, {0x1, 0x5}, {0x2}, {0x7, 0x8}, {0x6, 0x1}, {0x6, 0x3}, {0x0, 0x7}, {0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x377, 0xfce, 0x2, 0x7ff, 0x1, 0xbfc6, 0x0, 0xb75]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x9, 0x3, 0x3, 0x0, 0x7, 0x9, 0x4f0a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3a, 0x5, 0x5, 0x4f8e, 0x1, 0x6, 0x13]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x6, 0x1, 0x0, 0x18, 0x5, 0xc, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x3, 0x48a, 0x1, 0xfff, 0xfff9, 0x9, 0x9]}}]}]}]}]}]}, 0x678}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000002740)=0x10000) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000002780)=0x1) msgsnd(r8, &(0x7f00000027c0)={0x3, "3a4c7310ee4e59008e167843250ded38174312185a42f11c7a875794c219feb599bedf8ca393fb5dcf397320aef9ffe3c01cefd66cfd4662349dace92ce9cfd8b9ca0ec0c6d6cc91ca14b6162908846122c030f3b9f97790b1a0daa0925d78d8f87952d0d9dabd1e4bbff997"}, 0x74, 0x0) r12 = gettid() sched_setattr(r12, &(0x7f0000002840)={0x38, 0x0, 0x40, 0x8, 0x6, 0x1, 0x479e, 0xc, 0x3, 0xfffffff9}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002880), 0x242000, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) 3.62797027s ago: executing program 3 (id=2137): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x8001, 0x8, 0xfffffffc}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000644000/0x1000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, r2}, 0x94) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022020000002a8f07cf9cb2a370774402585683da241ca316c117074c9d1a69d30f8068e869d150924da0dfb69c560f12d9"], 0x0}, 0x0) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="20176a0004005e6424818327b2369deca65eb27b27786cdedac1c34d33d99d9c9ea66570471b37aea82bf844a0f03811b46e8281bdf291b1afd3f49201802b33c7aec1a69cd5b7cce8598962c1e4d56f6c30154625b5e6d869f8e527c0ceefe4f7cd91464085cdd1f0a0988da9ff5967"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="1a29ae27b24304000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) 3.361918164s ago: executing program 2 (id=2138): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xdc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@lifetime_val={0x24, 0x9, {0x0, 0xb6, 0x0, 0x3}}]}, 0xdc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES64], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2000c004) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r10, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f0514e3e06069877968eb874a1c1adc92e760670e42b6cccd2fe0a5f9c543a44b382befc422d4486416b6fabe2f11944a3f08cded6fad9e3304a202d1c58841a6ab78b28a4162db2671d9ea74ee6f3b33a282f42abc911e3245531a34f5567cfcaa1cf762677c9f61d3aa2c4d76210edf440bf53e816d008ab2ea29cf42de9b88442d6b2eec4fbf23f7d23eaab316335dfc2dc10f9148df0b83d92c3a94fb0b49365af5ba599a1ea8e6fc7aea8df9208795cbbdf0af04f5f08fc828cb347a6e9daddbe514675b31e5134c7dfbb060dfc632ad82141ddea4e77e6c63c1843ca6fc820558b7355bae86e106c2be9c9b500c5134ab62444a8423d596bfe0e3b2df47dabf5abe271ae947f4878132915332e4fcc5b81ad6f12570de44f0fdd6a96397acebf95421c88ff274365be770edd1bd1f69bc2d2883fa70fa68828bddcb98f90b0b77e28f9c4726e5b0c52fa6f30a8d57321dfd2f2678bbc6511f39019f49d7dde6f19adeac78e4064b8288f5b4ac7d8ca35f7f70dfb376f5f3af98f02e76e57e21a00bac6", 0x3e7}], 0x1}}], 0x1, 0x40) sendto$inet(r10, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0xfdff, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0x9, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xfffffffffffffe7d}, &(0x7f00000006c0), 0x1}}], 0x48}, 0x0) 3.237195885s ago: executing program 0 (id=2139): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x82}, 0x1c) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x782) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r0) (async) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000001200)=[{0x0}], 0x1}, 0x97}], 0x1, 0x2122, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000580)) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) (async) ioctl$TIOCSLCKTRMIOS(r3, 0x80047437, &(0x7f00000010c0)) (async) pselect6(0x40, &(0x7f00000000c0)={0xc4e0, 0x240000000, 0x6, 0x9, 0x81, 0x8000000000000000, 0x4, 0xd}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3, 0x3, 0x3, 0x1}, &(0x7f0000000280)={0x6, 0x3, 0x2, 0xc, 0xffff, 0x6, 0x4f511df100000, 0x5}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x4]}, 0x8}) dup(r2) (async) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r4, 0x4, 0x2) getdents64(r4, 0xffffffffffffffff, 0x43) (async) r5 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) (async, rerun: 32) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1]}}) (rerun: 32) 2.695894446s ago: executing program 5 (id=2140): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYRES32], 0x10) 2.695400773s ago: executing program 3 (id=2141): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x4, 0xc5a}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x44, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f00000007c0), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x20, &(0x7f0000000b80)={&(0x7f0000000a40)=""/70, 0x46, 0x0, &(0x7f0000000ac0)=""/164, 0xa4}}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000001980)={0xbe, 0x0, 0x80001}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000034d564b"]) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x2f, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @ldst={0x1, 0x0, 0x6, 0xa, 0x8, 0xfffffffffffffff0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x53d0}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0xad, &(0x7f0000000640)=""/173, 0x41000, 0x40, '\x00', r4, @fallback=0x21, r5, 0x8, &(0x7f00000009c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0x3, 0xe12, 0x3c}, 0x10, r6, r10, 0x1, &(0x7f0000000c00)=[0x1], &(0x7f0000000c40)=[{0x5, 0x1, 0xb, 0x6}], 0x10, 0x9}, 0x94) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) r11 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r14 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r14, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r11, 0x46f6, 0x0, 0x0, 0x0, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000180001009a902bbd7000fcdbdf25020000040000c80900110000060015000200000014001680100008800c00018006000100ffff0000d1514067e2152826dee295412fcf350a55c89f247e847d80d0f81a0ab4e3f94971b7786fc9cd5e68f32361cedec5b9b34414835aa79dc4a9798e3b670418da4734c8083a455119ffdfc7585afb3f3276d073677cb75e2c6b1f21c273cf580dff4234bcfb8653fec726fd924187b743"], 0x38}}, 0x0) 2.625944439s ago: executing program 5 (id=2142): rt_sigaction(0x30, &(0x7f0000000180)={&(0x7f0000000080)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x3c]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa, 0x4}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x22020400) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x8397de475a1b5b02) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.545129119s ago: executing program 3 (id=2143): ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400000002000000", @ANYRES32=0x0, @ANYBLOB="01310100220002003c0012800e000100a538ce75727370616e000080280002a0141e050000000000000000000000ffffac141426080004000000050000000c0051000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') close(r0) 2.496002209s ago: executing program 5 (id=2144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) mmap(&(0x7f00001fe000/0x2000)=nil, 0x2000, 0x27fffff, 0x40010, r0, 0xca7f7000) bind$rds(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) fallocate(r1, 0x1, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x5, 0xe, 0x10, 0x5e9}, {0xb, 0x10, 0x8, 0x1}, {0xfff7, 0x0, 0x8, 0xfffffff8}]}, 0x10) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) 2.495630758s ago: executing program 0 (id=2145): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000841000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004"], 0x188}}, 0x0) 2.431743004s ago: executing program 3 (id=2146): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="40000000490001002abd7020ffdbdf250a000000", @ANYRES32=r1, @ANYBLOB="000000000800020003000000140001"], 0x40}, 0x1, 0xba01, 0x0, 0x20008080}, 0x4044) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000100)={0x0, 0xb, 0x8d, "4d418bfd410668af5d78da5b7e8bbcba93b7e87dc0b1c7520262612c65aa0c327080883a2ac67abe5c85df9fc42ab76ff4bd55af593f06903e58603ac870909cd9c001c0cab94b5b4b344a1d871ebe96f04bb4e2a5c5d7bb189956f99439f5a77559ae3a3a6f0200a23173569060ceaadcb0d512098a47ffd2a5a428e2da41677432ff42d59312617f3330c012"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.424363393s ago: executing program 0 (id=2147): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0x0, 0xffeffffe}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r1, &(0x7f0000000300)="5af9", 0x2) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_io_uring_setup(0x6367, &(0x7f0000000340)={0x0, 0x47ea, 0x100, 0x1, 0x24a}, &(0x7f0000002680)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x10, 0x4000, @fd=r0, 0xfffffffffffff616, 0x0, 0x0, 0x2, 0x1, {0x1}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) 2.203993938s ago: executing program 5 (id=2148): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0xfffdfffe, 0x25dfdbfc, {{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e21, 0xffff, 0x2, 0x20, 0x0, 0x6c}, {@in6=@empty, 0x100fe, 0x32}, @in=@empty, {0x8, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x2}, {0x2, 0x0, 0x24a}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 2.044727449s ago: executing program 4 (id=2149): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, r0) socketpair(0x26, 0x5, 0x2, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0xfff, "711cf65998d09ba01233c4601b021d06f376bcdc75d21971706498fad99a57b9"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ppoll(&(0x7f0000000700)=[{r5, 0x229d}], 0x1, 0x0, 0x0, 0x0) close(0x3) getsockname$tipc(r1, &(0x7f0000000140), &(0x7f0000000240)=0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x4, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0x2, 0x2, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x68}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800457b19499cad9568ff7f00000000000000000c0002"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r9], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.662545931s ago: executing program 0 (id=2150): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000007300)={{@my=0x0, 0xf45}, 0x1, 0x2, 0xd6}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x20) close(r3) r4 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r5, &(0x7f0000006800)="10", 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x77359400}}, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000480)) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x5a, 0x29, 0x2e, 0x8, 0xc10, 0x0, 0x95a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x4, 0x0, 0xf1, 0x78, 0xa9, 0x5b}}]}}]}}, 0x0) 1.61585968s ago: executing program 4 (id=2151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0xd, 0x224942) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000005c0)=""/242) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x11, 0x1, 0x2, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x37303250}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xd, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x7, 0x7f}}) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbabbbbb0180c200000086dd6002adf7"], 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000"]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x1, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x3, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400e5ff23000103000000008000000011000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) fallocate(0xffffffffffffffff, 0x0, 0xffffffff, 0x6c) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 1.093793392s ago: executing program 5 (id=2152): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100626f6e64000000003c000280080014000000000008000700", @ANYRES32=0x0, @ANYBLOB="08001e00", @ANYRES32], 0x6c}, 0x1, 0xba01}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x4}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x7f, @loopback, 0x8}}, 0x4, 0x7}, 0x90) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000004c0)=0x800, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"]) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000000)={0x0, 0xe8f}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmmsg$sock(r5, &(0x7f0000001c80)=[{{&(0x7f0000000500)=@can={0x1d, r9}, 0x80, &(0x7f0000000900)=[{&(0x7f00000005c0)="c0a2ae0fc870c88fc1cd80fbb00b5e5abc85528f488608003a0eb7bbb9d88885a2171f2ebd62446c8f64eab1bb60e18bd674ccf89e9824c9c60e4d57625c6d41de0175d824dbc58064150e9c95afa200f3bdbaa8cd6965645642e6d1a5ba506bea6aac1a3e8e523de2bd444f1947895b29cac9e7558d5806a89fb5ae521e56227a3297ea810c70cd413d37823f88f33d900fab8104b33ecd6605b0a2de96868f7caf6206c835", 0xa6}, {&(0x7f00000006c0)="85e53874ed7779ab9753de87ac3ec6706c561bab09a44897db63da1a0bbd0e57c439b12a8cf6f9084a87cff66536a20132092b5b0003f9d579b340a7feb522d2fe35ddff456be8a90227b219b779e83382148b0ade1b56e8cff0a8d4b4b3d7f99493040ba9b34599fc7a341aa1780611eb87117a0c39d7b4f5efd7567773c3343545f791b630b65b33393327a2d2f43beb130d368dfdca760292d921b63f912438a8fa2500030507fe", 0xa9}, {&(0x7f0000000780)="af694c5e3b8d36c50e3241156f1069187fa865c1b36ce56c768a65055ab656d2c906279c0dc32e9809b1df8aaaf6bfc594bba9ede4aac354e29a0c518a9ef5adc34ad28dedde99a8c592e5ce36173452860e507a3afd73dab72abbd6f58a23403b05b0a6075f35959ae5b0de54d46e16b993032171273dce4edb46d54d3efb0fa58f7d60c13228608711ba3d5dbfcc79d0c79e567fe713671346813ba8a4015d2a12", 0xa2}, {&(0x7f0000000840)="99d5a8023d16fd2cc6ebe87fd694e8a84d2662ca761f7ec3beae9d691889bd5512be139e8811b728a5ce23985456956625a9b9aa26fbe1dd446db803881223f361a0cfa864c9b95b306379757c172597e9fc1c85c1b6692b712ba26ee878b4b1742609b6a7c3a8b60d2e306b3f2b1ade363d412369efc767fe59ef2080e374796e25bdf4fc2c7d248874b91635958b87be7f8f79", 0x94}], 0x4, &(0x7f0000000940)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xb}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xea}}], 0x78}}, {{&(0x7f00000009c0)=@phonet={0x23, 0x2, 0xa7, 0xfc}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000a40)="6eea56787c1ff60e7ba73c29fc6fc03ba3d71f7a5c247155786d38bf088072d1ba984472b154c5a1c9e9dfc380b79e2ea30622c6a9eea2c2319daf6c365413bb9f9ccd0ec21f7be9ad500a4e97264647003fc4f83007120dfae29ed8ba5b776f4df7073d4a0a98905b3ff89b34593b55889e9281a9bca3fb75951deb6c6d255b1159d161e53a910dcbe00d4a1af35eb09a3a22f3da37dca98559d345df5545e10c47b680d0bcfb41bf22eb28d0a9725017a1f0b14a7bfa1de4b63f54d063e4b418ba7100dbeeaa585fb658b0168b0b71819f94f40d8d440b8ae630c34a977b83ba5f35600e24c7", 0xe7}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="2767b253553695ee7925b2a64a85f099e7b40ce96c34517fae55876b525be92ae4a3e89af7e796da9e40f48027fe6a6a287a2ad870e7aa154cd12f797e5a380aca1b5b3282dbd2148f870cf8f18d5bb7", 0x50}], 0x3, &(0x7f0000001c00)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x9a}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x60}}], 0x2, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0xf502, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pim6reg1\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6b97, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 826.945961ms ago: executing program 4 (id=2153): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x80, 0x1, 0x101, 0x6, 0x13, "4ea543a5759569ad87228af37f474f5c04b4cc"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delrule={0x2c, 0x21, 0x400, 0x70bd2c, 0x25dfdbfe, {0x2, 0x0, 0x20, 0x0, 0x2d, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x5) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000180)) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x0, 0x9, 0x83, {0x83, 0x30, "60dde838a0dfbe3692703c0c694b89da17de3e0a5f604a6ba3ebd05deee34caf81e185710584f43e071c94dbc0e68a6a5a78ee9a4dac33c9fa7dee46127abbec9f4248e27fb061f5173141135e1b04f80a21fd4ab82bb49a4ceb4364d6e718881c81893dafe6b2ad3b7cb80a31b6dc56f9a33db78fc8e26efde4751592de60b2aa"}}, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x0, 0x17, 0xa8, "7a299e901fbe6a9d64300e3620a6a901c7e1b214ccf800315ce5374034ee592dc9ca4e5feab69f728b93aaa667747a778b7e013df6399c93d57cb119aa28a113274a6d37e71022de0af972ec28ecbdb89b239a40bb5f241064b6aa94fa32dfa47159f6369f1d5cbbbba128894f43860e7a4afabb46c649de4f0fc2bcf56b246ae8deb1f22ce1392cf01e00122f93e8c6d83ca21c1e95f4d3d2a7f6bc08ccd598251bacabda8ef004"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x55}, &(0x7f0000000440)={0x20, 0x81, 0x1, 'W'}, &(0x7f0000000480)={0x20, 0x82, 0x2, "b3c6"}, &(0x7f00000004c0)={0x20, 0x83, 0x2, "dda6"}, &(0x7f0000000500)={0x20, 0x84, 0x1, "f6"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "f71979"}}) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000600)='veno', 0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000640), 0x10401, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000680)=0x9baa, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000680)=0x9baa, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f00000006c0)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x4, r1}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f00000006c0)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x4, r1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r2}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$UHID_CREATE2(r3, &(0x7f0000000800)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xcb, 0x9, 0x9, 0x9, 0x7fff, 0x477, "5578bd9e9945b9424b644737f907cf0460303e88e39898147fbb7368ece86a0dbb33cf1391e19e7ebbab5ef4307edfd3a4b0b0344260922beab8dfdb14f4416e1d7005093c5e3759f5d13e0a7e04a521bfab9f879289568555e0bcdf8f999531fc39eb66041ea6dc4ee2f3b01e5ed07c6c32655679c301a3df2bbfb8c42dd8d859c99d1c415133dc039c7a8135fa80a7a15feb774e02490bf7de9c1176cf8b4fb44fb4b1a77ed4c3f9ef37bc673cbe7647d0020513ec651f0a40b44b8a6d4db000c7c1d88cc07c8edfb0a3"}}, 0x1e3) r4 = getpid() ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f0000000a00), 0x1004) (async) ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f0000000a00), 0x1004) syz_io_uring_setup(0x5364, &(0x7f0000000a40)={0x0, 0xde8b, 0x20000, 0x3, 0x304, 0x0, r2}, &(0x7f0000000ac0), &(0x7f0000000b00)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) eventfd(0x65) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000b80)=0x16) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000bc0)) (async) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000bc0)) sendto$inet(r2, &(0x7f0000000c00)="5fff73fd55b5b08de0320854e8a7ce26ea824ed01dce342fcba14b8f01556722c917f74a87157bd311b1308d6464330aa1f996e29798b2fd66ae8135a5aef2efb9c9ec2cc2cc083b50d307b3e5a3ca1f5c49e59e96af6191f36948eddc037b741421f15c7aaa40c30cb3cccab1d13fe97c9b13dfbf81d4219674e1e590dd17841ecd62a8852e9fff1295daa552f7a37d22f028b01c218bab3cd4b42ab98768152e791b5b47653d59e147b64be8684bb600a8d9c4bc7fee1150b0d7563d55405d2e138cbeab2e533a743bda5625cb06d39645bba0698385e446daed2ed4e0ae7262b9", 0xe2, 0x4012, 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000d00)={0x7, 0x15, 0x1}, 0x7) (async) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000d00)={0x7, 0x15, 0x1}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000d80)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000d40)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000dc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, {0xa, 0x4e24, 0x1000, @private2, 0x8}, r6, 0x3}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000dc0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, {0xa, 0x4e24, 0x1000, @private2, 0x8}, r6, 0x3}}, 0x48) socket$inet(0x2, 0x80000, 0x8) ioctl$KVM_CAP_VM_TYPES(r2, 0x4068aea3, &(0x7f0000000e40)={0xeb, 0x0, 0xa}) (async) ioctl$KVM_CAP_VM_TYPES(r2, 0x4068aea3, &(0x7f0000000e40)={0xeb, 0x0, 0xa}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x37) epoll_create1(0x80000) 710.4847ms ago: executing program 5 (id=2154): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r3, r3, 0x0, 0x7a680000) read$FUSE(r3, &(0x7f0000000580)={0x2020}, 0x2020) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x5) setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, &(0x7f00000000c0)=0x5e, 0x4) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xfdff) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e010000090581"], 0x0) 171.560597ms ago: executing program 2 (id=2155): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) eventfd(0xa) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x80047437, &(0x7f00000010c0)) (async, rerun: 32) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async, rerun: 32) r2 = shmget$private(0x0, 0x1000, 0x4, &(0x7f00008ef000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) 0s ago: executing program 4 (id=2156): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000891}, 0x20040040) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x38, &(0x7f0000000080)=ANY=[@ANYBLOB="120120021bd459088904b5e02aae010203010902260001"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) sync_file_range(0xffffffffffffffff, 0x3, 0xfffffffffffffeff, 0x3) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x4, 0x80, 0x0, @vifc_lcl_addr=@rand_addr=0x640100fd, @local}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000140)}) kernel console output (not intermixed with test programs): syz [ 455.905881][T10303] usb 1-1: Manufacturer: syz [ 455.910678][T10303] usb 1-1: SerialNumber: syz [ 455.924902][T12798] vti0: entered allmulticast mode [ 455.927823][T10303] usb 1-1: config 0 descriptor?? [ 455.942655][T10303] rtl8150 1-1:0.37: couldn't find required endpoints [ 455.958073][T10303] rtl8150 1-1:0.37: probe with driver rtl8150 failed with error -5 [ 456.287912][T12808] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1732'. [ 456.381911][T12810] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 456.443598][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'. [ 456.454386][T12812] 8021q: VLANs not supported on ip6tnl0 [ 456.662426][T10303] usb 1-1: USB disconnect, device number 120 [ 456.836654][T12817] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1736'. [ 457.148823][ T1219] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 457.299727][ T1219] usb 6-1: Using ep0 maxpacket: 32 [ 457.327061][ T1219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.367224][ T1219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.421620][ T1219] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 457.475860][ T1219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.515531][ T1219] usb 6-1: config 0 descriptor?? [ 457.546495][ T1219] hub 6-1:0.0: USB hub found [ 457.579899][T12830] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1740'. [ 457.614912][T12830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.010206][T12839] FAULT_INJECTION: forcing a failure. [ 458.010206][T12839] name failslab, interval 1, probability 0, space 0, times 0 [ 458.121460][T12839] CPU: 1 UID: 0 PID: 12839 Comm: syz.0.1742 Not tainted syzkaller #0 PREEMPT(full) [ 458.121486][T12839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 458.121497][T12839] Call Trace: [ 458.121505][T12839] [ 458.121514][T12839] dump_stack_lvl+0x189/0x250 [ 458.121539][T12839] ? __pfx____ratelimit+0x10/0x10 [ 458.121567][T12839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.121586][T12839] ? __pfx__printk+0x10/0x10 [ 458.121608][T12839] ? __pfx___might_resched+0x10/0x10 [ 458.121629][T12839] ? fs_reclaim_acquire+0x7d/0x100 [ 458.121663][T12839] should_fail_ex+0x414/0x560 [ 458.121695][T12839] should_failslab+0xa8/0x100 [ 458.121719][T12839] kmem_cache_alloc_node_noprof+0x77/0x710 [ 458.121739][T12839] ? __alloc_skb+0x112/0x2d0 [ 458.121768][T12839] __alloc_skb+0x112/0x2d0 [ 458.121795][T12839] tipc_msg_build+0x13b/0xcf0 [ 458.121820][T12839] ? net_generic+0x1e/0x240 [ 458.121845][T12839] ? __pfx_tipc_msg_build+0x10/0x10 [ 458.121869][T12839] ? net_generic+0x1e/0x240 [ 458.121891][T12839] ? net_generic+0x1e/0x240 [ 458.121917][T12839] ? tipc_group_bc_cong+0x15f/0x210 [ 458.121941][T12839] tipc_send_group_bcast+0x76c/0xa70 [ 458.121979][T12839] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 458.122011][T12839] ? __pfx_woken_wake_function+0x10/0x10 [ 458.122046][T12839] __tipc_sendmsg+0x2d7/0x2960 [ 458.122062][T12839] ? process_measurement+0x72d/0x1a40 [ 458.122079][T12839] ? __pfx___tipc_sendmsg+0x10/0x10 [ 458.122095][T12839] ? aa_label_sk_perm+0x4cd/0x630 [ 458.122122][T12839] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 458.122167][T12839] ? __lock_acquire+0xab9/0xd20 [ 458.122194][T12839] ? __local_bh_enable_ip+0x12d/0x1c0 [ 458.122208][T12839] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.122219][T12839] ? __local_bh_enable_ip+0x12d/0x1c0 [ 458.122232][T12839] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 458.122256][T12839] tipc_sendmsg+0x55/0x70 [ 458.122274][T12839] ? __pfx_tipc_sendmsg+0x10/0x10 [ 458.122293][T12839] __sock_sendmsg+0x21c/0x270 [ 458.122318][T12839] ____sys_sendmsg+0x52d/0x830 [ 458.122344][T12839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.122363][T12839] ? import_iovec+0x74/0xa0 [ 458.122378][T12839] ___sys_sendmsg+0x21f/0x2a0 [ 458.122389][T12839] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.122450][T12839] ? __fget_files+0x2a/0x420 [ 458.122471][T12839] ? __fget_files+0x3a0/0x420 [ 458.122492][T12839] __sys_sendmmsg+0x227/0x430 [ 458.122505][T12839] ? __pfx___sys_sendmmsg+0x10/0x10 [ 458.122520][T12839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 458.122542][T12839] ? ksys_write+0x22a/0x250 [ 458.122564][T12839] ? __pfx_ksys_write+0x10/0x10 [ 458.122588][T12839] __x64_sys_sendmmsg+0xa0/0xc0 [ 458.122608][T12839] do_syscall_64+0xfa/0xfa0 [ 458.122624][T12839] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.122636][T12839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.122651][T12839] ? clear_bhb_loop+0x60/0xb0 [ 458.122663][T12839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.122673][T12839] RIP: 0033:0x7fb3f798eec9 [ 458.122684][T12839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.122697][T12839] RSP: 002b:00007fb3f8783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 458.122717][T12839] RAX: ffffffffffffffda RBX: 00007fb3f7be6180 RCX: 00007fb3f798eec9 [ 458.122732][T12839] RDX: 04000000000000e4 RSI: 0000200000003240 RDI: 000000000000000b [ 458.122746][T12839] RBP: 00007fb3f8783090 R08: 0000000000000000 R09: 0000000000000000 [ 458.122758][T12839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.122770][T12839] R13: 00007fb3f7be6218 R14: 00007fb3f7be6180 R15: 00007fb3f7d0fa28 [ 458.122789][T12839] [ 458.928925][T10303] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 459.109133][T10303] usb 4-1: Using ep0 maxpacket: 8 [ 459.117216][T10303] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.129096][T10303] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 459.210501][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 459.350684][ T1219] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 459.469998][T12850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1744'. [ 459.743566][T12854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.769804][T12854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.125949][T10303] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.158753][T10303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.167014][T10303] usb 4-1: Product: syz [ 460.171475][T10303] usb 4-1: Manufacturer: syz [ 460.177156][T10303] usb 4-1: SerialNumber: syz [ 460.343921][T10303] cdc_ncm 4-1:1.0: bind() failure [ 460.409969][T10303] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 460.428910][T10303] cdc_ncm 4-1:1.1: bind() failure [ 460.854840][T10303] usb 4-1: USB disconnect, device number 107 [ 462.036599][ T1219] usbhid 6-1:0.0: can't add hid device: -71 [ 462.045573][ T1219] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 462.089994][ T1219] usb 6-1: USB disconnect, device number 99 [ 462.135023][T12883] CUSE: info not properly terminated [ 462.211356][T12887] tipc: Started in network mode [ 462.216296][T12887] tipc: Node identity 080211000001, cluster identity 4711 [ 462.238772][T12887] tipc: Enabled bearer , priority 0 [ 462.516320][T12889] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 462.592476][T12889] bond3 (unregistering): Released all slaves [ 463.148894][T10304] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 463.238084][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1760'. [ 463.300942][T10304] usb 5-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 463.315948][T10304] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.381950][ T1219] tipc: Node number set to 134418688 [ 463.557004][T10304] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.712278][T10304] usb 5-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 463.726178][T10304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 463.733383][T10304] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 463.742973][T10304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.778335][T10304] usb 5-1: config 0 descriptor?? [ 463.796318][T10304] hub 5-1:0.0: USB hub found [ 464.095376][T10304] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 464.153733][T10304] usb 5-1: USB disconnect, device number 96 [ 464.479450][ T1219] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 464.651509][ T1219] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 464.738064][ T1219] usb 1-1: config 0 interface 0 has no altsetting 0 [ 464.758571][ T1219] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 464.779244][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 464.796903][ T1219] usb 1-1: Product: syz [ 464.804918][ T1219] usb 1-1: Manufacturer: syz [ 464.825204][ T1219] usb 1-1: SerialNumber: syz [ 464.868569][ T1219] usb 1-1: config 0 descriptor?? [ 464.880345][ T1219] usb 1-1: selecting invalid altsetting 0 [ 465.046617][T12943] CUSE: info not properly terminated [ 465.800000][ T1219] usb 1-1: USB disconnect, device number 121 [ 466.274710][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 466.366679][T12961] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 466.542778][T10304] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 466.710808][T10304] usb 4-1: config 0 has no interfaces? [ 466.716334][T10304] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 466.728363][T10304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.736832][ T1219] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 466.772987][T12968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.782574][T10304] usb 4-1: config 0 descriptor?? [ 466.807992][T12968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.893081][ T1219] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 466.904537][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.914939][ T1219] usb 5-1: Product: syz [ 466.921556][ T1219] usb 5-1: Manufacturer: syz [ 466.933460][ T1219] usb 5-1: SerialNumber: syz [ 466.950824][ T1219] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 466.965900][T10304] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 466.999169][T10303] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 467.007664][T12963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.008037][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 467.009312][T12963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.099459][ T6431] usb 4-1: USB disconnect, device number 108 [ 467.153017][T10303] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 467.153036][T10303] usb 6-1: config 0 has no interface number 0 [ 467.153062][T10303] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 467.153222][T10303] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 467.153236][T10303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.155198][T10303] usb 6-1: config 0 descriptor?? [ 467.160902][T10303] ttusbir 6-1:0.83: cannot find expected altsetting [ 467.366489][ T813] usb 6-1: USB disconnect, device number 100 [ 468.099646][T10304] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 468.131576][ T813] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 468.145523][T10304] ath9k_htc: Failed to initialize the device [ 468.220022][T10304] usb 5-1: ath9k_htc: USB layer deinitialized [ 468.324246][ T813] usb 1-1: Using ep0 maxpacket: 32 [ 468.361759][ T813] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 468.401207][ T813] usb 1-1: config 0 has no interface number 0 [ 468.442394][ T813] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 468.478868][ T813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.504960][ T813] usb 1-1: Product: syz [ 468.516101][ T813] usb 1-1: Manufacturer: syz [ 468.529487][ T813] usb 1-1: SerialNumber: syz [ 468.558847][ T813] usb 1-1: config 0 descriptor?? [ 468.616906][T13000] CUSE: info not properly terminated [ 468.755501][T13003] openvswitch: netlink: IP tunnel dst address not specified [ 468.787106][ T813] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 468.878017][T10303] usb 5-1: USB disconnect, device number 97 [ 468.897692][ T813] usb 1-1: USB disconnect, device number 122 [ 469.011554][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.297095][T13024] netlink: 'syz.2.1787': attribute type 13 has an invalid length. [ 470.499483][T10304] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 470.649271][T10304] usb 4-1: Using ep0 maxpacket: 8 [ 470.663543][T10304] usb 4-1: unable to get BOS descriptor or descriptor too short [ 470.671928][T10304] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 470.721343][T10304] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 470.751363][T10304] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 470.770970][T10304] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 470.782236][T10304] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 470.792980][T10304] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 470.804470][T10304] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 470.814782][T10304] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 470.825295][T10304] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 470.836869][T10304] usb 4-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 470.846553][T10304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.854907][T10303] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 470.891427][T10304] usb 4-1: Product: syz [ 470.899372][T10304] usb 4-1: Manufacturer: syz [ 471.090531][T10304] usb 4-1: SerialNumber: syz [ 471.149541][T10303] usb 5-1: Using ep0 maxpacket: 16 [ 471.158277][T10303] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.214707][T10303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 471.226433][T10303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 471.316425][T10303] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 471.342426][T10304] usb 4-1: USB disconnect, device number 109 [ 471.355714][T10303] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.369053][ T813] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 471.397115][T10303] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 471.407086][T10303] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 471.429357][T10303] usb 5-1: Manufacturer: syz [ 471.448031][T10303] usb 5-1: config 0 descriptor?? [ 471.600664][ T813] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.613226][ T813] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.628811][ T813] usb 6-1: config 0 interface 0 has no altsetting 0 [ 471.679785][ T813] usb 6-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 471.691287][ T813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.730181][ T813] usb 6-1: config 0 descriptor?? [ 471.759322][T10303] rc_core: IR keymap rc-hauppauge not found [ 471.765367][T10303] Registered IR keymap rc-empty [ 471.777985][T10303] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 471.809252][T10303] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 471.860023][T10303] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 471.887525][T10303] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input47 [ 472.005747][T10303] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.029601][T10303] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.050423][T10303] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.066514][T13056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1794'. [ 472.079580][T10303] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.099584][T10303] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.120562][T10303] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.153158][T10303] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.161741][ T813] asus 0003:0B05:1822.0025: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.5-1/input0 [ 472.209389][T10303] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.218821][ T813] asus 0003:0B05:1822.0025: Asus input not registered [ 472.250604][ T813] asus 0003:0B05:1822.0025: probe with driver asus failed with error -12 [ 472.269760][T10303] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.300215][T10303] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.317929][T13060] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1795'. [ 472.363587][T10303] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 472.399409][T13060] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1795'. [ 472.415228][T10303] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 472.439189][T13060] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1795'. [ 472.485310][T10303] usb 5-1: USB disconnect, device number 98 [ 474.118550][ T813] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 474.218230][T10303] usb 6-1: USB disconnect, device number 101 [ 474.285464][ T813] usb 1-1: config 2 has an invalid interface number: 207 but max is 1 [ 474.320399][ T813] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 474.371216][ T813] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 474.382800][T13091] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 474.395822][ T813] usb 1-1: config 2 has no interface number 0 [ 474.559720][ T813] usb 1-1: config 2 interface 207 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 474.586941][ T813] usb 1-1: config 2 interface 207 has no altsetting 0 [ 474.640095][ T813] usb 1-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=95.7e [ 474.662710][ T813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.679362][ T813] usb 1-1: Product: syz [ 474.688951][ T813] usb 1-1: Manufacturer: syz [ 474.693576][ T813] usb 1-1: SerialNumber: syz [ 475.058117][ T813] qmi_wwan 1-1:2.207: skipping garbage [ 475.139572][ T813] qmi_wwan 1-1:2.207: skipping garbage [ 475.172812][ T813] qmi_wwan 1-1:2.207: bogus CDC Union: master=0, slave=0 [ 475.203169][ T813] qmi_wwan 1-1:2.207: probe with driver qmi_wwan failed with error -22 [ 475.247998][ T813] usb 1-1: USB disconnect, device number 123 [ 475.628899][ T984] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 475.859383][T10304] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 475.950910][ T984] usb 5-1: Using ep0 maxpacket: 16 [ 475.957689][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.974552][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.985017][T13117] kvm: MWAIT instruction emulated as NOP! [ 476.000472][ T984] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 476.010079][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.023392][ T984] usb 5-1: config 0 descriptor?? [ 476.039497][T10304] usb 6-1: Using ep0 maxpacket: 32 [ 476.047022][T10304] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 476.056224][T10304] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 476.065582][T10304] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 476.075489][T10304] usb 6-1: config 1 has no interface number 0 [ 476.083012][T10304] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.094716][T10304] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 476.159661][T10304] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 476.169476][T10304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.196135][T10304] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 476.249615][ T984] hid (null): usage index exceeded [ 476.289425][T10303] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 476.400675][T10304] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 476.442468][T10303] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.442615][ T984] usb 5-1: string descriptor 0 read error: -71 [ 476.453563][T10303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.471466][T10303] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 476.482323][T10303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 476.491470][T10303] usb 1-1: SerialNumber: syz [ 476.507438][T10303] usb 1-1: 0:2 : does not exist [ 476.510333][ T984] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 476.521975][T10303] usb 1-1: unit 255 not found! [ 476.537994][ T984] letsketch 0003:6161:4D15.0026: probe with driver letsketch failed with error -32 [ 476.588095][ T984] usb 5-1: USB disconnect, device number 99 [ 476.717692][T10303] usb 1-1: USB disconnect, device number 124 [ 477.066880][T13129] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1810'. [ 477.203245][T13133] netlink: 'syz.3.1811': attribute type 4 has an invalid length. [ 477.454632][T10304] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 477.678880][T10303] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 477.850225][T10303] usb 1-1: Using ep0 maxpacket: 32 [ 477.857190][T10303] usb 1-1: config 0 has an invalid interface number: 27 but max is 0 [ 477.919510][T10303] usb 1-1: config 0 has no interface number 0 [ 477.929759][T10303] usb 1-1: config 0 interface 27 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 477.945778][T10303] usb 1-1: config 0 interface 27 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 32 [ 477.961158][T10303] usb 1-1: config 0 interface 27 has no altsetting 0 [ 477.973426][T10303] usb 1-1: New USB device found, idVendor=0499, idProduct=102e, bcdDevice=f4.b6 [ 477.991379][T10303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.006123][T10303] usb 1-1: Product: syz [ 478.014056][T10303] usb 1-1: Manufacturer: syz [ 478.024010][T10303] usb 1-1: SerialNumber: syz [ 478.037590][T10303] usb 1-1: config 0 descriptor?? [ 478.056312][T13137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 478.068972][T13137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 478.294262][T10303] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 478.316271][ T813] usb 6-1: USB disconnect, device number 102 [ 478.325096][ T813] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 478.327139][T10303] snd-usb-audio 1-1:0.27: probe with driver snd-usb-audio failed with error -2 [ 478.362618][T10303] usb 1-1: USB disconnect, device number 125 [ 478.450415][ T984] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 478.454293][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.27/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 478.497443][T13145] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.1816'. [ 478.507614][T13145] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.1816'. [ 478.567232][T13147] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1817'. [ 478.580169][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'. [ 478.604556][ T984] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 478.614867][ T984] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 478.625521][ T984] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 478.636492][ T984] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 478.656411][ T984] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 478.672529][ T984] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 478.682125][ T984] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 478.690281][ T984] usb 4-1: Product: syz [ 478.694583][ T984] usb 4-1: Manufacturer: syz [ 478.704999][ T984] cdc_wdm 4-1:1.0: skipping garbage [ 478.710573][ T984] cdc_wdm 4-1:1.0: skipping garbage [ 478.717386][ T984] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 478.726880][ T984] cdc_wdm 4-1:1.0: Unknown control protocol [ 478.788856][ T813] usb 6-1: new low-speed USB device number 103 using dummy_hcd [ 478.951039][ T813] usb 6-1: config 2 has an invalid interface number: 191 but max is 0 [ 478.961815][ C1] wdm_int_callback: 11 callbacks suppressed [ 478.961839][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 478.974330][ C1] wdm_int_callback: 11 callbacks suppressed [ 478.974354][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 478.989730][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 478.996358][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.002635][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 479.009240][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.015433][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 479.022010][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.028247][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 479.034849][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.041582][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 479.048186][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.054365][ T813] usb 6-1: config 2 has no interface number 0 [ 479.054425][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 479.067201][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.073521][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 479.080133][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.086421][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 479.093025][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.099320][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 479.105915][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 479.112654][T10303] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 479.112865][ T984] usb 4-1: USB disconnect, device number 110 [ 479.120488][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 479.136114][ T813] usb 6-1: config 2 interface 191 has no altsetting 0 [ 479.271046][T10303] usb 1-1: too many configurations: 11, using maximum allowed: 8 [ 479.290079][T10303] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 479.299656][T10303] usb 1-1: New USB device strings: Mfr=88, Product=114, SerialNumber=232 [ 479.308362][T10303] usb 1-1: Product: syz [ 479.313359][T10303] usb 1-1: Manufacturer: syz [ 479.318013][T10303] usb 1-1: SerialNumber: syz [ 479.329382][T10303] usb 1-1: config 0 descriptor?? [ 479.938671][T10303] ath6kl: mismatched byte count 0 vs. expected 12 [ 479.946742][T10303] ath6kl: Failed to init ath6kl core: -22 [ 479.953829][T10303] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 480.146357][T10303] usb 1-1: USB disconnect, device number 126 [ 480.159583][ T984] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 480.344515][ T984] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 480.361788][ T984] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 480.371418][ T984] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 480.380528][ T984] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 480.391848][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 480.407354][ T984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 480.430954][ T984] usb 4-1: string descriptor 0 read error: -22 [ 480.459615][ T984] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 480.468674][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.479911][T13167] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1823'. [ 480.484755][ T984] usb 4-1: config 0 descriptor?? [ 480.495522][T13160] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 480.520637][ T984] hub 4-1:0.0: bad descriptor, ignoring hub [ 480.526685][ T984] hub 4-1:0.0: probe with driver hub failed with error -5 [ 480.540919][ T984] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input48 [ 480.796998][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 480.797015][ T30] audit: type=1326 audit(1760444272.655:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 480.826956][ T30] audit: type=1326 audit(1760444272.655:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 480.828253][T13180] CUSE: info not properly terminated [ 480.849436][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.849720][ T30] audit: type=1326 audit(1760444272.655:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 480.849766][ T30] audit: type=1326 audit(1760444272.655:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 480.849828][ T30] audit: type=1326 audit(1760444272.655:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 480.849870][ T30] audit: type=1326 audit(1760444272.665:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 480.849910][ T30] audit: type=1326 audit(1760444272.665:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 480.849973][ T30] audit: type=1326 audit(1760444272.665:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 480.850015][ T30] audit: type=1326 audit(1760444272.665:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 480.850051][ T30] audit: type=1326 audit(1760444272.665:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13175 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 480.884225][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.953292][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.280265][ T984] usb 4-1: USB disconnect, device number 111 [ 481.464452][ T813] usb 6-1: New USB device found, idVendor=0c45, idProduct=6009, bcdDevice=9d.b1 [ 481.482668][ T813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.501990][ T813] usb 6-1: can't set config #2, error -71 [ 481.517482][ T813] usb 6-1: USB disconnect, device number 103 [ 481.668960][ T984] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 481.831560][ T984] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 482.275947][ T813] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 482.354005][ T984] usb 4-1: config 179 has no interface number 0 [ 482.361422][ T984] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 482.374109][ T984] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 482.385651][ T984] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 22306, setting to 64 [ 482.397303][ T984] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 482.412989][ T984] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 482.427820][ T984] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 482.438534][ T984] usb 4-1: Product: syz [ 482.489976][T13185] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 482.497535][T13185] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 482.510988][ T813] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.534405][ T813] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.637641][ T813] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 482.655254][ T813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 482.685744][ T813] usb 6-1: SerialNumber: syz [ 482.728356][T10303] usb 4-1: USB disconnect, device number 112 [ 482.728363][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 482.728513][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 482.908985][ T813] usb 6-1: 0:2 : does not exist [ 482.909505][T10304] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 482.927635][ T813] usb 6-1: USB disconnect, device number 104 [ 482.954994][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.069377][T10304] usb 1-1: Using ep0 maxpacket: 8 [ 483.076180][T10304] usb 1-1: config 5 has an invalid interface number: 52 but max is 1 [ 483.084987][T10304] usb 1-1: config 5 has an invalid interface number: 4 but max is 1 [ 483.093413][T10304] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 483.103965][T10304] usb 1-1: config 5 has no interface number 0 [ 483.110808][T10304] usb 1-1: config 5 has no interface number 1 [ 483.116920][T10304] usb 1-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.130499][T10304] usb 1-1: config 5 interface 4 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0 [ 483.141467][T10304] usb 1-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 483.154733][T10304] usb 1-1: config 5 interface 52 has no altsetting 0 [ 483.161976][T10304] usb 1-1: config 5 interface 4 has no altsetting 0 [ 483.171163][T10304] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 483.180618][T10304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.188616][T10304] usb 1-1: Product: syz [ 483.193464][T10304] usb 1-1: Manufacturer: syz [ 483.198234][T10304] usb 1-1: SerialNumber: syz [ 483.409942][T13198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.420100][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1834'. [ 483.445392][T13198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.450083][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1834'. [ 483.476263][T10304] cytherm 1-1:5.52: Cypress thermometer device now attached [ 483.502015][T10304] cytherm 1-1:5.4: Cypress thermometer device now attached [ 483.515819][T10304] usb 1-1: USB disconnect, device number 127 [ 483.523896][T10304] cytherm 1-1:5.52: Cypress thermometer now disconnected [ 483.536945][T10304] cytherm 1-1:5.4: Cypress thermometer now disconnected [ 483.590410][T13209] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1835'. [ 483.700994][T13216] fuse: Unknown parameter 'grïup_id' [ 484.038976][ T813] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 484.191284][T13225] CUSE: info not properly terminated [ 484.222365][ T813] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 484.244433][ T813] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 484.260408][ T813] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 484.270031][ T813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.367023][T13219] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.390028][ T813] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.611159][T13219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.620116][T13219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.844263][T13219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.854730][T13219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.784205][T10304] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 485.976462][T10304] usb 5-1: Using ep0 maxpacket: 32 [ 485.995046][T10304] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 486.026950][T10304] usb 5-1: config 0 has no interface number 0 [ 486.060704][T10304] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 486.081219][T10304] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 486.091642][T10304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.100481][T10304] usb 5-1: Product: syz [ 486.126732][T10304] usb 5-1: Manufacturer: syz [ 486.147872][T10304] usb 5-1: SerialNumber: syz [ 486.175258][T10304] usb 5-1: config 0 descriptor?? [ 486.484028][T10304] usb 5-1: USB disconnect, device number 100 [ 486.515595][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 487.179638][T10303] usb 4-1: USB disconnect, device number 113 [ 487.687719][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1851'. [ 487.753360][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 487.753377][ T30] audit: type=1326 audit(1760444279.615:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13270 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 487.782460][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.829214][ T30] audit: type=1326 audit(1760444279.615:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13270 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 487.863233][T13275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.986775][ T30] audit: type=1326 audit(1760444279.615:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13270 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 488.089266][ T30] audit: type=1326 audit(1760444279.615:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13270 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 488.168023][ T30] audit: type=1326 audit(1760444279.615:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13270 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 488.288893][ T30] audit: type=1326 audit(1760444279.615:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13270 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 488.319267][ T30] audit: type=1326 audit(1760444279.615:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13270 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 488.356558][ T30] audit: type=1326 audit(1760444279.615:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13270 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 488.381127][ T30] audit: type=1326 audit(1760444279.615:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13270 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 488.410785][T13282] CUSE: info not properly terminated [ 488.452758][ T30] audit: type=1326 audit(1760444279.615:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13270 comm="syz.0.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb3f798eec9 code=0x7ffc0000 [ 488.497190][T13284] x_tables: duplicate underflow at hook 3 [ 488.567954][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1855'. [ 488.593897][T13281] dns_resolver: Unsupported server list version (0) [ 488.770516][T13286] ipvlan2: entered promiscuous mode [ 488.786754][T13286] bridge0: port 4(ipvlan2) entered blocking state [ 488.817349][T13286] bridge0: port 4(ipvlan2) entered disabled state [ 488.835563][T13286] ipvlan2: entered allmulticast mode [ 488.867899][T13286] bridge0: entered allmulticast mode [ 488.888284][T13286] ipvlan2: left allmulticast mode [ 488.898658][T13286] bridge0: left allmulticast mode [ 489.286260][T13293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1857'. [ 489.501100][ T1219] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 489.704505][ T1219] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 489.712787][ T1219] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 489.728472][ T1219] usb 5-1: config 0 interface 0 has no altsetting 0 [ 489.743672][ T1219] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 489.753332][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 489.762084][ T1219] usb 5-1: Product: syz [ 489.766394][ T1219] usb 5-1: Manufacturer: syz [ 489.823990][ T1219] usb 5-1: SerialNumber: syz [ 489.878154][ T1219] usb 5-1: config 0 descriptor?? [ 489.925284][ T1219] hub 5-1:0.0: bad descriptor, ignoring hub [ 489.935321][ T1219] hub 5-1:0.0: probe with driver hub failed with error -5 [ 489.947524][ T1219] usb 5-1: selecting invalid altsetting 0 [ 490.070120][ T813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 490.246716][ T813] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.282725][ T813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 490.740521][ T813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 490.772012][T13294] usb 5-1: reset high-speed USB device number 101 using dummy_hcd [ 490.802605][ T813] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.836582][ T813] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.867479][ T813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.894706][ T813] usb 1-1: config 0 descriptor?? [ 490.930392][T13294] usb 5-1: device firmware changed [ 490.947786][ T1219] usb 5-1: USB disconnect, device number 101 [ 491.340388][ T813] plantronics 0003:047F:FFFF.0027: ignoring exceeding usage max [ 491.392077][ T813] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 491.539087][ T1219] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 491.693952][ T1219] usb 5-1: config 1 interface 0 has no altsetting 0 [ 491.704999][ T1219] usb 5-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 491.752952][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.787061][ T1219] usb 5-1: Product: syz [ 491.801440][ T1219] usb 5-1: Manufacturer: syz [ 491.814600][ T1219] usb 5-1: SerialNumber: syz [ 491.899646][T10303] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 492.035022][T13348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1871'. [ 492.067635][ T1219] usbhid 5-1:1.0: can't add hid device: -71 [ 492.076411][ T1219] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 492.084216][T13349] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1870'. [ 492.137580][ T1219] usb 5-1: USB disconnect, device number 102 [ 492.274272][T13352] netlink: 'syz.3.1872': attribute type 2 has an invalid length. [ 492.327848][T13355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1873'. [ 492.339825][T13355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1873'. [ 492.350936][T13355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1873'. [ 492.458523][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 492.529593][T10303] usb 6-1: device descriptor read/64, error -71 [ 492.770673][T10303] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 492.919102][ T1219] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 492.935524][T10303] usb 6-1: Using ep0 maxpacket: 8 [ 492.945338][T10303] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 492.954181][T10303] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.964892][T10303] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.976145][T10303] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.989576][T10303] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.006549][T10303] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 493.021898][T10303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.116207][ T1219] usb 5-1: Using ep0 maxpacket: 16 [ 493.399151][T10303] usb 6-1: usb_control_msg returned -32 [ 493.412070][T10303] usbtmc 6-1:16.0: can't read capabilities [ 493.428462][ T813] usb 1-1: USB disconnect, device number 2 [ 493.436607][ T1219] usb 5-1: config 0 interface 0 has no altsetting 0 [ 493.455702][ T1219] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 493.468577][ T1219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.492910][ T1219] usb 5-1: config 0 descriptor?? [ 493.924367][ T1219] hid-generic 0003:0DFC:0101.0028: unknown main item tag 0x0 [ 493.954026][ T1219] hid-generic 0003:0DFC:0101.0028: unknown main item tag 0x0 [ 493.962895][ T1219] hid-generic 0003:0DFC:0101.0028: unknown main item tag 0x0 [ 493.978554][ T1219] hid-generic 0003:0DFC:0101.0028: unknown main item tag 0x0 [ 493.987409][ T1219] hid-generic 0003:0DFC:0101.0028: unknown main item tag 0x0 [ 493.995928][ T1219] hid-generic 0003:0DFC:0101.0028: unknown main item tag 0x0 [ 494.004539][ T1219] hid-generic 0003:0DFC:0101.0028: unknown main item tag 0x0 [ 494.013060][ T1219] hid-generic 0003:0DFC:0101.0028: unknown main item tag 0x0 [ 494.026095][ T1219] hid-generic 0003:0DFC:0101.0028: unknown main item tag 0x0 [ 494.036311][ T1219] hid-generic 0003:0DFC:0101.0028: unknown main item tag 0x0 [ 494.098455][ T1219] hid-generic 0003:0DFC:0101.0028: hidraw0: USB HID v0.00 Device [HID 0dfc:0101] on usb-dummy_hcd.4-1/input0 [ 494.131907][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1870'. [ 494.144260][T13382] netlink: 'syz.5.1870': attribute type 5 has an invalid length. [ 494.170147][T13382] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1870'. [ 494.187682][T13382] geneve2: entered promiscuous mode [ 494.198862][ T813] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 494.217241][ T1219] usb 5-1: USB disconnect, device number 103 [ 494.230709][T13382] geneve2: entered allmulticast mode [ 494.254862][ T76] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 494.267046][ T76] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 494.304627][ T76] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 494.323909][T13384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.379536][T13384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.403525][ T76] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 494.451315][T13383] fido_id[13383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 494.486823][T13386] pimreg: entered allmulticast mode [ 494.497172][T13378] pimreg: left allmulticast mode [ 494.591872][ T813] usb 1-1: unable to get BOS descriptor or descriptor too short [ 494.602367][ T813] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 494.617391][ T813] usb 1-1: can't read configurations, error -71 [ 495.000297][ T6431] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 495.167300][T13395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1882'. [ 495.187251][ T6431] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 495.214635][ T6431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.320532][ T6431] usb 5-1: config 0 descriptor?? [ 495.546127][ T6431] cp210x 5-1:0.0: cp210x converter detected [ 495.683193][T13408] 8ÿ: entered promiscuous mode [ 495.707841][T10303] usb 6-1: USB disconnect, device number 106 [ 495.951202][ T6431] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 495.963885][ T6431] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 495.987629][ T6431] usb 5-1: cp210x converter now attached to ttyUSB0 [ 496.021949][ T813] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 496.159302][ T984] usb 5-1: USB disconnect, device number 104 [ 496.167538][ T984] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 496.180976][ T984] cp210x 5-1:0.0: device disconnected [ 496.239452][ T813] usb 1-1: Using ep0 maxpacket: 16 [ 496.253449][ T813] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 496.267708][ T813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.312153][ T813] usb 1-1: config 0 descriptor?? [ 496.335987][ T813] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 496.368810][ T6431] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 496.874453][ T6431] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 496.884761][ T6431] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 496.917872][ T6431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.984663][ T6431] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.051936][ T6431] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 497.084281][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.203970][ T984] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 497.347552][T13422] delete_channel: no stack [ 497.355347][ T6431] usb 6-1: USB disconnect, device number 107 [ 497.458892][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 497.466413][ T984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 497.509651][ T984] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 497.531636][ T984] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 497.631028][ T984] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 497.640699][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.649372][ T984] usb 5-1: Product: syz [ 497.653732][ T984] usb 5-1: Manufacturer: syz [ 497.658383][ T984] usb 5-1: SerialNumber: syz [ 497.885637][ T984] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 497.899545][ T984] cdc_ncm 5-1:1.0: bind() failure [ 497.921498][ T984] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 497.934459][ T984] cdc_ncm 5-1:1.1: bind() failure [ 497.963518][ T984] usb 5-1: USB disconnect, device number 105 [ 498.284161][ T813] usb 1-1: Detected FT232A [ 498.305766][ T813] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 498.347578][ T813] usb 1-1: USB disconnect, device number 5 [ 498.376557][ T813] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 498.390582][ T813] ftdi_sio 1-1:0.0: device disconnected [ 498.399244][T10303] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 498.593821][T13437] pimreg: entered allmulticast mode [ 498.602253][T13436] pimreg: left allmulticast mode [ 498.674969][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 498.674986][ T30] audit: type=1326 audit(1760444290.525:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 498.764682][T10303] usb 4-1: unable to get BOS descriptor or descriptor too short [ 498.767780][ T30] audit: type=1326 audit(1760444290.525:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 498.774971][T10303] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 498.838493][T13451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1898'. [ 498.876154][ T30] audit: type=1326 audit(1760444290.525:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 498.941265][T10303] usb 4-1: can't read configurations, error -71 [ 498.952961][ T30] audit: type=1326 audit(1760444290.525:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 499.102531][ T30] audit: type=1326 audit(1760444290.525:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 499.127608][T13460] misc userio: Begin command sent, but we're already running [ 499.181756][ T30] audit: type=1326 audit(1760444290.535:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 499.399464][ T30] audit: type=1326 audit(1760444290.535:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 499.473356][ T30] audit: type=1326 audit(1760444290.535:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 499.495746][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.600506][T13461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.669755][ T30] audit: type=1326 audit(1760444290.535:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 499.734247][ T30] audit: type=1326 audit(1760444290.535:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.4.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 500.078011][T13490] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1907'. [ 501.167388][T13478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1906'. [ 501.211242][T13478] syzkaller1: entered promiscuous mode [ 501.216904][T13478] syzkaller1: entered allmulticast mode [ 501.390046][T10303] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 501.458149][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.464935][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.560664][T10303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 501.576326][T10303] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 501.586314][T10303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.611217][T10303] usb 4-1: Product: syz [ 501.638263][T10303] usb 4-1: Manufacturer: syz [ 501.653796][T10303] usb 4-1: SerialNumber: syz [ 501.666653][T10303] usb 4-1: config 0 descriptor?? [ 501.900043][ T1219] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 502.059248][ T1219] usb 5-1: Using ep0 maxpacket: 8 [ 502.066430][ T1219] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 502.076736][ T1219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.173046][ T1219] usb 5-1: config 0 descriptor?? [ 502.266882][ T1219] gm12u320 5-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 502.314813][ T1219] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5 [ 502.352913][ T1219] usb-storage 5-1:0.0: USB Mass Storage device detected [ 502.380147][ T1219] usb-storage 5-1:0.0: device ignored [ 502.456959][T13509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.466147][T13509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.482177][T13509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.508170][T13509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.534956][T13509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.570927][T13509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.596318][T13509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.619764][T13509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.684129][T13509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.703353][T13509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.744902][ T813] usb 5-1: USB disconnect, device number 106 [ 503.346224][T13519] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 13519 comm: syz.4.1914) [ 503.614169][T13527] CUSE: info not properly terminated [ 504.168866][ T813] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 504.299312][ T813] usb 6-1: device descriptor read/64, error -71 [ 504.394368][ T1219] usb 4-1: USB disconnect, device number 116 [ 504.457670][T13533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.488657][T13533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.569522][ T813] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 504.689244][T10303] usb 5-1: new low-speed USB device number 107 using dummy_hcd [ 504.708834][ T813] usb 6-1: device descriptor read/64, error -71 [ 504.821632][ T813] usb usb6-port1: attempt power cycle [ 504.839943][T10303] usb 5-1: Invalid ep0 maxpacket: 16 [ 504.889491][ T1219] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 504.959178][T10304] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 504.969555][T10303] usb 5-1: new low-speed USB device number 108 using dummy_hcd [ 505.049112][ T1219] usb 4-1: Using ep0 maxpacket: 16 [ 505.055924][ T1219] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 505.068180][ T1219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 505.081797][ T1219] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 505.091440][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.100331][ T1219] usb 4-1: Product: syz [ 505.104657][ T1219] usb 4-1: Manufacturer: syz [ 505.109818][ T1219] usb 4-1: SerialNumber: syz [ 505.116138][ T1219] usb 4-1: config 0 descriptor?? [ 505.121806][T10304] usb 1-1: Using ep0 maxpacket: 16 [ 505.127059][T10303] usb 5-1: Invalid ep0 maxpacket: 16 [ 505.135565][ T1219] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 505.145724][T10303] usb usb5-port1: attempt power cycle [ 505.153607][T10304] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.164188][ T1219] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 505.169563][ T813] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 505.171412][T10304] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.190628][T10304] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 505.200091][T10304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.208381][T10304] usb 1-1: Product: syz [ 505.209816][ T813] usb 6-1: device descriptor read/8, error -71 [ 505.213155][T10304] usb 1-1: Manufacturer: syz [ 505.223911][T10304] usb 1-1: SerialNumber: syz [ 505.444066][T13545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.453921][T13545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.489176][ T813] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 505.499409][T10303] usb 5-1: new low-speed USB device number 109 using dummy_hcd [ 505.539711][ T813] usb 6-1: device descriptor read/8, error -71 [ 505.550093][T10303] usb 5-1: Invalid ep0 maxpacket: 16 [ 505.550130][T13548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.580193][T13548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.600092][ T1219] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 505.608056][ T1219] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 505.623083][ T1219] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 505.632024][ T1219] em28xx 4-1:0.0: No AC97 audio processor [ 505.679882][T10303] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 505.735654][ T813] usb usb6-port1: unable to enumerate USB device [ 505.739695][T10303] usb 5-1: Invalid ep0 maxpacket: 16 [ 505.751271][T10303] usb usb5-port1: unable to enumerate USB device [ 505.773770][T10304] usb 1-1: 0:2 : does not exist [ 505.797514][T10304] usb 1-1: USB disconnect, device number 6 [ 506.311395][T13553] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1923'. [ 506.374494][T10303] usb 4-1: USB disconnect, device number 117 [ 506.383214][T10303] em28xx 4-1:0.0: Disconnecting em28xx [ 506.417235][T10303] em28xx 4-1:0.0: Freeing device [ 506.465751][T13558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1925'. [ 507.016224][T13571] CUSE: info not properly terminated [ 507.043966][T13577] FAULT_INJECTION: forcing a failure. [ 507.043966][T13577] name failslab, interval 1, probability 0, space 0, times 0 [ 507.072819][T13577] CPU: 0 UID: 0 PID: 13577 Comm: syz.5.1931 Not tainted syzkaller #0 PREEMPT(full) [ 507.072846][T13577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.072858][T13577] Call Trace: [ 507.072867][T13577] [ 507.072877][T13577] dump_stack_lvl+0x189/0x250 [ 507.072902][T13577] ? __pfx____ratelimit+0x10/0x10 [ 507.072929][T13577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.072948][T13577] ? __pfx__printk+0x10/0x10 [ 507.072973][T13577] ? __pfx___might_resched+0x10/0x10 [ 507.072995][T13577] ? fs_reclaim_acquire+0x7d/0x100 [ 507.073021][T13577] should_fail_ex+0x414/0x560 [ 507.073052][T13577] should_failslab+0xa8/0x100 [ 507.073077][T13577] __kmalloc_noprof+0xcb/0x7f0 [ 507.073096][T13577] ? sock_kmalloc+0xd6/0x160 [ 507.073120][T13577] sock_kmalloc+0xd6/0x160 [ 507.073142][T13577] ____sys_sendmsg+0x1b5/0x830 [ 507.073180][T13577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.073215][T13577] ? import_iovec+0x74/0xa0 [ 507.073241][T13577] ___sys_sendmsg+0x21f/0x2a0 [ 507.073262][T13577] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.073327][T13577] ? __fget_files+0x2a/0x420 [ 507.073351][T13577] ? __fget_files+0x3a0/0x420 [ 507.073382][T13577] __x64_sys_sendmsg+0x19b/0x260 [ 507.073403][T13577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.073430][T13577] ? __pfx_ksys_write+0x10/0x10 [ 507.073454][T13577] ? do_syscall_64+0xbe/0xfa0 [ 507.073475][T13577] do_syscall_64+0xfa/0xfa0 [ 507.073491][T13577] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.073509][T13577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.073528][T13577] ? clear_bhb_loop+0x60/0xb0 [ 507.073549][T13577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.073567][T13577] RIP: 0033:0x7f404d18eec9 [ 507.073585][T13577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.073601][T13577] RSP: 002b:00007f404df9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.073622][T13577] RAX: ffffffffffffffda RBX: 00007f404d3e5fa0 RCX: 00007f404d18eec9 [ 507.073636][T13577] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 507.073649][T13577] RBP: 00007f404df9f090 R08: 0000000000000000 R09: 0000000000000000 [ 507.073661][T13577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.073672][T13577] R13: 00007f404d3e6038 R14: 00007f404d3e5fa0 R15: 00007f404d50fa28 [ 507.073702][T13577] [ 507.558874][ T984] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 507.729929][ T813] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 507.746643][ T984] usb 4-1: Using ep0 maxpacket: 32 [ 507.873886][T13588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1935'. [ 507.919634][ T813] usb 6-1: Using ep0 maxpacket: 32 [ 507.935699][ T813] usb 6-1: config 184 has an invalid interface number: 51 but max is 0 [ 507.948857][ T6434] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 507.969712][ T813] usb 6-1: config 184 has an invalid descriptor of length 245, skipping remainder of the config [ 507.982998][ T813] usb 6-1: config 184 has no interface number 0 [ 507.990027][ T813] usb 6-1: config 184 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.007378][ T813] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 508.024574][ T813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.032753][ T813] usb 6-1: Product: syz [ 508.036960][ T813] usb 6-1: Manufacturer: syz [ 508.043959][ T813] usb 6-1: SerialNumber: syz [ 508.086255][T13594] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1937'. [ 508.135437][ T6434] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 508.157196][ T6434] usb 5-1: config 0 has no interface number 0 [ 508.167033][ T6434] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.184589][ T6434] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 508.199437][ T6434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.209188][ T6434] usb 5-1: Product: syz [ 508.213419][ T6434] usb 5-1: Manufacturer: syz [ 508.220559][ T6434] usb 5-1: SerialNumber: syz [ 508.235124][ T6434] usb 5-1: config 0 descriptor?? [ 508.256983][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.270424][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.280946][ T6434] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 508.291832][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.324664][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.413153][ T813] quatech2 6-1:184.51: Quatech 2nd gen USB to Serial Driver converter detected [ 508.439602][ T813] usb 6-1: qt2_attach - failed to power on unit: -71 [ 508.447703][ T813] quatech2 6-1:184.51: probe with driver quatech2 failed with error -71 [ 508.484398][T13602] vlan0: entered promiscuous mode [ 508.492522][ T813] usb 6-1: USB disconnect, device number 112 [ 508.504500][T13602] geneve1: entered promiscuous mode [ 508.517036][T13602] vlan0: entered allmulticast mode [ 508.532687][T13602] geneve1: entered allmulticast mode [ 508.681476][ T6434] usb 5-1: USB disconnect, device number 111 [ 508.703194][ T6434] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 508.987602][T13619] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1942'. [ 509.057946][T13622] xt_hashlimit: size too large, truncated to 1048576 [ 509.076081][T13622] xt_hashlimit: max too large, truncated to 1048576 [ 509.167966][T13628] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1946'. [ 509.355808][T13637] CUSE: info not properly terminated [ 509.388917][ T6434] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 509.552760][T13626] syz_tun: entered allmulticast mode [ 509.562437][T13625] syz_tun: left allmulticast mode [ 509.568891][ T6434] usb 6-1: unable to get BOS descriptor or descriptor too short [ 509.740304][ T6434] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 509.761205][ T6434] usb 6-1: can't read configurations, error -71 [ 509.849361][T10304] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 509.999526][T10304] usb 1-1: Using ep0 maxpacket: 32 [ 510.014558][T10304] usb 1-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.032747][T10304] usb 1-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.033061][ T813] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 510.043316][T10304] usb 1-1: config 0 interface 0 has no altsetting 0 [ 510.058427][T10304] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 510.075378][T10304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.093630][T10304] usb 1-1: config 0 descriptor?? [ 510.154808][T13646] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 510.164142][T13646] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 510.201275][ T813] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 510.211704][ T813] usb 5-1: config 0 has no interface number 0 [ 510.217857][ T813] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.232245][ T813] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 510.241694][ T813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.249858][ T813] usb 5-1: Product: syz [ 510.254077][ T813] usb 5-1: Manufacturer: syz [ 510.258812][ T813] usb 5-1: SerialNumber: syz [ 510.266259][ T813] usb 5-1: config 0 descriptor?? [ 510.277679][ T813] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 510.316579][T13641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.342695][T13641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.424121][T13648] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1949'. [ 510.478795][ T984] usb 4-1: unable to get BOS descriptor or descriptor too short [ 510.509000][ T984] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 510.526431][ T984] usb 4-1: can't read configurations, error -71 [ 510.530658][T10303] usb 5-1: USB disconnect, device number 112 [ 510.542353][T10303] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 510.709480][T10304] hkems 0003:2006:0118.0029: unbalanced delimiter at end of report description [ 510.749654][T10304] hkems 0003:2006:0118.0029: parse failed [ 510.755478][T10304] hkems 0003:2006:0118.0029: probe with driver hkems failed with error -22 [ 512.600301][T10304] usb 1-1: USB disconnect, device number 7 [ 512.744153][T13671] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1959'. [ 512.996465][T13683] CUSE: info not properly terminated [ 513.194966][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1963'. [ 513.219368][T10304] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 513.432015][T13693] trusted_key: encrypted_key: keylen parameter is missing [ 513.483590][T13696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1965'. [ 513.499568][T13682] syz_tun: entered allmulticast mode [ 513.507498][T13681] syz_tun: left allmulticast mode [ 513.515508][T10304] usb 1-1: unable to get BOS descriptor or descriptor too short [ 513.529127][T10303] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 513.550749][T10304] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 513.564284][T10304] usb 1-1: can't read configurations, error -71 [ 513.742517][T10303] usb 4-1: config 0 has an invalid interface number: 95 but max is 0 [ 513.751382][T10303] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.782368][T10303] usb 4-1: config 0 has no interface number 0 [ 513.789912][T10303] usb 4-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 513.924806][T10303] usb 4-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 513.957372][T10303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.986406][T10303] usb 4-1: Product: syz [ 514.056095][T10303] usb 4-1: Manufacturer: syz [ 514.074290][T10303] usb 4-1: SerialNumber: syz [ 514.095767][T10303] usb 4-1: config 0 descriptor?? [ 514.299034][ T984] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 514.413645][T13722] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1971'. [ 514.513251][T10303] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.521619][T10303] usb 4-1: MIDIStreaming interface descriptor not found [ 514.576293][T10303] usb 4-1: USB disconnect, device number 120 [ 514.728411][ T6132] udevd[6132]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.127525][T13745] CUSE: info not properly terminated [ 515.212088][T13753] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 515.738850][ T984] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 515.918854][ T984] usb 1-1: device descriptor read/64, error -71 [ 516.004844][T13763] fuse: Bad value for 'user_id' [ 516.020144][T13763] fuse: Bad value for 'user_id' [ 516.143366][T13766] xt_hashlimit: max too large, truncated to 1048576 [ 516.151060][T13766] xt_bpf: check failed: parse error [ 516.201701][ T984] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 516.215845][T13765] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1983'. [ 516.348840][ T984] usb 1-1: device descriptor read/64, error -71 [ 516.459141][ T984] usb usb1-port1: attempt power cycle [ 516.509799][T13769] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 516.558829][ T813] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 516.733961][ T813] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 516.759465][ T813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.785766][ T813] usb 4-1: Product: syz [ 516.798836][ T984] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 516.816787][ T813] usb 4-1: Manufacturer: syz [ 516.823513][ T984] usb 1-1: device descriptor read/8, error -71 [ 516.859764][ T813] usb 4-1: SerialNumber: syz [ 516.878534][ T813] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 516.896802][ T6434] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 517.060019][T13774] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1985'. [ 517.069516][ T984] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 517.100338][ T984] usb 1-1: device descriptor read/8, error -71 [ 517.219431][ T984] usb usb1-port1: unable to enumerate USB device [ 517.744168][ T984] usb 4-1: USB disconnect, device number 121 [ 517.910549][T13782] netlink: 'syz.4.1987': attribute type 32 has an invalid length. [ 517.988264][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 518.017480][T13782] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 518.331768][ T6434] usb 4-1: Service connection timeout for: 257 [ 518.361679][ T6434] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 518.401487][ T6434] ath9k_htc: Failed to initialize the device [ 518.422367][ T984] usb 4-1: ath9k_htc: USB layer deinitialized [ 518.759045][T10303] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 518.859076][ T984] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 518.909379][T10303] usb 5-1: Using ep0 maxpacket: 16 [ 518.915985][T10303] usb 5-1: config 0 has no interfaces? [ 518.924164][T10303] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 518.933782][T10303] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 518.989166][T10303] usb 5-1: Manufacturer: syz [ 519.048643][T10303] usb 5-1: config 0 descriptor?? [ 519.113185][ T984] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 519.160364][T13810] CUSE: info not properly terminated [ 519.168771][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.219822][ T984] usb 4-1: Product: syz [ 519.247831][ T984] usb 4-1: Manufacturer: syz [ 519.257955][ T984] usb 4-1: SerialNumber: syz [ 519.327813][ T984] usb 4-1: config 0 descriptor?? [ 519.352000][ T984] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 519.365265][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.425780][T10303] usb 5-1: USB disconnect, device number 114 [ 519.465308][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.479805][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.489939][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.503861][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.515883][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.528171][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.540499][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.556652][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.568214][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.219217][ T984] gspca_sunplus: reg_r err -71 [ 520.224108][ T984] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 520.307773][ T984] usb 4-1: USB disconnect, device number 122 [ 520.798977][ T984] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 520.960791][ T984] usb 4-1: Invalid ep0 maxpacket: 64 [ 521.068933][ T6431] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 521.088810][ T984] usb 4-1: new low-speed USB device number 124 using dummy_hcd [ 521.228795][ T6431] usb 5-1: Using ep0 maxpacket: 8 [ 521.238416][ T6431] usb 5-1: config 162 has an invalid interface number: 97 but max is 0 [ 521.248073][ T984] usb 4-1: Invalid ep0 maxpacket: 64 [ 521.254257][ T984] usb usb4-port1: attempt power cycle [ 521.260247][ T6431] usb 5-1: config 162 has no interface number 0 [ 521.269754][ T6431] usb 5-1: config 162 interface 97 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 521.282245][ T6431] usb 5-1: config 162 interface 97 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 521.309453][ T6431] usb 5-1: config 162 interface 97 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.337508][ T6431] usb 5-1: config 162 interface 97 has no altsetting 0 [ 521.358346][ T6431] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 521.379985][ T6431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.388279][ T6431] usb 5-1: Product: syz [ 521.392823][ T6431] usb 5-1: Manufacturer: syz [ 521.397448][ T6431] usb 5-1: SerialNumber: syz [ 521.628929][ T984] usb 4-1: new low-speed USB device number 125 using dummy_hcd [ 521.649415][ T984] usb 4-1: Invalid ep0 maxpacket: 64 [ 521.789031][ T984] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 521.810097][ T984] usb 4-1: Invalid ep0 maxpacket: 64 [ 521.815837][ T984] usb usb4-port1: unable to enumerate USB device [ 522.448971][ T984] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 522.473316][T13855] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 522.608975][ T984] usb 1-1: device descriptor read/64, error -71 [ 522.848935][ T984] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 523.002209][ T984] usb 1-1: device descriptor read/64, error -71 [ 523.097058][T13862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2005'. [ 523.129730][ T984] usb usb1-port1: attempt power cycle [ 523.436285][ T6431] metro_usb 5-1:162.97: interrupt-out endpoint missing [ 523.488630][ T6431] usb 5-1: USB disconnect, device number 115 [ 523.494839][ T984] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 523.511674][T13871] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2007'. [ 523.546747][T13871] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2007'. [ 523.576111][ T984] usb 1-1: device descriptor read/8, error -71 [ 523.818830][ T984] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 523.885756][ T984] usb 1-1: device descriptor read/8, error -71 [ 523.935205][ T6431] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 524.009522][ T984] usb usb1-port1: unable to enumerate USB device [ 524.128875][ T6431] usb 5-1: Using ep0 maxpacket: 16 [ 524.139147][ T6431] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.149463][ T6431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.332592][ T6431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 524.357248][ T6431] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 524.456643][ T6431] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.499509][ T6431] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 524.530330][ T6431] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 524.551533][ T6431] usb 5-1: Manufacturer: syz [ 524.566321][ T6431] usb 5-1: config 0 descriptor?? [ 524.929320][ T6431] rc_core: IR keymap rc-hauppauge not found [ 524.935376][ T6431] Registered IR keymap rc-empty [ 524.940595][ T6431] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.022581][ T6431] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.061443][ T6431] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 525.078304][ T6431] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 525.181710][ T6431] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.199468][ T1219] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 525.218972][ T6431] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.249185][ T6431] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.306749][T13898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2015'. [ 525.340405][ T6431] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.349295][ T1219] usb 6-1: Using ep0 maxpacket: 8 [ 525.356758][ T1219] usb 6-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 525.367527][ T1219] usb 6-1: config 0 has an invalid interface number: 224 but max is 189 [ 525.393492][ T1219] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 525.407145][ T1219] usb 6-1: config 0 has no interface number 0 [ 525.414723][ T1219] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 525.425271][ T1219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.438888][ T6431] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.463799][ T1219] usb 6-1: config 0 descriptor?? [ 525.470522][T13899] CUSE: info not properly terminated [ 525.479563][ T6431] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.510039][ T6431] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.558943][ T6431] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.599972][ T6431] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.648955][ T6431] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.680574][ T6431] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 525.687327][T10303] usb 6-1: USB disconnect, device number 115 [ 525.706587][ T6431] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 525.726669][ T6431] usb 5-1: USB disconnect, device number 116 [ 525.839424][T10304] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 526.001417][T10304] usb 4-1: Using ep0 maxpacket: 16 [ 526.008324][T10304] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 526.024552][T10304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 526.042864][T13905] fuse: Unknown parameter '' [ 526.048120][T10304] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 526.062066][T10304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.071122][T10304] usb 4-1: Product: syz [ 526.075336][T10304] usb 4-1: Manufacturer: syz [ 526.087862][T10304] usb 4-1: SerialNumber: syz [ 526.102871][T10304] usb 4-1: config 0 descriptor?? [ 526.117677][T10304] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 526.164095][T10304] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 526.318886][ T6431] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 526.912975][T13928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2022'. [ 527.111042][ T1219] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 527.271832][T10304] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 527.278223][T10304] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 527.285650][ T1219] usb 1-1: Using ep0 maxpacket: 32 [ 527.295433][ T1219] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 527.313922][T10304] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 527.314078][ T1219] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 527.331849][T10304] em28xx 4-1:0.0: No AC97 audio processor [ 527.391965][ T1219] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 527.412850][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.432878][ T1219] usb 1-1: Product: syz [ 527.443005][ T1219] usb 1-1: Manufacturer: syz [ 527.481645][ T1219] usb 1-1: SerialNumber: syz [ 527.501544][ T1219] usb 1-1: config 0 descriptor?? [ 527.756796][T13928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.766016][T13928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.815437][T13932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.825325][T13932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.108298][T13943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2026'. [ 528.448838][ T6431] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 528.620775][ T6431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.632093][ T6431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.642179][ T6431] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 528.651558][ T6431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.664007][ T6431] usb 5-1: config 0 descriptor?? [ 528.877329][ T6431] hid_parser_main: 1221 callbacks suppressed [ 528.877353][ T6431] playstation 0003:054C:0DF2.002A: unknown main item tag 0x0 [ 528.892985][ T6431] playstation 0003:054C:0DF2.002A: unknown main item tag 0x0 [ 528.895074][T13947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.900490][ T6431] playstation 0003:054C:0DF2.002A: unknown main item tag 0x0 [ 528.913343][T13947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.916463][ T6431] playstation 0003:054C:0DF2.002A: unknown main item tag 0x0 [ 528.949778][ T6431] playstation 0003:054C:0DF2.002A: unknown main item tag 0x0 [ 528.979722][ T6431] playstation 0003:054C:0DF2.002A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 529.073505][ T6431] playstation 0003:054C:0DF2.002A: Failed to retrieve feature with reportID 9: -71 [ 529.083103][ T6431] playstation 0003:054C:0DF2.002A: Failed to retrieve DualSense pairing info: -71 [ 529.093464][ T6431] playstation 0003:054C:0DF2.002A: Failed to get MAC address from DualSense [ 529.103084][ T6431] playstation 0003:054C:0DF2.002A: Failed to create dualsense. [ 529.114749][ T6431] playstation 0003:054C:0DF2.002A: probe with driver playstation failed with error -71 [ 529.129141][ T6431] usb 5-1: USB disconnect, device number 118 [ 529.353353][ T1219] usb 4-1: USB disconnect, device number 127 [ 529.383346][ T1219] em28xx 4-1:0.0: Disconnecting em28xx [ 529.393019][ T1219] em28xx 4-1:0.0: Freeing device [ 529.440139][ T6431] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 529.551838][ T984] usb 1-1: USB disconnect, device number 18 [ 529.578852][ T6431] usb 5-1: device descriptor read/64, error -71 [ 529.828971][ T6431] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 529.979387][ T6431] usb 5-1: device descriptor read/64, error -71 [ 530.099088][ T6431] usb usb5-port1: attempt power cycle [ 530.440689][ T6431] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 530.471342][ T6431] usb 5-1: device descriptor read/8, error -71 [ 530.710001][ T6431] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 530.721850][T13980] ipip0: entered promiscuous mode [ 530.727025][T13980] ipip0: entered allmulticast mode [ 530.743312][ T6431] usb 5-1: device descriptor read/8, error -71 [ 530.870060][ T6431] usb usb5-port1: unable to enumerate USB device [ 531.225049][T14003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2040'. [ 531.318889][ T6431] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 531.468932][ T6431] usb 4-1: Using ep0 maxpacket: 16 [ 531.479336][T10304] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 531.489601][ T6431] usb 4-1: config 0 has no interfaces? [ 531.499352][ T6431] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 531.514862][ T6431] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 531.523357][ T6431] usb 4-1: Manufacturer: syz [ 531.534525][ T6431] usb 4-1: config 0 descriptor?? [ 531.629852][T10304] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 531.638624][T10304] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.648187][T10304] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.659884][T10304] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.667955][T10304] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.677304][T10304] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.689394][T10304] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.698001][T10304] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.707640][T10304] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.719188][T10304] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.726688][T10304] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.736011][T10304] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.747817][T10304] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.760538][T10304] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.818972][T10304] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.831904][T10304] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.840722][T10304] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.851127][T10304] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.863211][T10304] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.881440][T13990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2037'. [ 531.896506][T10304] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.908082][T10304] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.942892][T10304] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.952852][T10304] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.962676][T10304] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.974294][T10304] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.984427][T10304] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 531.999943][T10304] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 532.019270][T10304] usb 1-1: Product: syz [ 532.025797][T10304] usb 1-1: Manufacturer: syz [ 532.031989][T10304] usb 1-1: SerialNumber: syz [ 532.042606][T10304] usb 1-1: config 0 descriptor?? [ 532.056342][T10304] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 532.284521][ C0] usb 1-1: yurex_control_callback - control failed: -2 [ 532.618793][ T6431] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 532.788794][ T6431] usb 5-1: Using ep0 maxpacket: 8 [ 532.800457][ T6431] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 532.818025][ T6431] usb 5-1: config 179 has no interface number 0 [ 532.824514][ T6431] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 532.835948][ T6431] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 532.847275][ T6431] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 532.858900][ T6431] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 532.872385][ T6431] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 532.881931][ T6431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.913223][T14015] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 533.149471][ T6431] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input51 [ 533.352385][ T6431] usb 5-1: USB disconnect, device number 123 [ 533.352455][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 533.352507][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 533.460825][T14017] loop2: detected capacity change from 0 to 7 [ 533.728781][ T6431] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 533.865834][ T1219] usb 4-1: USB disconnect, device number 2 [ 533.902965][ T6431] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 533.915240][ T6431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.935640][ T6431] usb 5-1: Product: syz [ 533.941076][ T6431] usb 5-1: Manufacturer: syz [ 533.946911][ T6431] usb 5-1: SerialNumber: syz [ 533.956605][ T6431] usb 5-1: config 0 descriptor?? [ 534.173899][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.210631][ T984] usb 1-1: USB disconnect, device number 19 [ 534.220086][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.253573][ T984] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 534.379396][ T1219] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 534.494261][ T6431] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 534.524097][ T6431] usb 5-1: USB disconnect, device number 124 [ 534.548258][ T1219] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 534.580688][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.602129][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.629646][ T1219] usb 4-1: Product: syz [ 534.633943][ T1219] usb 4-1: Manufacturer: syz [ 534.650299][ T1219] usb 4-1: SerialNumber: syz [ 534.848823][ T984] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 534.895412][ T1219] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 534.941031][ T1219] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 534.971833][ T1219] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 535.013079][T14066] netlink: 'syz.2.2055': attribute type 46 has an invalid length. [ 535.041117][ T1219] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 535.078815][ T984] usb 6-1: Using ep0 maxpacket: 32 [ 535.092121][ T1219] usb 4-1: USB disconnect, device number 3 [ 535.105119][ T984] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 535.126613][T14070] binder: BINDER_SET_CONTEXT_MGR already set [ 535.147892][ T984] usb 6-1: config 1 has no interface number 0 [ 535.171703][T14072] binder: 14069:14072 ioctl b704 200000000140 returned -22 [ 535.179718][ T984] usb 6-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 535.180213][T14070] binder: 14069:14070 ioctl 4018620d 200000000040 returned -16 [ 535.199432][T14072] binder_alloc: 14069: binder_alloc_buf, no vma [ 535.206490][ T984] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 535.226383][ T984] usb 6-1: config 1 interface 236 has no altsetting 0 [ 535.275116][ T984] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 535.296138][ T984] usb 6-1: config 1 has no interface number 0 [ 535.323443][ T984] usb 6-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 535.452438][ T984] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 535.477423][ T984] usb 6-1: config 1 interface 236 has no altsetting 0 [ 535.499631][ T984] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 535.648814][ T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.677770][ T984] usb 6-1: Product: syz [ 535.707517][ T984] usb 6-1: Manufacturer: syz [ 535.729239][ T984] usb 6-1: SerialNumber: syz [ 535.748876][ T6431] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 535.757897][ T984] ti_usb_3410_5052 6-1:1.236: TI USB 5052 2 port adapter converter detected [ 535.920480][ T6431] usb 4-1: config 0 has no interfaces? [ 535.929332][ T6431] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 535.966699][ T6431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.049451][ T6431] usb 4-1: Product: syz [ 536.053651][ T6431] usb 4-1: Manufacturer: syz [ 536.058250][ T6431] usb 4-1: SerialNumber: syz [ 536.268531][T14095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.287756][T14095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.300246][T14094] xt_socket: unknown flags 0xc [ 536.310841][ T6431] usb 4-1: config 0 descriptor?? [ 536.885929][T14071] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.907834][T14071] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 537.812426][T10304] usb 6-1: USB disconnect, device number 116 [ 537.952596][T14106] loop9: detected capacity change from 0 to 7 [ 537.974797][T14106] Dev loop9: unable to read RDB block 7 [ 537.983116][T14106] loop9: unable to read partition table [ 537.989828][T14106] loop9: partition table beyond EOD, truncated [ 537.996090][T14106] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 538.064174][ T1219] usb 4-1: USB disconnect, device number 4 [ 538.918801][ T6431] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 539.089916][ T6431] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 539.101101][ T6431] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 539.149394][ T1219] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 539.197505][ T6431] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.237154][ T6431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.274034][T14112] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 539.303123][ T6431] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.307800][ T1219] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 539.349420][ T1219] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 539.373788][ T1219] usb 4-1: Product: syz [ 539.380527][ T1219] usb 4-1: SerialNumber: syz [ 539.400701][ T1219] usb 4-1: config 0 descriptor?? [ 539.625623][ T1219] hso 4-1:0.0: Failed to find BULK IN ep [ 539.796539][T14147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.824815][ T6431] usb 4-1: USB disconnect, device number 5 [ 539.848421][T14147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.029429][ T1219] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 540.159377][ T1219] usb 1-1: device descriptor read/64, error -71 [ 540.209203][T10304] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 540.359456][T10304] usb 5-1: Using ep0 maxpacket: 8 [ 540.370820][T10304] usb 5-1: unable to get BOS descriptor or descriptor too short [ 540.390790][T10304] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 540.401548][ T1219] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 540.413143][T10304] usb 5-1: config 1 has no interface number 1 [ 540.421130][T10304] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 540.434932][T10304] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 540.449316][T10304] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 540.460797][T10304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.472931][T10304] usb 5-1: Product: syz [ 540.477253][T10304] usb 5-1: Manufacturer: syz [ 540.482841][T10304] usb 5-1: SerialNumber: syz [ 540.488232][T14160] netlink: 'syz.3.2073': attribute type 2 has an invalid length. [ 540.559912][ T1219] usb 1-1: device descriptor read/64, error -71 [ 540.669383][ T1219] usb usb1-port1: attempt power cycle [ 540.749412][T10303] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 540.762643][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2072'. [ 540.840086][T10304] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 540.856789][T10304] usb 5-1: USB disconnect, device number 125 [ 540.881014][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 540.899702][T10303] usb 4-1: Using ep0 maxpacket: 8 [ 540.915157][T10303] usb 4-1: unable to get BOS descriptor or descriptor too short [ 540.924443][T10303] usb 4-1: config 8 has an invalid descriptor of length 121, skipping remainder of the config [ 540.935437][T10303] usb 4-1: config 8 interface 0 altsetting 7 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 540.948028][T10303] usb 4-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.962065][T10303] usb 4-1: config 8 interface 0 has no altsetting 0 [ 540.971398][T10303] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 540.981162][T10303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.989619][T10303] usb 4-1: Product: syz [ 540.993909][T10303] usb 4-1: Manufacturer: syz [ 540.998506][T10303] usb 4-1: SerialNumber: syz [ 541.019403][ T1219] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 541.040420][ T1219] usb 1-1: device descriptor read/8, error -71 [ 541.097491][ T6431] usb 6-1: USB disconnect, device number 117 [ 541.161172][T14163] netlink: 'syz.5.2074': attribute type 10 has an invalid length. [ 541.170043][T14163] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 541.214693][T10303] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 541.223057][T10303] usb 4-1: selecting invalid altsetting 0 [ 541.251429][T10303] usb 4-1: USB disconnect, device number 6 [ 541.279227][ T6132] udevd[6132]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.282981][ T1219] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 541.340118][ T1219] usb 1-1: device descriptor read/8, error -71 [ 541.449366][ T1219] usb usb1-port1: unable to enumerate USB device [ 541.648932][ T6431] usb 5-1: new low-speed USB device number 126 using dummy_hcd [ 541.803233][ T6431] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 541.812807][ T6431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.826307][ T6431] usb 5-1: config 0 descriptor?? [ 542.037663][T14166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.067667][T14166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.757021][ T6431] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 542.773658][ T6431] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 542.819082][ T6431] asix 5-1:0.0: probe with driver asix failed with error -71 [ 542.831536][ T6431] usb 5-1: USB disconnect, device number 126 [ 543.177318][T14198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2085'. [ 543.236252][T14200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2085'. [ 543.359311][ T6431] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 543.521267][ T6431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.532805][ T6431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.550723][ T6431] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 543.572306][ T6431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.610325][ T6431] usb 1-1: config 0 descriptor?? [ 544.050149][ T6431] sony 0003:054C:024B.002B: unexpected long global item [ 544.058537][ T6431] sony 0003:054C:024B.002B: parse failed [ 544.067376][ T6431] sony 0003:054C:024B.002B: probe with driver sony failed with error -22 [ 544.079698][ T984] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 544.253671][ T6431] usb 1-1: USB disconnect, device number 24 [ 544.263835][ T984] usb 6-1: Using ep0 maxpacket: 16 [ 544.280641][ T984] usb 6-1: config 0 has no interfaces? [ 544.287373][ T984] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 544.296919][ T984] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 544.307320][ T984] usb 6-1: Manufacturer: syz [ 544.343442][ T984] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 544.353642][ T984] usb 6-1: no configuration chosen from 1 choice [ 545.039102][T10303] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 545.190055][T10303] usb 1-1: Using ep0 maxpacket: 16 [ 545.197486][T10303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.210566][T10303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.221920][T10303] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.236305][T10303] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 545.248895][T10303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.266254][T10303] usb 1-1: config 0 descriptor?? [ 545.284038][T10303] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input52 [ 545.332717][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 545.332733][ T30] audit: type=1326 audit(1760444337.175:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 545.332779][ T30] audit: type=1326 audit(1760444337.175:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 545.332820][ T30] audit: type=1326 audit(1760444337.175:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 545.332863][ T30] audit: type=1326 audit(1760444337.175:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 545.332904][ T30] audit: type=1326 audit(1760444337.175:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 545.332944][ T30] audit: type=1326 audit(1760444337.175:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 545.332982][ T30] audit: type=1326 audit(1760444337.185:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 545.333021][ T30] audit: type=1326 audit(1760444337.185:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 545.333061][ T30] audit: type=1326 audit(1760444337.185:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 545.333099][ T30] audit: type=1326 audit(1760444337.185:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14222 comm="syz.4.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933a98eec9 code=0x7ffc0000 [ 545.340103][ T5182] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 545.341523][ T5182] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 545.341918][ T5182] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 545.342554][ T5182] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 545.435731][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.467795][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.561786][T14216] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 545.617756][ T6126] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 545.665907][ T984] usb 1-1: USB disconnect, device number 25 [ 545.671364][ T5182] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 546.650443][T10303] usb 6-1: USB disconnect, device number 118 [ 547.069466][T10303] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 547.080123][ T1219] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 547.239427][ T1219] usb 6-1: Using ep0 maxpacket: 16 [ 547.246078][ T1219] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 547.309213][ T1219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 547.324109][ T1219] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 547.333860][ T1219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.344301][ T1219] usb 6-1: Product: syz [ 547.354243][ T1219] usb 6-1: Manufacturer: syz [ 547.360937][ T1219] usb 6-1: SerialNumber: syz [ 547.377043][ T1219] usb 6-1: config 0 descriptor?? [ 547.397724][ T1219] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 547.432409][ T1219] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 548.011039][ T1219] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 548.653444][T14305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2113'. [ 548.786825][ T1219] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 548.815001][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2114'. [ 548.832276][ T1219] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 548.847047][ T1219] em28xx 6-1:0.0: No AC97 audio processor [ 548.855878][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 548.871775][ T1219] usb 6-1: USB disconnect, device number 119 [ 548.878097][T14307] tc_dump_action: action bad kind [ 548.885953][ T1219] em28xx 6-1:0.0: Disconnecting em28xx [ 548.920226][ T1219] em28xx 6-1:0.0: Freeing device [ 549.328779][ T984] usb 5-1: new low-speed USB device number 127 using dummy_hcd [ 549.414598][T14323] Failed to get privilege flags for destination (handle=0x2:0x25) [ 549.449861][T12031] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.459550][ T76] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.468529][ T76] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.477808][ T76] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.619556][ T984] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 549.677597][ T984] usb 5-1: config 0 has no interface number 0 [ 549.725974][ T984] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 549.752186][ T984] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 549.795984][ T984] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 549.807269][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.819558][ T984] usb 5-1: config 0 descriptor?? [ 549.825204][T14314] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.836266][ T984] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 550.038847][ T984] usb 5-1: USB disconnect, device number 127 [ 550.044969][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 550.318982][ T6431] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 550.471368][ T6431] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.482634][ T6431] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.502339][ T6431] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 550.517428][ T6431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.565620][ T6431] usb 6-1: config 0 descriptor?? [ 550.787812][ T6431] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 550.796970][ T6431] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 550.806366][ T6431] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 550.821822][ T6431] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 550.839435][ T6431] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 550.877016][ T6431] playstation 0003:054C:0DF2.002C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 550.928108][T14350] netlink: 'syz.4.2125': attribute type 12 has an invalid length. [ 550.959440][ T6431] playstation 0003:054C:0DF2.002C: Failed to retrieve feature with reportID 9: -71 [ 551.024920][ T6431] playstation 0003:054C:0DF2.002C: Failed to retrieve DualSense pairing info: -71 [ 551.025163][T14350] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2125'. [ 551.123273][ T6431] playstation 0003:054C:0DF2.002C: Failed to get MAC address from DualSense [ 551.142910][ T6431] playstation 0003:054C:0DF2.002C: Failed to create dualsense. [ 551.207632][ T6431] playstation 0003:054C:0DF2.002C: probe with driver playstation failed with error -71 [ 551.277913][ T6431] usb 6-1: USB disconnect, device number 120 [ 551.739354][ T1219] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 551.797605][T14372] netlink: 'syz.2.2131': attribute type 5 has an invalid length. [ 551.931082][ T1219] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.948236][ T1219] usb 1-1: config 0 interface 0 has no altsetting 0 [ 551.969460][ T1219] usb 1-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 552.000280][ T1219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.057441][ T1219] usb 1-1: config 0 descriptor?? [ 552.505223][ T1219] hid-generic 0003:0463:1215.002D: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.0-1/input0 [ 552.701826][T14366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.729971][T14366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.771030][ T1219] usb 1-1: USB disconnect, device number 27 [ 553.380997][T14398] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2138'. [ 554.110988][T14413] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2143'. [ 554.448821][ T6431] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 554.512053][T14430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.662569][ T6431] usb 4-1: Using ep0 maxpacket: 32 [ 554.682199][ T6431] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 554.696270][ T6431] usb 4-1: config 0 has no interface number 0 [ 554.705782][ T6431] usb 4-1: config 0 interface 89 has no altsetting 0 [ 554.719458][ T6431] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 554.737631][ T6431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.747215][ T6431] usb 4-1: Product: syz [ 554.753341][ T6431] usb 4-1: Manufacturer: syz [ 554.853070][ T6431] usb 4-1: SerialNumber: syz [ 554.869336][ T6431] usb 4-1: config 0 descriptor?? [ 554.881555][ T6431] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 554.949852][ T6431] em28xx 4-1:0.89: Video interface 89 found: bulk [ 555.212690][T14439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2151'. [ 555.289534][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2146'. [ 555.290864][T14439] bond0: entered promiscuous mode [ 555.307195][T14439] bond_slave_0: entered promiscuous mode [ 555.349857][T14439] bond_slave_1: entered promiscuous mode [ 555.358843][ T984] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 555.366653][T14439] bond0: left promiscuous mode [ 555.465684][T14439] bond_slave_0: left promiscuous mode [ 555.485153][T14439] bond_slave_1: left promiscuous mode [ 555.501084][ T6431] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 555.509622][ T984] usb 1-1: device descriptor read/64, error -71 [ 555.565546][T14444] tipc: Enabling of bearer rejected, already enabled [ 555.768881][ T984] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 555.900767][ T984] usb 1-1: device descriptor read/64, error -71 [ 556.011209][ T984] usb usb1-port1: attempt power cycle [ 556.300068][ T6439] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 556.361558][ T984] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 556.403374][ T984] usb 1-1: device descriptor read/8, error -71 [ 556.527885][ T6439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.543460][ T6439] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 556.558841][ T6431] em28xx 4-1:0.89: AC97 command still being executed: not handled properly! [ 556.571591][ T6439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.638575][ T6439] usb 6-1: Product: syz [ 556.695832][ T6439] usb 6-1: Manufacturer: syz [ 556.728031][ T6439] usb 6-1: SerialNumber: syz [ 556.742026][ T6431] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 556.751834][ T984] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 556.774857][ T6431] em28xx 4-1:0.89: board has no eeprom [ 556.781416][ T6439] usb 6-1: config 0 descriptor?? [ 556.790268][ T984] usb 1-1: device descriptor read/8, error -71 [ 556.801305][ T6439] uvcvideo 6-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 556.810858][ T6439] uvcvideo 6-1:0.0: No valid video chain found. [ 556.838808][ T6431] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 556.846087][ T6431] em28xx 4-1:0.89: analog set to bulk mode. [ 556.855179][ T813] em28xx 4-1:0.89: Registering V4L2 extension [ 556.896090][ T6431] usb 4-1: USB disconnect, device number 7 [ 556.907322][ T813] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 556.917338][ T984] usb usb1-port1: unable to enumerate USB device [ 556.937765][ T6431] em28xx 4-1:0.89: Disconnecting em28xx [ 556.946246][ T813] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 556.965640][ T813] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 556.975758][ T813] em28xx 4-1:0.89: No AC97 audio processor [ 556.981673][ T6434] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 556.998563][ T813] usb 4-1: Decoder not found [ 557.020122][ T813] em28xx 4-1:0.89: failed to create media graph [ 557.040164][ T813] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 557.072350][T14461] ================================================================== [ 557.080586][T14461] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 557.087965][T14461] Read of size 8 at addr ffff88807dd6c740 by task v4l_id/14461 [ 557.095498][T14461] [ 557.097810][T14461] CPU: 0 UID: 0 PID: 14461 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 557.097823][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 557.097830][T14461] Call Trace: [ 557.097837][T14461] [ 557.097843][T14461] dump_stack_lvl+0x189/0x250 [ 557.097858][T14461] ? __virt_addr_valid+0x1c8/0x5c0 [ 557.097869][T14461] ? rcu_is_watching+0x15/0xb0 [ 557.097883][T14461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.097892][T14461] ? rcu_is_watching+0x15/0xb0 [ 557.097905][T14461] ? lock_release+0x4b/0x3e0 [ 557.097916][T14461] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 557.097931][T14461] ? __virt_addr_valid+0x1c8/0x5c0 [ 557.097941][T14461] ? __virt_addr_valid+0x4a5/0x5c0 [ 557.097951][T14461] print_report+0xca/0x240 [ 557.097962][T14461] ? v4l2_fh_open+0xac/0x420 [ 557.097971][T14461] kasan_report+0x118/0x150 [ 557.097983][T14461] ? v4l2_fh_open+0xac/0x420 [ 557.097993][T14461] v4l2_fh_open+0xac/0x420 [ 557.098002][T14461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 557.098017][T14461] em28xx_v4l2_open+0x157/0x9a0 [ 557.098034][T14461] v4l2_open+0x1bf/0x3a0 [ 557.098045][T14461] chrdev_open+0x4cc/0x5e0 [ 557.098057][T14461] ? __pfx_chrdev_open+0x10/0x10 [ 557.098069][T14461] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 557.098083][T14461] ? __pfx_chrdev_open+0x10/0x10 [ 557.098094][T14461] do_dentry_open+0x953/0x13f0 [ 557.098110][T14461] vfs_open+0x3b/0x340 [ 557.098121][T14461] ? path_openat+0x2ecd/0x3830 [ 557.098131][T14461] path_openat+0x2ee5/0x3830 [ 557.098147][T14461] ? __pfx_path_openat+0x10/0x10 [ 557.098159][T14461] do_filp_open+0x1fa/0x410 [ 557.098168][T14461] ? __lock_acquire+0xab9/0xd20 [ 557.098179][T14461] ? __pfx_do_filp_open+0x10/0x10 [ 557.098192][T14461] ? _raw_spin_unlock+0x28/0x50 [ 557.098205][T14461] ? alloc_fd+0x64c/0x6c0 [ 557.098218][T14461] do_sys_openat2+0x121/0x1c0 [ 557.098231][T14461] ? __pfx_do_sys_openat2+0x10/0x10 [ 557.098243][T14461] ? __rseq_handle_notify_resume+0x384/0x1220 [ 557.098259][T14461] __x64_sys_openat+0x138/0x170 [ 557.098273][T14461] do_syscall_64+0xfa/0xfa0 [ 557.098284][T14461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.098294][T14461] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 557.098304][T14461] ? clear_bhb_loop+0x60/0xb0 [ 557.098314][T14461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.098325][T14461] RIP: 0033:0x7f7b3e2a7407 [ 557.098336][T14461] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 557.098345][T14461] RSP: 002b:00007ffd85628570 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 557.098357][T14461] RAX: ffffffffffffffda RBX: 00007f7b3e972880 RCX: 00007f7b3e2a7407 [ 557.098365][T14461] RDX: 0000000000000000 RSI: 00007ffd85628f1c RDI: ffffffffffffff9c [ 557.098372][T14461] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 557.098378][T14461] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 557.098384][T14461] R13: 00007ffd856287c0 R14: 00007f7b3ead9000 R15: 0000556ff20c04d8 [ 557.098395][T14461] [ 557.098399][T14461] [ 557.182533][T14459] syz_tun: entered allmulticast mode [ 557.185949][T14461] Allocated by task 813: [ 557.185966][T14461] kasan_save_track+0x3e/0x80 [ 557.199182][T14459] pimreg: entered allmulticast mode [ 557.201172][T14461] __kasan_kmalloc+0x93/0xb0 [ 557.201200][T14461] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 557.209930][T14458] syz_tun: left allmulticast mode [ 557.214751][T14461] em28xx_v4l2_init+0x10b/0x2e70 [ 557.214779][T14461] em28xx_init_extension+0x120/0x1c0 [ 557.221345][T14458] pimreg: left allmulticast mode [ 557.226001][T14461] process_scheduled_works+0xae1/0x17b0 [ 557.453534][T14461] worker_thread+0x8a0/0xda0 [ 557.458115][T14461] kthread+0x711/0x8a0 [ 557.462166][T14461] ret_from_fork+0x4bc/0x870 [ 557.466747][T14461] ret_from_fork_asm+0x1a/0x30 [ 557.471494][T14461] [ 557.473799][T14461] Freed by task 813: [ 557.477686][T14461] kasan_save_track+0x3e/0x80 [ 557.482356][T14461] __kasan_save_free_info+0x46/0x50 [ 557.487567][T14461] __kasan_slab_free+0x5c/0x80 [ 557.492431][T14461] kfree+0x19a/0x6d0 [ 557.496333][T14461] em28xx_v4l2_init+0x1683/0x2e70 [ 557.501358][T14461] em28xx_init_extension+0x120/0x1c0 [ 557.506648][T14461] process_scheduled_works+0xae1/0x17b0 [ 557.512203][T14461] worker_thread+0x8a0/0xda0 [ 557.516811][T14461] kthread+0x711/0x8a0 [ 557.520872][T14461] ret_from_fork+0x4bc/0x870 [ 557.525464][T14461] ret_from_fork_asm+0x1a/0x30 [ 557.530233][T14461] [ 557.532553][T14461] The buggy address belongs to the object at ffff88807dd6c000 [ 557.532553][T14461] which belongs to the cache kmalloc-8k of size 8192 [ 557.546588][T14461] The buggy address is located 1856 bytes inside of [ 557.546588][T14461] freed 8192-byte region [ffff88807dd6c000, ffff88807dd6e000) [ 557.560554][T14461] [ 557.562897][T14461] The buggy address belongs to the physical page: [ 557.569305][T14461] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dd68 [ 557.578055][T14461] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 557.586543][T14461] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 557.594083][T14461] page_type: f5(slab) [ 557.598055][T14461] raw: 00fff00000000040 ffff88813ffa7280 ffffea0000ca6200 dead000000000002 [ 557.606624][T14461] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 557.615183][T14461] head: 00fff00000000040 ffff88813ffa7280 ffffea0000ca6200 dead000000000002 [ 557.623837][T14461] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 557.632494][T14461] head: 00fff00000000003 ffffea0001f75a01 00000000ffffffff 00000000ffffffff [ 557.641149][T14461] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 557.649794][T14461] page dumped because: kasan: bad access detected [ 557.656197][T14461] page_owner tracks the page as allocated [ 557.661901][T14461] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12490, tgid 12480 (syz.0.1646), ts 437368273702, free_ts 437337334076 [ 557.683448][T14461] post_alloc_hook+0x240/0x2a0 [ 557.688218][T14461] get_page_from_freelist+0x2365/0x2440 [ 557.693768][T14461] __alloc_frozen_pages_noprof+0x181/0x370 [ 557.699567][T14461] alloc_pages_mpol+0x232/0x4a0 [ 557.704407][T14461] allocate_slab+0x96/0x3a0 [ 557.708914][T14461] ___slab_alloc+0xe94/0x18a0 [ 557.713581][T14461] __slab_alloc+0x65/0x100 [ 557.717979][T14461] __kmalloc_cache_noprof+0x411/0x6f0 [ 557.723348][T14461] mr_table_alloc+0x65/0x250 [ 557.727933][T14461] ipmr_net_init+0x21a/0x390 [ 557.732523][T14461] ops_init+0x35c/0x5c0 [ 557.736688][T14461] setup_net+0xfe/0x320 [ 557.740842][T14461] copy_net_ns+0x34e/0x4e0 [ 557.745259][T14461] create_new_namespaces+0x3f3/0x720 [ 557.750537][T14461] unshare_nsproxy_namespaces+0x11c/0x170 [ 557.756237][T14461] ksys_unshare+0x4c8/0x8c0 [ 557.760737][T14461] page last free pid 6047 tgid 6047 stack trace: [ 557.767041][T14461] __free_frozen_pages+0xbc4/0xd30 [ 557.772199][T14461] __put_partials+0x146/0x170 [ 557.776854][T14461] put_cpu_partial+0x1f2/0x2e0 [ 557.781612][T14461] __slab_free+0x2b9/0x390 [ 557.786028][T14461] qlist_free_all+0x97/0x140 [ 557.790612][T14461] kasan_quarantine_reduce+0x148/0x160 [ 557.796057][T14461] __kasan_slab_alloc+0x22/0x80 [ 557.800891][T14461] kmem_cache_alloc_noprof+0x367/0x6e0 [ 557.806346][T14461] getname_flags+0xb8/0x540 [ 557.810872][T14461] vfs_fstatat+0x43/0x170 [ 557.815202][T14461] __x64_sys_newfstatat+0x116/0x190 [ 557.820390][T14461] do_syscall_64+0xfa/0xfa0 [ 557.824883][T14461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.830777][T14461] [ 557.833090][T14461] Memory state around the buggy address: [ 557.838710][T14461] ffff88807dd6c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.846766][T14461] ffff88807dd6c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.854817][T14461] >ffff88807dd6c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.862854][T14461] ^ [ 557.869000][T14461] ffff88807dd6c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.877038][T14461] ffff88807dd6c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 557.885086][T14461] ================================================================== [ 557.905964][T14461] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 557.913180][T14461] CPU: 0 UID: 0 PID: 14461 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 557.922194][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 557.932239][T14461] Call Trace: [ 557.935507][T14461] [ 557.938428][T14461] dump_stack_lvl+0x99/0x250 [ 557.943027][T14461] ? __asan_memcpy+0x40/0x70 [ 557.947621][T14461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.952815][T14461] ? __pfx__printk+0x10/0x10 [ 557.957411][T14461] vpanic+0x237/0x6d0 [ 557.961430][T14461] ? __pfx_vpanic+0x10/0x10 [ 557.965930][T14461] ? preempt_schedule+0xae/0xc0 [ 557.970782][T14461] ? __pfx_preempt_schedule+0x10/0x10 [ 557.976149][T14461] panic+0xb9/0xc0 [ 557.979865][T14461] ? __pfx_panic+0x10/0x10 [ 557.984274][T14461] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 557.990166][T14461] ? is_module_address+0x17/0xf0 [ 557.995092][T14461] ? v4l2_fh_open+0xac/0x420 [ 557.999665][T14461] check_panic_on_warn+0x89/0xb0 [ 558.004598][T14461] ? v4l2_fh_open+0xac/0x420 [ 558.009172][T14461] end_report+0x78/0x160 [ 558.013409][T14461] kasan_report+0x129/0x150 [ 558.017901][T14461] ? v4l2_fh_open+0xac/0x420 [ 558.022500][T14461] v4l2_fh_open+0xac/0x420 [ 558.026907][T14461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 558.032875][T14461] em28xx_v4l2_open+0x157/0x9a0 [ 558.037732][T14461] v4l2_open+0x1bf/0x3a0 [ 558.041963][T14461] chrdev_open+0x4cc/0x5e0 [ 558.046373][T14461] ? __pfx_chrdev_open+0x10/0x10 [ 558.051306][T14461] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 558.057626][T14461] ? __pfx_chrdev_open+0x10/0x10 [ 558.062561][T14461] do_dentry_open+0x953/0x13f0 [ 558.067327][T14461] vfs_open+0x3b/0x340 [ 558.071389][T14461] ? path_openat+0x2ecd/0x3830 [ 558.076154][T14461] path_openat+0x2ee5/0x3830 [ 558.080755][T14461] ? __pfx_path_openat+0x10/0x10 [ 558.085680][T14461] do_filp_open+0x1fa/0x410 [ 558.090182][T14461] ? __lock_acquire+0xab9/0xd20 [ 558.095029][T14461] ? __pfx_do_filp_open+0x10/0x10 [ 558.100053][T14461] ? _raw_spin_unlock+0x28/0x50 [ 558.104902][T14461] ? alloc_fd+0x64c/0x6c0 [ 558.109255][T14461] do_sys_openat2+0x121/0x1c0 [ 558.113934][T14461] ? __pfx_do_sys_openat2+0x10/0x10 [ 558.119131][T14461] ? __rseq_handle_notify_resume+0x384/0x1220 [ 558.125202][T14461] __x64_sys_openat+0x138/0x170 [ 558.130133][T14461] do_syscall_64+0xfa/0xfa0 [ 558.134717][T14461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.141201][T14461] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 558.147347][T14461] ? clear_bhb_loop+0x60/0xb0 [ 558.152018][T14461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.157893][T14461] RIP: 0033:0x7f7b3e2a7407 [ 558.162296][T14461] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 558.181889][T14461] RSP: 002b:00007ffd85628570 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 558.190320][T14461] RAX: ffffffffffffffda RBX: 00007f7b3e972880 RCX: 00007f7b3e2a7407 [ 558.198650][T14461] RDX: 0000000000000000 RSI: 00007ffd85628f1c RDI: ffffffffffffff9c [ 558.206607][T14461] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 558.214649][T14461] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 558.222607][T14461] R13: 00007ffd856287c0 R14: 00007f7b3ead9000 R15: 0000556ff20c04d8 [ 558.230583][T14461] [ 558.233845][T14461] Kernel Offset: disabled [ 558.238154][T14461] Rebooting in 86400 seconds..