last executing test programs: 2m17.382688139s ago: executing program 3 (id=682): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x96ab9c7d55edd554) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0x10, 0x1) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2m17.147872264s ago: executing program 3 (id=683): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/vmcoreinfo', 0x0, 0x100) read$FUSE(r0, &(0x7f0000006000)={0x2020}, 0x2020) syz_open_dev$usbfs(0x0, 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) pipe(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500060000000c0016"], 0x38}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1408c443360a0108000000000033000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507"], 0x28}}, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m14.727230323s ago: executing program 3 (id=689): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x26, 0x0, 'syz1\x00', 0x2}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e24], [0xe22, 0x4e23]}}, @common=@frag={{0x30}, {[0x80000001], 0xffffff01, 0x2}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r3 = syz_open_dev$hidraw(0x0, 0x7, 0x210000) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000240)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000021d233c24a0842578946150001000000000000000000e0000002000000000000000000000000000000810080000000000a0010"], 0xb8}}, 0x0) r5 = semget(0x3, 0x2, 0x104) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000040)=[0x1ff]) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r6 = socket$inet6(0x10, 0xa, 0x2000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001d00010429bd7000fbdbdf2507000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="08000f000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$SNDCTL_DSP_SETFMT(r4, 0x40045010, &(0x7f0000000080)=0xd8eb) close(r0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x28}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r10, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r10, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c) 2m13.765868139s ago: executing program 3 (id=695): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002600)=[{{&(0x7f00000005c0)={0xa, 0x4e22, 0xfffff800, @mcast2, 0xb8}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000600)="b10c674fd59992d5eadb3c3b65c7400de35055d166c39c6dd97154b83474be155584c2f872c9e607c0e1f87433cc39b18d3e65dc27d52bf1fda4295485718c1f906503c689582c8b", 0x48}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="a42bfc118757473afeeafe40b872493a081ae8c5bcc9eaa44cb5a29e7d9de2224a45ba2d99c0ad273e4ce488175ec1eee409a64c2562bda3205cc19f915e5e10a0b75f6dfaaa6444ba93b21eeb649a2b09d369f6c2ae310bc55d63ab0e64c8ae8f9bfe3534e4f6faf6472fbd820b801716755bb660c767d7c8a13e9437778792fd8e40bbe0812312", 0x88}, {&(0x7f0000001fc0)="d460f1e5ad2a8fb5537870a05ea3145a4006c239ccd53daeb79a78552f9510424a8b1552985f228a1826d3685b7b88ad4bbd86091333b52e2240700c06f78e11f39dbd7d3c8b32ddc4b61d08509b12b382b913d13331191531f2edfaddb0664cf53ec05fe8bcb5449394b562", 0x6c}, {&(0x7f00000003c0)="79284c948c", 0x5}, {&(0x7f0000002080)="f76d9624996105341a2549f19e5de66ea8fbf55b272427e0f705559fc236ed33d6dfb9c949e1d1f6d6c319faa44e0fd6ffd716d76147818532489547e8bfb39ffb01351be140066f2d8ec28c8e7175996cb0b6d10de67237a9775291c5539fedd766cc4d2c7a590e80cad02ff47e9d0d6c50fd872bdc0f03037a8dd8e4a55a062f495cb711fee7c35049cdaf376f5cda183a27bd8a1b58bf9423543e379e2e92da28b4bb3e32de34312208fdb9ea3128f5737b50ddd327529729", 0xba}, {&(0x7f0000002140)="62158f98d86837706c0e2b13a1c65fbbc74655b46e2198ca879967b358fcd554fa705219b88345381bb51b79780dd95eef1a24afe0709a02c8a3d9f99df3b435d1a774155f628fda1b8723c89dd6e3213b19ecb4fcac81d7caed9cac083a8caff70491013eb4b9b0b52ffc4ea20157e0095e0d16b5ea0ed6a5ef4b9129e5be6f7ddb877a59dcf248bdded00def121bb49d6f", 0x92}, {&(0x7f0000002200)="27b6e12d8061a2cbcad414339c72abf408fe0c0cd0717862ea9bcbce6d87b2932fb7f17830fcadfd67b2523ec3573a0510aaae6928f48c1ad84fc7c9af015255ab195b325ba962e2a72bbfd727bb4812e48b0245ae0ade7f87ef6a417197889cd7e6c6038f41df4086d0ac4885305d2a58724bd41b56101935e6a0a8d77045f99fcf0e380d4dc04a184ef1b855861194f044ab4b65063b144ae1827e8a26a6912923a3db2f0f5b803a47a5332cc9db4a58c5c998d8e62484b2454c94f3318d3c33caea", 0xc3}], 0x8, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x270}}], 0x1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000b40)={0x3, 0x0, 0x3, 0x5, 0x177, &(0x7f0000000740)}) sendmmsg$alg(r7, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2f3252d0a8", 0x5}], 0x1, &(0x7f0000000600)=[@iv={0x18}], 0x18, 0x4000000}], 0x1, 0x900) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000680)=0x2) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r9, &(0x7f0000000140)='.\x00', r8, 0x0, 0x41) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000340)={0x2, {0x29, 0x4326, 0xfffffffffffffff9, 0x8, 0x7fffffffffffffff}}) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f00000006c0)=0x0) r11 = gettid() socket$kcm(0x29, 0x7, 0x0) r12 = getpid() rt_tgsigqueueinfo(r12, r11, 0x11, &(0x7f0000000400)={0x812, 0x9, 0x9}) sendmsg$nl_generic(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000002c40)={0x624, 0x39, 0x400, 0x70bd28, 0x25dfdbfe, {0x3}, [@typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xc, 0x105, 0x0, 0x1, [@typed={0x8, 0xd6, 0x0, 0x0, @pid=r11}]}, @nested={0x149, 0x145, 0x0, 0x1, [@typed={0x8, 0x14c, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x74, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x73}, @generic="0db31a80d44465551f9a65e600e44ef9c12d763eaf451381", @nested={0x4, 0x114}, @generic="95dbc6159a30398c70a80d5024ef1190d8c63afc3161b00cb34838f46e1c0608a3064127f76acdf8c0ad3e882f680f90281eec4319acc7c7e657e6da007a9f5e50", @nested={0x4, 0xe9}, @generic="be062ffead7de683dca686e790f60dcf7e401d46b9b101f29d651eb6c16c199e76ab1738f4a8b86b8338442cc549cea0ff1ef3916fa1145c503941f4b9553e520ab5f03b4008aca9d5462dbe3dd80084d841b086560b9d303d2b64ec901c08db2577e0c1b18433f353a3d146e98aec34ea50f70bb10a7c701e4bb33c2145f1f04020e27b53fe1e5522485ec2b68694561ece5238069609597668f7a1b8118f863d0a8b23845d385257141e0a406e144c31167547dad4644d9ea4f0454c94e3f48e157684e170c884672354c48505a436"]}, @nested={0x115, 0x146, 0x0, 0x1, [@generic="8252e430e4d6d52703cc23ccc8aeac7a3fdcf531900f9c4ce31515676b195359127cdd8dcb0681e4f03628845ce50d08b3338791c0548b08c9a93b23155088731cc5f4fdfb54d912fc8d", @generic="f7c9c6bdb21768252b52974d8423a999cb0291e5c794cfd0c5ec5a6d9fe054eaafc41fd269e11af4cd86289b28edcc00", @typed={0x8, 0xed, 0x0, 0x0, @u32=0x4}, @generic="ba73ea13d2fe07b886c18c563c7741539a8cd831", @typed={0x13, 0x49, 0x0, 0x0, @str=']{}%$:#@}\xfd^&-*\x00'}, @nested={0x4, 0xe5}, @generic="4550a9a43d67e4716710cec9499eca79ec13874547d9c021a513345cd7a072a433b56467e4e739e51432cf9754790bd212dc3083bab4250d1bbbdb7a089a36ed7c645be935d99277be0592f28cfe864c746d76e6cfee30b9f370603f50019da9401c59"]}, @typed={0x4, 0x2a, 0x0, 0x0, @binary}, @typed={0x4, 0xf2}, @typed={0x5, 0xeb, 0x0, 0x0, @str='\x00'}, @nested={0x388, 0x123, 0x0, 0x1, [@nested={0x193, 0x4a, 0x0, 0x1, [@generic="e4051358697842a88b18e25ce0de644bad35af432149b0f5daa406209c3666bc2bc54fd11aeb2c92bbfd049e2c4a34bff229f956ceee77b8b6e5f4e057eb57381b764a30126a2a7e0b7e15bdd8a42023ec0c5dc3bd1a9e951df3f84d3aa7a69eeb98dd86057f6424ced6cfe1d503f78fddd28b869b69fc354ce70189cdf2176f86b2d683b07555ee997a75d96499", @generic="6790198afec1c7f33a45efea2aa2347df5cea01134847293a98714fe1a1841e3d318997d60feaa9d868d0c385a9378d8a3ddcffb3e4224296b86f38d21", @generic="a051027323ed52aaa0b090222b5322816802271ac8c290790ea64259b6368c5b4b403e8b055ea411ac6ab9e40f5e29f6861098d22333d7978a22f85779a94f5d2c7e82c1b40231f5f75771a47252cb912018357137ff31b3c5f15c9f78842b7c37cfb3bc5975a524b2ee903c24360b552dadf9b6c441e3f51d319e855639027b32047d803d15a4ad7c7d1fc99374caca45c34813e817775dbc2a190ca97fcb600baf023717d715ac395e6cfd10e2db98cf89fe974e58fc000000000000000000", @nested={0x4, 0x14e}]}, @nested={0x1ed, 0x50, 0x0, 0x1, [@typed={0xc, 0xdd, 0x0, 0x0, @u64=0x9}, @generic="48249381131c70b433c8be923936cb0738a31153c4609406b042a8be6ec48f7d14f282", @nested={0x4, 0xa0}, @generic="66197159d41673fcc5a634513c034203d4ed981324a0181a5e089091470cc28637433aa89fe3f3c9453fbd1737e41c88b566282d04ec2cb7e3e1e34a7619028131e8df9a44a1d6d2359739e5710abb5d67c8bc655e5e4234a0efc4a62480cc8147c0a306411d34e77a34c3c902b672e7cc8d543660adf83fca8abedc3812fe0d1b1d67dd6ca478b9fae6bcf476af2711ab7ef9c540cba72c317f6a6ba3bc2b0027ed0cfc608831c8c655a25aa98e3779c76e9666e1c619eb79a65c63cf828384eb285679ee0be2157b2337a8036a981e9997ac74645588802d2af2f4fcbde26e3800c44011fc", @nested={0x4, 0x90}, @nested={0x4, 0x57}, @nested={0x4, 0x90}, @typed={0x8, 0x7, 0x0, 0x0, @pid=r10}, @generic="6fe305761b12ede5621dcea72c836d8f21a928b0e6e0b5c570edba9491dea3ffa2a2dd51c5edae1e4ada90a40042f8db19e0348c01746a142eb4111cefe2da5c65ec725c5c4de1d297bfbefe2c7ff25e2a934e558f7bf20d66a6d2b2b029f0b6c0bc543b1a1307185e2e3a8622fb6dc8088dfcc6a40d1c6825f69eedb21709220a71ab848b3c90a860f2b455fd235bc4a38782808846491657de0b842ed1391308b8ac5721042d6b4ec06ffb08af685f262daa6458caa0d62539408f"]}]}]}, 0x624}, 0x1, 0x0, 0x0, 0x40800}, 0x4040) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) landlock_create_ruleset(&(0x7f0000000380)={0xd1, 0x2}, 0x18, 0x12602c3552f0e67) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r13}, 0x94) 2m12.642379052s ago: executing program 3 (id=699): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05310100000000000109022400010000000009040000220310200009210000000122050009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000051f82513b"], 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000140)={0x18, r1, 0x2, 0x0, &(0x7f0000000100)=[{0xe26, 0x7fffffffffffffff}, {0x9, 0xb}]}) close(0x3) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000e40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000480)={0x964, 0x1, 0x5, 0x0, 0x0, 0x0, {0x4, 0x0, 0x7}, [{{0x254, 0x1, {{0x3, 0x7f}, 0x6, 0x4, 0x8, 0x101, 0x13, 'syz1\x00', "3e1cfc1e8da8519cfd25ef207fe232e2e17551a7add37701ff89a8ad14ff8d94", "441a33ad6de11e03720b893a118f73ad822906103569aa4e21c8e7bb184578c2", [{0x800, 0x6, {0x2, 0x5}}, {0x3, 0x3, {0x0, 0x1000}}, {0x7f, 0x6, {0x2, 0x80000000}}, {0x1, 0x8, {0x3, 0x101}}, {0xa136, 0x8, {0x3}}, {0x5d75, 0xef, {0x0, 0x1}}, {0x9, 0x6, {0x3, 0x4}}, {0x9b, 0x8000, {0x3, 0x6}}, {0x3, 0x1, {0x2, 0x22be6453}}, {0x7, 0x3, {0x2, 0x5}}, {0x9, 0x1a9, {0x0, 0x7}}, {0x5, 0x4, {0x3, 0x6}}, {0x4, 0x7df, {0x2}}, {0x6, 0x2, {0x1}}, {0xa, 0x2, {0x2, 0xfffffc01}}, {0x1ff, 0x8, {0x0, 0x101}}, {0x6, 0x7, {0x2, 0x800}}, {0x6, 0x8, {0x2, 0x3}}, {0xa8c6, 0x3ffc, {0x3, 0x1000}}, {0x800, 0x18, {0x1, 0x7ff}}, {0x100, 0x4, {0x3, 0x2c67}}, {0x400, 0x101, {0x1, 0xf}}, {0x7ff, 0x2, {0x0, 0xf2bd}}, {0x6, 0x7, {0x3, 0xe}}, {0xff, 0x3, {0x2, 0x2}}, {0x0, 0x3, {0x2, 0x4}}, {0x99b, 0x7, {0x2, 0x2f}}, {0x2, 0x2, {0x2, 0x2}}, {0x5, 0x0, {0xd6e09137e32a2b6a, 0x1ff}}, {0x5, 0x1, {0x0, 0xfffeffff}}, {0x6, 0x3ff, {0x3, 0xb}}, {0x8, 0x100, {0x1}}, {0xa13, 0x1, {0x1, 0x9237}}, {0x5, 0xec, {0x1, 0x47aa}}, {0x3, 0x8, {0x1, 0xde4}}, {0x1, 0x0, {0x0, 0x10000}}, {0x9da, 0x2, {0x2, 0x1}}, {0x1, 0x5, {0x1, 0x17c}}, {0x9, 0x1ff, {0x1, 0x80}}, {0x7, 0x7, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x1, 0x7, 0x4, 0x9, 0x10, 'syz1\x00', "5cc9b9894e0b7b001ca0ae626c0f438acc7fece31e2005bed570b1cd8f7e3b2a", "a4e9d69478ac17b34853dca76e9460fee4146ade405d5723325f8fa89f183135", [{0x7, 0x5, {0x2, 0x1}}, {0x101, 0x4, {0x2, 0x401}}, {0x9, 0x3, {0x3, 0xe}}, {0x5, 0xcba7, {0x2, 0x80}}, {0x1, 0x2, {0x2, 0x1ea3}}, {0x2ca8, 0x9, {0x0, 0x3}}, {0x4, 0x80, {0x0, 0x40}}, {0x8, 0x9, {0x3, 0x6}}, {0xc62d, 0x3d5, {0x0, 0x1}}, {0x6, 0x8, {0x0, 0x7}}, {0xa, 0xfbff, {0x3, 0x3}}, {0x7ff, 0x0, {0x2, 0x6000}}, {0x1, 0x3, {0x2, 0x97}}, {0x791, 0xe, {0x1, 0x2}}, {0x3, 0x2, {0x2, 0x9}}, {0x6, 0x5b, {0x3, 0x7f}}, {0xfff9, 0x5, {0x1, 0xd31}}, {0x5, 0x137, {0x0, 0x4}}, {0x800, 0x0, {0x3, 0x4}}, {0x7, 0xeab, {0x2, 0x80000001}}, {0x1, 0x8, {0x2, 0xd73}}, {0x1, 0x1000, {0x2, 0x1}}, {0x9, 0x726d, {0x1, 0x1}}, {0xfffa, 0x8, {0x0, 0x437}}, {0x0, 0x6, {0x1}}, {0xffff, 0x1, {0x3, 0x3}}, {0x2, 0x4, {0x0, 0x7ff}}, {0x8, 0xf, {0x3, 0x7}}, {0xf800, 0xf48a, {0x0, 0x81}}, {0x9, 0x1, {0x2, 0x3}}, {0x2, 0xc8, {0x3, 0x39}}, {0xfff8, 0x4, {0x3, 0x1}}, {0x401, 0x5, {0x2, 0x9}}, {0x8, 0x1ff, {0x2, 0x9}}, {0x6, 0x4f0c, {0x3, 0x7}}, {0x4, 0xc, {0x2}}, {0x7, 0x8, {0x1, 0xc}}, {0x9, 0xcc8a, {0x2, 0x80000001}}, {0x82, 0x10, {0x2, 0xfffffff8}}, {0x0, 0x0, {0x0, 0x499}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0x2, 0x8, 0x401, 0x64c3, 0x28, 'syz0\x00', "8604e156194bf11b8010d5e233a35ede51470e21b990fdcf152fbd8b6873a2ea", "3dd34cdd226b4cdb47fe25ce260ed4914d255c30ff4a821cb38fae5237fef792", [{0x777, 0x8, {0x2, 0x9}}, {0x40, 0xfffe, {0x0, 0x7}}, {0x7, 0x6, {0x3, 0x6}}, {0x8, 0x7, {0x1, 0xff}}, {0xff, 0x4, {0x2, 0xc0000000}}, {0x9, 0x7, {0x1, 0x6}}, {0xfff8, 0x336f, {0x3, 0xd97}}, {0x5, 0x0, {0x3, 0x5}}, {0x0, 0x5, {0x1, 0x3}}, {0x7ff, 0x1, {0x1, 0x106}}, {0x10, 0x4, {0x2, 0x8001}}, {0x2fb0, 0xfff6, {0x1, 0x4}}, {0xe1, 0x40, {0x1, 0x8}}, {0x5, 0x201, {0x0, 0x200}}, {0x1a, 0x7, {0x3, 0x3e6}}, {0x0, 0x2, {0x0, 0xfffffff8}}, {0xff47, 0xfff9, {0x3, 0x8}}, {0xbdb8, 0x3ef}, {0xff28, 0x0, {0x2, 0x2}}, {0x9, 0x0, {0x0, 0x63}}, {0x3, 0x0, {0x3, 0x9}}, {0x4, 0x0, {0x2, 0x7}}, {0x2, 0x4, {0x2}}, {0x6, 0x65, {0x1, 0x1000}}, {0x7fff, 0x3ff, {0x2, 0xa5}}, {0x7, 0x8, {0x1, 0x2}}, {0x800, 0x3, {0x1, 0x2}}, {0xca, 0x6, {0x1, 0x6}}, {0xe000, 0x2, {0x1, 0x9382}}, {0x1, 0x8, {0x0, 0xb}}, {0x66a9, 0xff00, {0x1, 0x8000}}, {0x6, 0xfa, {0x1, 0xda53}}, {0x9, 0x2, {0x3, 0x67a}}, {0x2, 0x1ff, {0x3, 0x918}}, {0x1, 0x8, {0x1}}, {0x3ff, 0x0, {0x3}}, {0x7fff, 0xf, {0x0, 0x3}}, {0x4, 0x9, {0x1, 0x6}}, {0x3, 0x1ff, {0x3, 0x3}}, {0x473f, 0x1c, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x2, 0xab, 0x10, 0x7fff, 0x13, 'syz1\x00', "e5f6e6768b7127efc62da7bcbb9dd0d976148acc15a4e20674ab38585471217e", "06f8ee05bfab04e5d437ee017215ee339ab169bf8869c10ee357b3c9747b1116", [{0x40, 0x8000, {0x2, 0xc6e}}, {0x1ff, 0xffff, {0x0, 0x300}}, {0x5, 0x2, {0x0, 0x7}}, {0x2800, 0x89, {0x3, 0x7}}, {0x1ff, 0x9, {0x3, 0x9524}}, {0x2, 0x4, {0x2, 0x951}}, {0x8, 0x7d7, {0x1, 0x9}}, {0x5, 0xfff9, {0x0, 0x4}}, {0x2, 0x8, {0x2, 0x8}}, {0x7, 0x1, {0x1, 0x7}}, {0x1, 0x4, {0x3, 0x9}}, {0x3, 0x800, {0x2, 0x1}}, {0xfff, 0x7f, {0x1, 0xa}}, {0x0, 0x8, {0x0, 0xb}}, {0x0, 0x9, {0x1}}, {0xd, 0x6, {0x2, 0xe}}, {0xd, 0x1, {0x2, 0x7}}, {0x5c48, 0x80, {0x2, 0x10}}, {0x0, 0x5, {0x1, 0x2}}, {0xe00, 0x5, {0x1, 0xffffffff}}, {0x7, 0x6, {0x0, 0x667}}, {0xb172, 0x6, {0x0, 0x7}}, {0x6, 0x8, {0x3}}, {0x8, 0xfff, {0x2, 0x2}}, {0xc, 0x80, {0x0, 0x1}}, {0xd5, 0x9, {0x3, 0x7}}, {0x7ff, 0x1, {0x3, 0x2}}, {0x4c6c, 0x9e92, {0x3}}, {0x6, 0x9, {0x1, 0xb311}}, {0x5f, 0x8, {0x3, 0x3}}, {0x0, 0x2, {0x1, 0x93d}}, {0x3ea, 0x7, {0x1, 0x1f8}}, {0x0, 0x5, {0x3, 0x2}}, {0x7, 0x3, {0x0, 0x9}}, {0x7, 0x200, {0x0, 0x9ad6}}, {0x80, 0x6, {0x7, 0xfe}}, {0x8, 0x0, {0x2, 0x3}}, {0x4, 0x7, {0x0, 0xa7}}, {0x0, 0xd, {0x3, 0x3}}, {0x3, 0x1, {0x1, 0x1000}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x8000}, 0x4044800) 2m12.04082893s ago: executing program 3 (id=703): pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socket$inet6(0x10, 0x3, 0x9) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x6, 0x1000}, {0x0, 0x1}, {0x1, 0x8, 0x1000}, {0x3, 0x3, 0x400}], 0x4, &(0x7f0000000040)={0x77359400}) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) 2m11.478460728s ago: executing program 32 (id=703): pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socket$inet6(0x10, 0x3, 0x9) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x6, 0x1000}, {0x0, 0x1}, {0x1, 0x8, 0x1000}, {0x3, 0x3, 0x400}], 0x4, &(0x7f0000000040)={0x77359400}) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) 1m25.122697972s ago: executing program 5 (id=878): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x175ab010b445874d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0xa6, 0x1, 0x0, @remote, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x11, 0x2, 0x66, 0x0, 0x74, 0x6, 0x50f, @multicast1, @empty}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0xd, 0x7, 0x1, 0x48, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2, 0x20, 0x7, 0x0, 0x7}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1f4, 0x12, 0x4, 0x70bd25, 0x25dfdbfd, {0x21, 0x1, 0x1, 0x9, {0x4e23, 0x4e21, [0x7, 0x16, 0x98e, 0x3], [0x0, 0x400, 0x4, 0x7], r0, [0xc, 0x9]}, 0x40, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "ce1139658f4d1653cab09e69f0b9ac8d45857af11ea756159a000780c344c282825e7e8a35e86da55ea4a7ca4bd69a50072d48ca4a50116c6037ecd5d4bca5d9fee1a8acec9bc24a6ed806a8981090cad5a7342a1b181fbebd392e0bd952386633ead85b18634bfd20877d6c6c2b6a3ad2790c9803ad83f20df07e0cf74e3a684792d1747c90438604c18ea69f65fb44cf8c4c8703d68efb0ab41d8ca2e185ab3c31e5a58455b80f238253c0840059321f0c0207dde2af34c751bc7663331f0b44af4459512613cb95105d58682f2c5526c098c972e002716b2424"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "7a23a5f5f1dd5011f8e1450c5a51eb5395cf58f7c8a24b06d2dc55b90bbae2b9076403b70030ad130487d55fa1b6f6d911a24a41c3f30f0a190afee82d0d52fa05c7d2900f2fecec451fc413b339c3ba865c86d52f544d1839c970c88d8b87955e37aa38643a0d5a82"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "e6536f6f5724afe5e867b2c5d61957cd4f0da46f2e947f3e74d60cbb54fef7177ea4cd20f6257fc14a87594e3ad1f6dfae6df41d7c03352023401fa4b4035be9c65f7255e766df8bd33de869f2dd393cbef67b53"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x891}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="189100b1", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000280)={r1, 0x0, 0x25, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x800, 0x2, 0xfa, 0xb9}, {0x3ad, 0x0, 0x81, 0x2}, {0x7, 0x7f, 0xf6, 0x9}, {0x3, 0x8, 0x7f, 0x401}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x226001, 0x0) 1m25.099846722s ago: executing program 5 (id=879): socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r1, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x26a66000) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902"], 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) (async) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f076000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) (async) syz_usb_control_io(r9, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x40, 0x24, 0xcd, {0xcd, 0x9, "a925dcab17b49b9658c71dce757e762af3e22481c3e0f831d6771fd808353c31156cf4613651a97f64a6e72a40692b32cce3fac298fc097cdd123e7f2047873945b1f4ae20055018480d832bec036684f7d4db0bccb6adfbc2beb9237539f426ad9b9ddbe376e80d3e735a06efc90e54f6a4247f128763a6fc7e722742a563e99ae5fc51b31478fe28649b2347476fb35ed9c59eaa047992ac6cd23f05de642d372c6e88a59dc0fed17dd71914ba83c5b59292a86b34508650fd011c7a0a40ba50288132c63c9e521168a5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) lseek(r0, 0x0, 0x2) 1m25.035415572s ago: executing program 5 (id=880): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000a041f6c9bf69b567427cca6305cc22045d5ca3782ee385ea937f311bdeb9bd9730c8e9304caf6e5626", @ANYRES16, @ANYBLOB="010026bd7000fbdbdf250e00000005002e000000000005002f0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001580), 0x40580) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffe0, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408dc}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = add_key$fscrypt_v1(&(0x7f0000002e40), &(0x7f0000002e80)={'fscrypt:', @desc4}, &(0x7f0000002ec0)={0x0, "ea3d44c1153597ed27b8123fae53940b4ead6634607d5d6a4e20bacc9458a97062e2819310bd0b759212f0d12845896e21c15479910adfa38266dabe453348ed", 0x1d}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r4, 0x74) fchdir(r2) close(r2) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) 1m23.91108875s ago: executing program 5 (id=882): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000440)=0x2000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x7, 0x8, 0x8003, 0x0, 0x10000, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r1, 0x10, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000340)="7210ec0e65eb18223831eba89a2803de2dcb34275c34ee5fb91b5a3d089fb591400abfb7115a689bcdbfd9d6ca0323d77b384c6c1ed4792543388ada5ef7b168ff79aee65d99acc3a670bda266a634067d0ef22cb36f1a7e25ad567e31a88e4fbdeedba2d3477436a6ecbae8e742ddd805ffc1deca47e4f6878ba808f64b12d149e94997d60a496d1468f1f57d801704ca621097fdd248bed678dfddfacbdfc8bb66e165560580d731b3e40a4ba0405eed96bf6a9788cc54998061f06c6cb2647c33c70168561dfcd3c8ec3bb0db", 0xce, 0x20040000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) unshare(0x2a060c00) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000480)={{0x4, @name="8b8fb7845be81060d12f9110ce48ef07813ae639d2b5d3379ceed531599de06c"}, "e89c771d45dedb796443c5196936ae23dfc6b3e920e66ed3fddf4baf300e7e9d", 0x1}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m21.444830971s ago: executing program 5 (id=891): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000000)={0x0, 0xffffff38, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027fd70000000000054000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008043}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000740)=ANY=[], 0x190) syz_emit_ethernet(0x129, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd6000000000f31100fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r8, 0xffffffffffffffff}) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) close_range(r3, r9, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x40, 0x8, 0xf2, 0x1, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0xb8, 0x19, 0x8, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 1m20.311212244s ago: executing program 5 (id=895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8001}}, {{&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x2, 0x404c004) (async) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8001}}, {{&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x2, 0x404c004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x55}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff80008000240"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m19.278791617s ago: executing program 33 (id=895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8001}}, {{&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x2, 0x404c004) (async) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8001}}, {{&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x2, 0x404c004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x55}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff80008000240"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10.495300999s ago: executing program 6 (id=1144): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x3, 0xfa) (async) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltfilter={0x84, 0x2d, 0x200, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0xc}, {0xd, 0xffff}, {0xf, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_FLAGS={0x0, 0x16, 0xb}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0xffffffffffffffdf, 0xd, 0xffffff}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffffff, 0x0, 0xff000000]}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0xc}]}}]}, 0x84}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) socket$inet6(0xa, 0x800000000000002, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15888804000700000008000dfb1048770008001b0008b500"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000000125bd7000f6dbdf2500000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4008000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000000125bd7000f6dbdf2500000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4008000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) 9.102557014s ago: executing program 1 (id=1147): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305a100"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000100000008000500", @ANYRES32=r1], 0x44}}, 0x40000) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}, {&(0x7f0000000240)=""/39}, {&(0x7f00000002c0)=""/39}, {&(0x7f0000000300)=""/47}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x4000000000002e6, 0x12122, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) unshare(0x10a3fc84767db0dc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 8.545746188s ago: executing program 4 (id=1149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r5], 0x2c}}, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffbff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000390426bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac14"], 0x40}}, 0x0) (async) sendto$packet(r1, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e666", 0x2a, 0x840, &(0x7f00000000c0)={0x11, 0x3, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'virt_wifi0\x00', 0xc00}) 8.466672703s ago: executing program 6 (id=1150): request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='(\x00', 0xffffffffffffffff) syz_usb_connect$uac1(0x3, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4141, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x9, 0x0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x49b, 0x1d}, [@processing_unit={0xa, 0x24, 0x7, 0x3, 0x180ed80525db195e, 0x3, "8bd664"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x305, 0x1, 0x3, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x1, 0x1, {0x7, 0x25, 0x1, 0x8, 0x71, 0x21}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x2, 0xa1, {0x7, 0x25, 0x1, 0x0, 0x8}}}}}}}}]}}, 0x0) 8.155770508s ago: executing program 1 (id=1151): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', r1) keyctl$invalidate(0x15, r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x8, 0x4, 0x7, 0xd, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_ident={0x2, 0xb, 0x6, 0x0, 0x4}, @sadb_ident={0x2, 0xa, 0x331, 0x0, 0x3}, @sadb_lifetime={0x4, 0x2, 0x6, 0x7, 0x0, 0x2}, @sadb_sa={0x2, 0x1, 0x4d3, 0x6, 0x6a, 0x9b, 0x1, 0xe0000001}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x68}}, 0x20000040) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x2000) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@can_delroute={0x2c, 0x19, 0x8, 0x70bd2d, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "14a695c935176ede"}, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0) close_range(r4, r4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101b00, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) fdatasync(r3) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000500)={0x9, 0xfa, 0xdf}) add_key$fscrypt_provisioning(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)={0x0, 0x0, @b}, 0x48, r0) bind$inet6(r4, &(0x7f0000000640)={0xa, 0x4e20, 0x9, @loopback}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000680)=""/23, &(0x7f00000006c0)=0x17) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0xace41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000740)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000780)={0x48, 0x2, r6}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$XFS_IOC_GETBMAP(r5, 0xc0205826, &(0x7f0000000800)={0xa3, 0x7fff, 0x4, 0x400000, 0x7f}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'ip6_vti0\x00', r7, 0x29, 0x1, 0xb5, 0x3abd969f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x7, 0x7, 0xffffffff}}) sendto$packet(r4, &(0x7f0000000940)="43beb8c6524e6971cbcac7b8455e4be8a1ae76721dc7b35db8a60b0ff91b1a5ee39158d8c2fb886a41cc8957281046ec6f4a760008a845833145046ffbc8ef8fb1f9e33997689b666eb5efc7b8a37992a7dc2c10793c3dd31739743ad46989367b84da481e", 0x65, 0x8004, &(0x7f00000009c0)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @broadcast}, 0x14) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000a00)) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000a80)=@add_del={0x2, &(0x7f0000000a40)='bridge_slave_0\x00'}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r4) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, r9, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb6e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x10) 8.030595442s ago: executing program 4 (id=1153): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="20050a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x45, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5b, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xa0, 0xd, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb, 0x1, 0x2}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xb, 0xe7, 0x40, 0xff, 0xdb}, 0x5d, &(0x7f0000000100)={0x5, 0xf, 0x5d, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x12, 0x4, 0x9, 0xff00, 0x100, [0xffff00, 0xc011, 0x3f00, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "907a655014b2404ff7d826ec6124d92b"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "f86b44cd8968a1892c1bc1a49aa23420"}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "a9ed9d109fd265a11b74f3b892d17416"}]}, 0x1, [{0xb2, &(0x7f00000001c0)=@string={0xb2, 0x3, "f7e347b61fcf8ff4c6c908598a50934a66b2bc541ac8840300332476dd647a83f2f039b75b2dccdeb7495c21e94d753d4394f448e140c236b361d164f77c279d08cda1548a255e09f62b46d8f3bba45397463d6e9b1855c924f02a550744ce92e157ad1885246b3c2513221b7f21979123f38c341b7f59efcfd1515a637d6cfd591889172acc4bd69aadb2b2b4f96ad4dca77ff4dd60e08b8a8488dcc9cf2131aed5ebef68bb952b672bdbb6799d0aa3"}}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) close_range(r4, 0xffffffffffffffff, 0x0) 7.968825986s ago: executing program 1 (id=1154): r0 = fanotify_init(0x200, 0x40000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x101, 0x8000041, r1, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) flock(0xffffffffffffffff, 0x1) openat$null(0xffffffffffffff9c, 0x0, 0x10040, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x6, 0x0, 0x80, 0x9, 0x0}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') connect$unix(r4, &(0x7f0000000580)=@abs, 0x6e) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x4b, 0x3}}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000240)}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/75, 0x4b}, {&(0x7f0000002580)=""/62, 0x3e}, {&(0x7f00000025c0)=""/68, 0x44}], 0x8, &(0x7f00000026c0)=""/98, 0x62}, 0x8}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) fanotify_init(0x200, 0x0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6}, 0x38) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/371], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) close(0xffffffffffffffff) 7.149250595s ago: executing program 2 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000480)=[{0x4c}, {0x6}]}) (async) sendto$inet(r1, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) 6.970196152s ago: executing program 6 (id=1159): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000040000000000000000000200000000000000000000000000000000000000100000300000000440005000a010101000000000000000000000000000004d62b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x4008804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = signalfd(r0, &(0x7f0000000240)={[0x8]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r4 = getgid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0xfc25, 0x100, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x2, 0x9}) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) fsetxattr$security_capability(r6, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x9, 0x4}, {0x7, 0x3}], r7}, 0x18, 0x0) r8 = getuid() mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000luser_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000009,blksize=0x0000000000000000,blksize=0x0000000000000800,allow_other,blksize=0x0000000000000000,euid=', @ANYRESDEC=r5, @ANYBLOB=',hash,dont_hash,fowner<', @ANYRESDEC=r7, @ANYBLOB=',smackfstransmute=,context=staff_u,dirsync,nomand,euid=', @ANYRESDEC=r8, @ANYBLOB=',appraise_type=imasig,\x00']) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000280)="5338a3", 0x3}], 0x1}}], 0x1, 0x20008000) recvmsg(r9, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb, 0x2, 0x40, 0x6, 0x2c, 0xfe}, {0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x0, 0x81}, {0x9, 0x5, 0xc, 0x3, 0x8, 0x2, 0x7, 0x7}}}}}}]}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r10, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000010c0), r11, r10}}, 0x18) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) r13 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="5d5b18f9bf", 0x5, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r13, r12, 0x1f) keyctl$set_timeout(0xf, r13, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 6.916612277s ago: executing program 2 (id=1160): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6(0x10, 0x3, 0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4) (async, rerun: 64) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 64) sendmmsg$inet(r3, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) (async) shutdown(r3, 0x1) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000040)) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001600010027bd7000ffdbdf250a3888ff", @ANYRES32, @ANYBLOB="080009000600000014000100000000000000000000000000000000013c0002"], 0x78}, 0x1, 0xba01, 0x0, 0x40041}, 0x4048) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0) sendfile(r4, r6, 0x0, 0x201f00) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x180c75, 0x7, 0x104, 0x1ff, 0x0, 0x0, 0x0, 0x6}) (async) r8 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x2) (async) preadv(r8, &(0x7f0000000680)=[{&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f0000000580)=""/203, 0xcb}], 0x2, 0x80000001, 0x3) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000300)=0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 6.180674339s ago: executing program 0 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x20011, r1, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 5.918368915s ago: executing program 0 (id=1162): socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0x3, 0x0, [0xffffffffffffff50, 0x7f, 0x7, 0x128], 0x0}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x800005fffffffff9}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0xffff, 0xa) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 5.573980473s ago: executing program 2 (id=1163): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x63, 0x0, 0x0, 0x8, 0x20000000000, 0xffdffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000e36000/0x2000)=nil, 0x2000, 0x1000001, 0x2010, r4, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, 0x0, &(0x7f0000000700)=@IORING_OP_STATX={0x15, 0x30, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0), &(0x7f00000006c0)='./file0\x00', 0x1, 0x6000, 0x0, {0x0, r7}}) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r8 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r8, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, r0, 0x9dc0d000) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000004c0)={@empty, @multicast1, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x4103, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x33ccc}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x12}, 0x880) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.509442726s ago: executing program 0 (id=1164): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) close(0x3) (async) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x2, 0x10}, 0xc) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) (rerun: 32) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000076070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080200000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.182619194s ago: executing program 0 (id=1165): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2d, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) syncfs(r2) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x40009}, 0x40800) (async) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) (async) syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d02"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x10, 0xffffffffffffffff}, 0x94) r5 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_connect$hid(0x3fe3c68a126ffa5b, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9c15, 0xc000, 0x8, 0xc1}) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.815748412s ago: executing program 4 (id=1166): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x3}}, 0x10, &(0x7f0000000480)=[{0x0, 0xf5ff}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x820c00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000002180)={0x0, 0x2b, &(0x7f0000002140)={&(0x7f0000002100)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}}, 0x40) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) r6 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000001c0)="ca968ffa4f062ae0190b1f8b7fac6e0f864dd9c346aa252e9bd52415d8252501ef1e7574110dcf7da5fd8506c35d4a2af6d4f8010bebfedcad602b370d18dd5e3e52e38c147c84ca7fd2a530b6dd4a00317ea8ce9625f358f5b9ede5748c72b6751d96", &(0x7f0000000380)="fb33b166bb7f541f15e22cd684ddcb792d1fc6ddde5a3465bbc4c544bf56a2ae94212cc56ebff8ff1ccb2b4461c6c14c07502aa9b5fc4ad09dbaff50e4eb715febd16ea9bc2cdb80fb450128449c48a0c0db83740421db4513ce247918b06de9675c88e41d3c2ce294ad381eedb17f50343cbf65377ab32e8c57a98e3cb256a0ea1098b91b499ac404ac5ccd81854a8ecd5ab9bf1fcc3734053f5541bed7b48996febeae53b91bae33c30a376343fcb652b7240913e95347687af647511fe574d1fc5da20fcb1bfb16571e4a21edea8fced977b2a16daea798a36a5e54454c502e16419d"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYRESHEX=r5, @ANYRES32=r8, @ANYRES32=0x0, @ANYRES8=r6, @ANYBLOB="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", @ANYRESDEC=r8, @ANYRES32=r6], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r9 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f000034c000/0x2000)=nil, &(0x7f0000a7b000/0xc000)=nil, 0xed, &(0x7f0000000180)=[{0x5, 0x8, 0x4}], 0x1, 0x7ff, 0x12, 0x8, 0x2c, 0x40}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x1, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x80000000, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x40000000006, 0x7, 0x8000000000000000, 0x0, 0xd0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x80000000, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xdffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x1, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x223, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1, 0x0, 0x71, 0x1]}) r10 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}}) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @empty, @local, {[], {{0x39fe, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r11, 0x28, 0x8, 0x0, 0x0) 4.408192421s ago: executing program 2 (id=1167): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) pread64(r0, 0x0, 0x0, 0x8002) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0x5, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @vbi={0x3, 0xec, 0x4, 0xa0363159, [0x1, 0x2], [0x2, 0x3], 0x108}}, 0x9}) writev(r5, &(0x7f0000002240)=[{&(0x7f0000001080)="c668bc73132a5aff44007b4c6d094f35aa81232a24322f9a2e17f70cee940719931013c005507377fee4f043a0f28a06f967f2518ab10d48491095ae200186e299ed832ae337fcab1b77d6e0c96cc2db5972513e3c7edf72af0e0d4573516255dcf83c095688ed997dfab04ee615fedb0482d7e5b897d4fd9948a79a3735e881294ff3d907115e710eab3ec4855e98e2fbc8f62ac9c7adbe2c58cd83d7fca435224904cbc0079aad731bc992fb7bc4341a72b71b94693ef84edc09f9b7c2331d8561141b3fb9dc3875f08688fd2f952b6ac67e32f4a5b3022370ddab3ba9f6d3a11c30d52bee1158d3b4ecc517c6254eb00a89c99ab0807125b4c2097071a920077cf3a923788c29ddd4551a67de22174dc169fbf920f982e97ed9f29dabd2652775a64d65f1b4622a1071e63be6501f0fcdf2e00b804a26a35b2e01a9a08825ea2eeea98db7adfb5b68d05bd1f9c202368f60f4e955283cbd108c3ed933c3f7fe406e65849b0e15b398d06e677a5b99f831fbdeb54f07076e136a10efaba02a0fa740f9e0b60811bb141f06e3e5bedaba3d6c79b4d76e30b40ab6a707b96c3c608881d803d1fb21eb63054811232c8f59d9f3fa8ebf29a756c9217326bbb3697f1fa373401d2dbc53f2d4e61f40dd9ecc27c98108a2e1e08a8e8731e6836a816911a8f53ee9fb742899f7d7887c13d85e28f7c6f5e014b74ee89040d6ae4d61cf1a620204ded033a3bdd16e9e9841bd39ec4db9ba42ce16453f3dd1b6f21b2d048fba16448fd8bc8fe8d67ba0d55f936a35fce819f49f581f8db2d54ffa08985c78cd3a6199d018224d05aac1211a59b7149f51c2dc37ef04415510dc07ce896af202741e44556d3c395cfa4828696d78216b9397b4353d2daaa4be026e93eeaa0bf1012f28c706eb5f560a037ab1999202f9cbabedfe522250c33f0869c758c73d684fb1b08289a78aea8014c995c5aeb2c7be56e243aa2ff9a879997478098896e249827b58a7a2061807892497b7eb56055c0b141ac704fa8d0b1c08c107edbf00d0936614ef8bc8520d8f7e65664a603c71bceba727ccf51ccfd32cb1352263f4b7cd908d87d3187b8cbc9ae267d48736f66b43d61f10acb78931d1b6c61e4d088c73967a4406ccc73b004b1e86f382c2afbbf891fb2d6d94112497a801af9b0b27d72a4c730c0c53c99b7449b8a2e64168eae10bf6cce557751b6b4221d5abbec2c94e0614c45a5bbceffe1e1c4ad4edfc9418c63feb162bfaa51b8e91e21f6ed0844c17604d9f91e0a4528da2bb9cebfd81794f6a611a6000ab8b9f9bc780ab868259e85abbf2ac9439cb6bfde7283152a5d9ed409934c9c3b4d7c193061d184b5965f8f642ff6710f3f50d703a847498988a83c6ba0c1707b3294fa65f2c50e5121426d5dc240171f1dae27b455a39b5a80196c8fa416f5ac6fcbac6eecb383f42b80c938ad13e2ef200bc0b0f155d8376f738e351f48ca1476f03618677fa761399ff2912e593d6c90f6f82eee8cf102f547604d28efdadbe6acd87979b780098b66dba9524441d8d37700729a6610107ebe29b5c9d4d2a77e8d619d304e84546bb15aeb39e54f50e5d287b0e2264780497654c53022b11af0a2b23ac05ea328c6dd55627c191ccd004aef9c7de0888c424a537ee0074e0dbacebea1a89d74c97529272b867c42222c6e457b067d26d63b949ed9b1103889b0754d6efea9c5096fb472979f62e11ec1d4539b471b0af008fa225a1e7bd697e86e3b87c2c85a3c060906f2611171a8264c2e2a859f7fcd3116749269f6309dab832aab9ada9ea652a8b3e53e4c183245bc26979b58a8f2286623b8c334bd8a36b0a45a1f15ee0ffcf9edaea69fc15c6df27efb88cd3058b2e6004249ff0afdf8b165d42efb86377434402cc249b8d2c24d017e7d30d35eb40de39b0b1f418493e6d926b1d5e2f929473b5b4d7290ac45a4faaa009fb54881cda265a6b2785c7c42347c916afd80f7fdb6b181a3d2c5dcd901fa66eb4a62b1e6802c4bcd2b66479065e94d206dfb21197b24341ca105525658dd15cf1c22ea2485e580fdde08d64e8ba036e299bbc6acd0d48f7cdf287ba249eaadde631695c3a3240a4f0d32d7baf2759224235fc17eff0c432c761bc0c299f556829071d10caf1898612c3a621008a6353df7a55bb6b223cd2339cd446b619d2eb004fc4526a25731ca7755be5eec9879101e3f41a7ca43bf3433ecdb1dc44c9168af76a829659e60171af3e1685871b0972e61ab2043c282510e289c2065cb77ca461640e0b3e433c7f618ae7ebbfe31f1350edf8d3680befe0e718064a7ca8c9a1d526ca78c4aa4079717ac8bcd6219a800eed8746ec0bed42f1943647122f9927df2c8683adfa16c8fc972a5428bb1e6e4d5d98d8fd2708d960edd4802f05f6d40eca95adf44f916c42f92b3e3892baa1387d4451fcfdac05eb3db6e0f6dd67e62e3222b6211073097cfcb2ded0a49510729e3eb362f4d171c1d8dc75760661ab0759a14eddf13913a30ea7f744292cb5c05aaf8283584ea835898b79b1f135c143349fa906333f5bcfa4291da6036f3b964a0b7ce31ba12e9493a01fa33a3741027397401d8cf85dc2c5b16959714fba4a58fbf1bc6bfe1cf31401f82ee0130545f781fb2adb8b2feb9bbc6cc00961660a8bf04d5f2205c0a3bd4c5064756dae35d64f34609c56c78352224ceb6e07a9a0a4c4a5632da6553f50a1b87463f5a00b3c4e8c6a8cfc9d217cab948a02e8fc9f22718850d295a4f52168423cfbc8535a8d3bd188af1b21239f5b67ec4d632666a33e4a61cb789b319c49d6de428d0e2a55576aac682532ccb061fea90d8c40f6ae0e8dcf3c4ea0664a8dd1843f593b3b910740771fc788d53ade3a0a490d405d18f153921fbb4969c87335c8a01beee463a20edb93362e369a71457c1f1bd07ead02adf1fe0132e38ac8c8c783eaa0a4f3853ebc880c755b0f42c878c67d6d3d1963880550545a19cfee51bec19b57d75b22ec7b427ec1c214158c5b81c08d5b0062a338fd0f28033251d53fab0ab12b5df515c07bca7b1b89ac16d8f57751a34f53f46f53e09595342f671502f8ff14223b1e8b659e569456d529d37ed5dbbabd418bb4909dde26e383074b06a74961ad2eafcc8d51f72edc0c27255b0f18415260a4dd7890023a2ae9d70fb5ee394c301b02f4a144e915f95820f879c39cfcb29b44759aaa17c703f8732e42346b6c7c31bb88e5044a37919eb58ca2ada699d36905677ff82776a9bb0e40001d1b0bf2c5e5a3248bfd429507acc78242536c28b59f0c8898216ced7a6823e4064a03a06323bd65077e2f9568996c5d945d3fe2a6e7338ef9cd4d3784b9ced97184c6df6841793f64f768c0c6327aeb775cb186dea645c9ebb34a4e8dc67d904304c1fbaa69d77859dfcc2c4ff7d9afe7a0fb37d9d83061aa5f0ebca84f510f3779c43b90718168b0a35a469e89d965bc43570f14f7898981916b954e030ae7841ad33cb96c6740bf8979e2504311ad6db1d551fb8dd2d14df5b47b2d719d920a44ef9186c141343f14555d76d545165f8ede11d57f309bf78439b7b1cd83ed1acfd94b3e06d07137cc9372978276173fd48ede04828e1d89f96c9fd3dab155f60833d4a5f2b483a11cc7d110a75ba42683be493d26b11bbfbc9a8c6be5ef55916ca9c492610731ba64d2cdec2375af24fcf8112e325f0c056dc9bc67ecd8c599cfee46231d06fa16cf072c728e02db1ace9cb833fb613588cec0dcf58fd295da5bbf5495b9397bf8224dbc930ae69961c2b1c3a89c67d9aa3c6a95f4177bc3508b94817696613dd6066f51842015ce7d749328c396c1d5c3ca7248975d4b74bd939e7afc8f3a074b44a68021aa85ca74df1b36dff1697668c3bbcab88fee1b5e990fca66bb099d4d697e6091056714e3ae944285f61421c9d54885c58cd73d1574b1192f61e4cff28bda0fe0854b59c9d58c1ad6f3976d4f5eb0167ae3891d61a081bd8dd10fe014b8d679c7f836c06e385a9479826a4585db46b0a8205c4add73b4da4c32c8f505d4b6f2ac635fb2f28d1e450808fbb2488267ca411a66a91b91782acdb61864573dff6772f48f866c32a2584b8b9dff228d78c33ab28f20f725c1629ed61fed32cb63c789bd1114e9468474f4a141d29d640fc724b6eeece4646315e766016f58d9d2d22f61740f218f6e3a68a9245a0a243ef30a53fa86524354fb693cd526cd2c8a397b1248c2d16e1a7c20425826ba959234479f3bc9ce36dac59fb769c35635f00bc2923ed6bc5ad0e9a3971cb4fc5b2526b0e2159e8da8e924b3065ec5c5241be60e9ef293806d84c511b9eb66615d212912ea6ccf739d1146863d3356f6c941015a8b90f6cf36f27c4a60a35cd5c93403ea648b41045dc9e155bab7aa59db38bd86ee37bcd9bb858a597ccdbf7a3e8c68c02f517a81cbd95d4bd879337fdcf5ff4db732a67daa6f7dac5cd4a25ec3dcd242234a868ea007474a000e3e1be95e896a9656b6a4b56fff894ff2deaacd58cead7813a281920b16d6fcd3fc367031fbeb996612e8dd769148467207dd21963abf07270ddf0fd592586fa33b291251b1820d2f1455eefc87f7ca725ef48d0880c84da8231e90c3af365abe50480851263e2d399d8b80fa836207911400c0cbe5233e568e6150db467f04d4f3ba6baca947c5b1921320d0acba75dc228f376db3435913af271ee780554bc036aa08de43d498b5e1af8ed3f138f0b49c1ab293f99149a7ef8fde00583854fdf0c6542ac50852786eef98a04ed86adc817fa160fe4a5d2b4d308bd5b5ec3d4cc04a544d6dee0b881a4f0ee5af50e346c99130f36fe2d6d49347ff67fd4ebc3ce85a343ca3cb79e4b8bee93480cab545941a629a07a9c7e0342a598fbb315145f7b360bf04310d2b0530a0d7131fd2ae1b7e9e3b7216524382a36107444861aac944dc89082f4f8e93408167211df56ec6c9a2d58b63112e263917519a5e16b7a42a5755913eda62916aa205b750772c5cb558cf75dc2c191d02ee95e1e96376e9edd293fa46974e771ed08b44efa45fde18f85fb7fc414c03d6671c39e98f9ba94e1a71e8c58c1be41d419b07c3ae727bcc3d3c25e20f6284188a5473a9a1b30ad20abe568bd01f634a60c8a4f05508fa4beb7bdaa81ef10616d8bd53553730a1a59b886f9c3cf0acbab450e66ed8a3ad1d6c7e60585bdbfcb861556bec84393c92d2314dfb73cda3c9397cb25df11912b28e37270856bae81687cb8a3b825f9e6f532020f5e183b9efafe4e838ff11bf3540c97f338387add109fd23eb99052ef8739e882a48f8c02c13deb4a01c03098c20afcc2b79d51c3347c9b2212b348aaf272c4021bac8d2dba916dae950f561718226020a527de32475b9dcb3237463cce653bb0e433f02fb7880de285b6a530a830d53026da52d87f462e3b393e089f169a9e1c52b55a1f2d2ef13045bee9036569b39366d", 0xf2f}], 0x1) 4.258542413s ago: executing program 1 (id=1168): bpf$PROG_LOAD(0x5, 0x0, 0xfe3f) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x282, 0x0) sendfile(r0, r0, 0x0, 0x40008) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r1) r2 = syz_usb_connect(0x4, 0x239, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r6 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r5, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}}, 0x0) ptrace(0xffffffffffffffff, r6) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000400)="3a4a0ae358207daac9403daf2e8dd5bee9", 0x11}], 0x1) r8 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsmount(r8, 0x1, 0xc) syz_open_dev$usbmon(0x0, 0x8, 0x8000) 4.100389596s ago: executing program 4 (id=1169): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000276e51123aebfb11750040000701feffffff"], 0x20}}, 0xc000) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000780)=""/171) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) (async) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c136", 0x68}, {&(0x7f0000001400)="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", 0xd6a}], 0x2, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a2401000000020102132406000006000000000000000000000000000924030000000104000924050000f8431cfd09240300ff0100040006240504"], 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r2, 0x0, 0x1a, &(0x7f0000000780)="e9", 0x1) (async) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000201, 0x0) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x20044804) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) (async) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan0\x00'}) (async) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) (async) write(r5, &(0x7f0000000040)="1c0000001a", 0x5) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r7, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x6, 0xffffffff, 0x1, 0x4, 0xfffffffe, 0x20}) 3.73146851s ago: executing program 6 (id=1170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x800003fffffffffd}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x37800000000, 0x8027000, 0x8, r7, 0x1}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffd, 0x54000, 0x0, r7, 0xf}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x62001, 0x0) (async) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x62001, 0x0) ioctl$PTP_EXTTS_REQUEST(r8, 0x40103d02, &(0x7f0000000180)) getdents64(r4, &(0x7f0000000440)=""/94, 0x5e) (async) getdents64(r4, &(0x7f0000000440)=""/94, 0x5e) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, 0x0, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r11, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) 2.990405899s ago: executing program 6 (id=1171): r0 = socket$inet(0xa, 0x801, 0x84) unshare(0x28000600) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x2e}, &(0x7f0000000100)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELSETELEM={0x54, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x884}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f0000000000)=0x80000001, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x2, 0x1, 0x8, 0x5, 0x2, 0x0}) syz_pidfd_open(r7, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0x2000c802, &(0x7f0000000180)={0x2, 0x4e1e, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402000200000009058102ff"], 0x0) 2.865996949s ago: executing program 4 (id=1172): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x64, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018", 0x55}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0004710000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.563801459s ago: executing program 1 (id=1173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000013a0001bf0325bd7000fcffffff070000d7"], 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) socket$inet6(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe2(&(0x7f0000000000), 0x80800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xffdb, 0x100, @empty, 0xa098}, {0xa, 0x4ea5, 0x1, @mcast1, 0x8}, r6, 0x8002}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) close(r1) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @sliced={0x1, [0x5, 0xf3c, 0x6, 0x5, 0x4, 0x8, 0xfffd, 0x3, 0x6, 0x4, 0x8000, 0x3, 0x0, 0x4da, 0x6, 0x400, 0x401, 0x4, 0x1000, 0x1, 0x2, 0x6, 0x6, 0x5, 0xca, 0x8, 0x5af, 0xabf, 0x3, 0x6, 0x3, 0x9, 0x40, 0x100, 0x3, 0x18, 0xfff8, 0xfffc, 0x200, 0x1, 0xdd, 0x0, 0x2, 0xb, 0x7, 0x81, 0x0, 0xffff], 0x4e8}}, 0x8}) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc, 0x10, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x1, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) 2.297927307s ago: executing program 4 (id=1174): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}]}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='P') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x1a4, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_EXPRESSIONS={0x190, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}, {0x128, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x118, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x55, 0x3, "dec56af5e3594ecb6c50361b5c9d92f9c2b87e8736d8133d600f2dca00193b84e11ee37b67deb23be34b7f373aa15740c3efc0f2a8a433262426b90349ff6cc1dbf8ac73a9f630ff8a3f563786cc54a10b"}, @NFTA_TARGET_INFO={0xb9, 0x3, "87f2faaf6305debace843fdd3934ed7d405aa9f8163dece2d4ebf89459eee532d293dc4f209695c86c6b879d5d771f3f2f36b26b6bb42dce3b5b311f62e224a7b8aa187f358bdf9310480ae19c3deeee4de81cabc15f8750e4526b72eeeac56d7f0f9341e315d7f106036e7dbb1c96ba1e1c61f851595120d6ff81bcbcf133f88aa7016b5e2282610f4569aa046ac4df595b8ae56496fcaa4772dbff086b120202fb4363ccf85c319d480ca1c6ffcf28480511b622"}]}}}]}]}], {0x14}}, 0x1cc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, r2}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="e1e62499f5bbff0fb5d14fa14c243abec59f1a9a0b9313fdedf99b4435ae823fa5615d6b415fe526edfc9c9ef73ea0846607fdebd5a5069ac96154b23956715f68fea647c446d7324a677c22695d365075ce06792cb79473a2bf1a0c293ec21130b20d0d68aafc337b74a96cd4b23c34e8bd294962205dde627f7a9fe0508a5b2c06025e123b11167fc697449fa6339d4a29558b318b8daddf44131cf69394d57a1faecc38ba86377d26afbf63eb2bdabdbbcd0795423cb14cf163d3acf0c704d44c356813466bd96be3e8c4149e771c96d3790961cd5ddaf4f249b7417f56cb7d344b37e2659e4eb60f20a621c9901b5ce6af2f5c6d8775c16e4f1eba1313d4cb32af436c2a6d947525a9695be06e4660ae288e0ff2280848b70c5f480931c7dce160d9b4d5921dd067b4003ec80932be2cdb24624e8f460ff5224cc1344dd76763e22f4a6750aa03e3ce23fc2f6a69fdae9be4f4a8c973a195575ee1b1f34fdfda17820bbbef734dff833a6b4c5460071deace35b2a03edb22eac10eb0c3f262b23bfa1ecbe2bd51b418d8167ef8f1a6b8f463b0557b6670357d66251b19e367c66c1f150c95d15db0c23563d99b02504cf0070133792fed28e2d63b95d091224396b17d4314d603bc24de0a28f2d146765d4260225fdcf486db8e6ce16cdaae1a1f06b228e858c7bdf1d71a15c07e23a42b1d43c9c2599c62945d980444e9b70b8a8405e8b61e9df9514860bc8cafe70d8deb32d39ac07b8e6d43efa28b330a8f4f988407f1b3185713a6dac5320aba4b0a142c5b5f00b83d0f455d316f40a6a35df6e93965cd9d26649aaf7b80e9875e10136e7c0d7a18ca946133046e4b4f224890a0f4b77e45f036a3831c70b9eff97523151eb9dc6ce844b8e9ee8bfac165892b2e1bd88d3b77c1e200af342af9609d10a02466ab1fa667512f88dd61f04c00b9a98887c6cdec58e6c45c6c8eb16e3f99d6a980389078bdec7426eacbb45e5958b1fd66f4a49795b68977c9b84f4b8cf8d1db2277557d5c042e94841ed848d4707e7138dea28ccb7b349f7fb70403a650913fd6c89ddadae76baeeb3b9dd27063d7c900407f4b22f749c4df02a4851320c74199030f01ccfd3827c061fc1c75a0329dad06a4645381e266be21078398b165e1e1e5a5610f55263190b03f0582ec79caa91510d9e3300fed4ccb2756d2b96471af273cec441fadc3504b1c36a17d3edc11839fc134ef42a14acefa77b05782c8fcff36514f7fadb4e44c9a50d329f9a73c894421e98280f3214a269c89eb79be62e7825dc383164e869c8ddc8fe877f0cf698feeca638099f1db108b31f46173fb285b254b3998b7ab4b68c9f04a54c61dce3714b22838c886f2e99f2c8f0b523b41178f58a3674c692b6a8a46abc4b498742c6d56738227862bd6cdac85c5f9d8a91420f2f0974e82e77d7023bb5d2611337960103dc006b03c878ed9719651f9ed6862225d8c195501453a369063dc179dbf34dfd7262bf907d8595fd5c29179a28c7ff2c0634f416d3c26894ad94e3aa9a39638296be7b0b4546a23c6b53c234678a5377c3554d604d7b1dad7a21a904c208d35a5db3a723759a921d450d99d8d120c052391cdd5555d4a10355f747c15574af72a44e0be9e97a564ff8559a8f5c6536646b4ef34c7ed84937324df8bff0ee7f872ff96380dfb9ef0fe65856ae734234ffd68eee540fd581cd2e818f2401992c8ce5608709a45dded05690da38ab77ccc9c16c4c2475772ca5aaae4df77b8d97159539c76638b089be6cf2a5fb81a93bf86fb60887678d786550d4cc0a5956c07b64c03dc3455bd0afa65dd5fa2ab364c8463abd1659ae1e78b6ffd459e85fd19acd555d2a54dd233086c86536d1b1c380e6cab49d24faccadd47fb701c2e57fa275fe3064571e2761a8ab016d7837d7ea4d757224e86c5cefb90b67ca3929b9c804014567a89ead2a1193c1da04dec8b6ecc9b9c6e54ce495471fedf41f1658ee78950efdcd8f5fb751740592176679f1e5cd590fda31a91dec92f6eb9cfaa84753301bb5b1dbf3df7e4d407c7ec5207a53650e254449d1b2edb760909a96813929fb3bde0b8adb09e9ae5182892691276833a540bea1807e6ada697e8aba0fe4d8f380ee9e4e05d44190ccc62d57c5c87a7d93804401bf013d79f94efa6e4f7401fec3b9802a9cce8c909756c124dd89f6ef84e45fe46085ec182ac96b65e5f844ce99dbb04c770f2ddaa3f5d2ddea18df83f813c30937df7bc05fa7fdb728fbb35f2d7209ffc318fd71fa4843d20489175e2ca84b6949ed4419be38f3794bb3eaa8893aadd6037654c8aa4e405b5f9299996169cb5c07b357e31d9ddd42cc4b299c6a274c8b3a40ce5eba06bc0e325f237cbbe2c026140d5c451eafcb8af900b050d8ae568c7e1471aed75e75e0626bac90a05920df896e0127520275521f7e2e0a8883bfe66716c0778041b16ae8ba56074081a2ac8e30f1316fb70728994565642d8ecb04f178d3f569b5d3c12e7b33dc3fffb6d78548224a40cda4acdee5c1ee0e733a3301955994186c812f6e25f2e052d38f11e7bb501bb4a8eae93affca8df939423eb4c726c640c631283fa75480f31f42dcf221ad7bd22f8369f37f41c6fa20d44cb7a4d211cbd15139bf88a1bbe694ff726513fdc97c539f144d6959552172042c08f03b2a03e8fc583181ee97cee2d8bc4eba662922829e21e61ce7f6b3b636fe8c8e7bcd19ff5fa0d3b305ee298f2219391eb075508cec3bb0b85d53d102f0f797cca85db286d7a36536862275c10aa36c272fd96900782fb8666cf20858f7ddf9ab01c30156e14e190c47e7c17dc0948bae26ae7baf580a59615f64f50e00f263efa506c3871d712a7f02ce6407c07422de1bcae106a07c1881ab4f81e1dbbab7039562b6cf92c517324ac00352bd0be5ff4cca24b2f3026888213ebe5e5e6a2bd169b1ae3dcf7c0093336fcea7eac2bd2f918034db80311d18aad56f916d58b133b27a320f7749327dfce5574e32935de51edb50b64fa0adb187757576bf9c40f1b4851b3901b97e4458de49816664a1f50865e37f4ed240765088737f2f5fbb7c851a1ef5607849f590e01a86bf7ede085ecb6517b5222690babda46ee0c4c80689fc2c7c4ad4dbe66696a60013575fdf1f5d23971e19b0ffca27b96bc7c2520fce5bd3a50f81518e1f60eea9bd893298b21f1e090ad54a0ce0a537ad9a697cde0b47c52424ffb024b3a69f021681dacfeb7cca843e88a48ce31966e702d7b5125b98b2c15528b83ae7752c21b243454cd343b3392412b676dd0bd62debbcbe8f61b060faecab1d02d968a56668b175f750fe99bcdc4b81250b36189caeac40e4dad52668e2a0e37e0347d6ac563ef45bfb5881714428a7893747d1e5bdc6a0a1da4904889757910d693e06224cb948c242078bb02b2bd8cb592c14a78e89a50753a7c65c217168e86739a26f53e78bcc9b10fed36723b02a1aacb65166015e42f8b84fb5e4092ff01d0e5cb8ac5a1e1d37fbf048853b1ff5fa4f830e31a545f7ae0235dfe5c87fea124cb5eb51d4aa48b37492c2319e0d1ea80eb08f8d609f20c2414127322995bf5d7d81736e42b6c0bf1e48cccbf1a81dd74a8e42774d17fd45bc776df065a88de5e38196af6944a72aa49090baf02a7b3c4e567a4abe8b2d1e411457b4c24954f27c63e0774d0c23847fc1635ecc4023c660862680d7c4446b58bf0defaa574c1601d684a520579076cca0d11ff6364624c2daabb39889b46f4e158d57437561adfa4ae44e35e7df6038a77ea468b142aba6fd8232dfeca890f9f24e6d4acd590024bc45c497248a76e5052f0d5523e31a66b0eb91d1e47113d94382215c328b7ad0fc570f1798c3c86f67dbf6d5cdb51b46100636e0b2ec56b95264fa7a4375d9799e555eb7f5de6b1d31859b525d9a0917bd2e2547758a634a24119039ecd873bfb5392c0472b270f5c0365958ba507d01dc7238365930cceb8a93a197d81ea48d4aa1a9c72c375a69439587a15562a5af5f5958f1690302fe4990220c8e39ec2af804038d574d4c2c4a1f3d0ecf3a0a2a29fe49e42b176b5993e6631ef103da65729ca86ba7bfb135ecfd8684273a657cf8e96c6a42a329398e05f9d8211dcb50f48ceef8d55cf8128749a00dba427d841826910cc5599fc1338419c16b9abb511d6633a8d74d972aa6ce89fe7fd89f18c16af2158bff6fad4df7cfe0d3272ae103172a863defc9954a97bac8d579c35cb6aa2dafc9731cccf80f2397e326e311785cbf7fb2f4f3e2698d80c3359ca1ee212cef03cf597621795307043ab4c3ab771115a11400ab521d9b35405407852a012b4a7a576b7ab0bbb44f7958c75ec9ba88dc4643913cbd240fdeb18dd25e379b8c46ffceda399049295e078b77bf5b8aa12df34a2c77a5c08b2e2f1b26489caa757492ae198e9d437c38c2be2ca78b9d884100b4ea25b4165fd80b3cd84e68a7e9e9b058fd6c3893dd532f121d2df7039852a1117d57c9ca390624535d6c21db3f4b7a25e3ae0c6a4c0be962acbed1749f73ad2049c95124925059f5320b31779e4e07fd429656289678e14a85da75ad668b49a602cc107e6dedf63707fa058cc6bfa43a9d3def22a1db203a83640e30f4e0158f29abb43b9c67e4ea9edde093ab3cac1843eee620d6c85e2c35b15e33e5c4039e363e8b4086a83ae7551b849708e30a1227e9eee43ef777dbded881810042d34e1fcae29ca29a0d3e641d6edff1698f32aa4a8f222e8a1227675bfc9cfa344cce39f76b25e48bab91848f7c89afe8a38dad66abc750b51b078ed60dd5d689e7551f1f4ec3acd4f3133b2e840dc5beaa3171c5b047b7f7b019e155990a51b115e7b366bfce2b8eb891b7cc7d405c89cbb4146b9169ec35845e3f785435debc92b7721ff82b974adb136cd6d8dfce739eb49ba36d3787b1515ddf977dce1ff9e5b7ae788343af2aa01ba002c35f09d0ddfcdf4c4a1678460f140268fe927bcf84f132afb528d2bf9572b8177c34d201a56f1eeadf48456dd38f95efeb46d75403e9bf6e95b4bac54826bb5e72b925fb50030dd38c7310678b5202362e9bb18f10e9ebcd34769f07dce19f3b8f3baeb00c465adcc2e1c03a7d34118585cb9f612c74369cb40cb2f1cfaed9457d297c0df396446b60be2ce8b660653ff68daf50fcb4290f8446fca109129cb8e7291050d142cfdfcb0303263dba7204e90cda1c023b6e3ee9c0267975927818f11551418fe02143afe91c331a205113471e7e5fc3f83bca3c1c981b50aaa6dc22d9aa715abc360f6374646a0907caf8645120cf3888ea4fc9cd1f92ee29ac384f57b7d052e323e71c6096de3ccd4997166ba1bae24b449906831c9c996c7024342ddde5e578af4f1a0134bc224221898c0ba87f21ff28601f61a8af63058ac7578984ef51568005972c2d9c1fddf120fbe9447f9152cf1e51fa5106ae835c17c2e55b55c9be17daffe641cf326045ad7c841bb44f25e20f186f59b5150c02022930f83b8960632cbd8ad5011e0560278952ed8f9c39d4cfbbe76657c01b7bf9c6ff70a973249e17f3b34e748ce7fb1e49f76be3aef11da26c7dad1054a1c7e0d4da76694ebc85fd51185a38a0dcee74a5eb49ae1fb9d78c799464c7c49eafcdacf70711ed716ed7819cd1a312ef80a4a2095381c679db84c30049578d34364ef63a1fdaf0aa4eaa9771b4dfbcdf8f4542a118ddc81649d3a537ef5f7ff489c6e772e57d6ef6b6e5f2f2c8a0fad8e4d46a12ea70ad5798977ab14c1fdf8f190a694a8f4733cda285a7a712fa0d32acf89567837aa6ffcf03493656cdb7bfd0c47005ba126c70af1924ca30601ab0fc4aaa4ea4d0570c5ddd03c2a5e731fa77c1d24e85c1235e10c1575dcd2d34bafbed490094fc2538df08d178502d27c953d2e0af5e3d829a0d5132cc5ee1b9d2519a95787e91836ef1d29e92bb1b662c138a49f8a77829f9dde0943ca82a4466275dac744b92dd75493a0a040a19e77a225b9e21e94d445415483aa67d2b2839de965b4c4803c61680e32e7e4deac5afa877ddc26a34d486499697d6268701ff391f4bd04612066ed9386abdfb3a6234f8705aa3e298bde969f9bcc16af97fc107d0e565d2b9659ab0e3029b1e195ba1a517ae0484352ce366fc0bdf1b5517aa878d6b8a09b7c01e0d6c52c74a0113a97afc505d47d65dcae6db63e014838af156e72021b09c6db109a59c4166c9cc8ad5207878348a58f65b77de388ec8296373f3dd8acdb7c04bce3032fffd3032cf724376ddefe642a54e6624ff147ffb28fa4fcc351eef9051a86f4b93c30d7515ea247fe0ce484f9b39e1b8e051fd7babc9800e55bce6ae1c08e64fede1cd264678509e94bfc4f3409206c4ef05181f47a1abae8ba185772913c13fa0fe4d36a4239595cbe5cb38643e74966cf2cac2c0cde26f49a60925f238b60434f67b28d9e01df9c23984ce8c6c3a40b4f69c1750a99e6ba451f2429565d38e21993f982f9eb4c7ec77b03ac472327fd43e30f8ec565710f1964aaef8683a0c5526a8994de98db77b550a620ec894ee07a706d092eebd9d692b0feca7ae8c13434f947814c84e5a159f2f9314970ca864f261a2a16f3f3352f8d1e1f19dc6292a586e57326ded4e5cc1f17562d175e755e9fa62dfc817bafa4896e611b897ac7bcccc2fcbfd7a5576478b503f7add397c03ddbe6150846324b12544ad783da46ec793e7f37dabde9426d044cedd50440d1b26782233b1612390d4fdd249737f250c3ce1731a825b0cb9341f847a568d8e82b81f883eb90e146d792a2a46cd07518858e6d64b07db16c1d002f3d2cce2bc5f3ae150379c923555170a07c6663e4adede0649ac47c044f1a65657eda07a0b5cb16966b5e9f11ff04dd6bba7a0b0bdcf03e0a15424198b267ac0f89ef01022ec38a7d26d355e0d8d6b794b472352d932093bc91349618ff1e8f956916b5d8e4cbf658fe5ada42cdef4ca5407a997b67e4e1347b90d43c78825b558eda995447f6008eebfc9775814921f72cf243d3156fda3dddc1874f2c0a651ccfd1c77b10f57cd86b32d9c1612b53c69e5172e9045c0689391c90c97bf1a1b902546763336e0f76be74b269c4bf72c030f1040413d4de5fa65ba9f4109e37a3c387e729394f765dbc2e6b769fc5995c7e3c5fa509c07cdf9acbe99dc5cad14640bffad695f0404b066496d87fd6ffc0bea12bad489858169a0c63141fa5857ac1e8b454362fe15a7e55ac371da68cf6a291d41784883658d0c5bb5e6db28b205204e0db38881c4ae83b37dcf945c6d09aea33506ae051287e066f787925bf7d57587e849655969e5677eedc372448e6f2a2f8ce6bdd4def434bd9a2bed09c93c96877dd5e7773a699ed9feda02372e2d82ea0ecbed08ade26c7744dc5276a0e817bd3bd4383790929b79719002bd4df059006fb755877c85d51d433b35b5d9c3769d7c1101e871c7d2d51bf579a10bb9664e60ce918e23655935a7f89db15a0d88e6663a3ba02dae1210a4d7d7eff522c3d4fa3f5fc4c36346185d0ef55c8910a52d41fe3e4a792e8e1fe35af1a15a8c91b06e64fd36f7725c34dd8468422ed96c2e2fc5faf1a7c51b01e9c216f82aa11f8da041804461303a40578cb5f9fd49c0b6abd420581ba4461a6013500552f8d2379f960c6f680fa66eca3faf97504fc6916f84319f554a24829c4cae9c63be3bb3d2c7176b93063d37c3df69c8ac6c0fa43ad9a8274b94ee35dd8a69c3b560dd57353ce9c8188e9db8652544d32fbd2d931ceb0484eb1b27ba74c237dbc1e81b6a867ded6400b3dc0cf973790c03ef6bb69ebc76bb175233793a123ff009d16d1e43fa6f15303ad5169ca42b3ef9f9630b92e03e9a6cd32ec08dbc8abd342931b617bd37ef8e09b68713757e39bcf24f4b95f9972d5b7680e22e7fc421b67e27d3cd97cea6ee1ae78ab792751d317fc317e39545e4a2eebd72c1298b84452de9bc6f6d13d0ec0d7faa52e3b59134531f82214548e6202416f1aa43d65bc1e10fbb1737ebfe51c862dfe6bcc064695ef87f90eeaa011fce5903f6c7af9ba34a627165e909c2f9060055c496a506487249810745b53d137860f0a9ae482932c579511c736d0db447e0941cb8b32bc8e5aeeb0abdcebe66ac420b77f981b1dcde605299caf0171cdb722f42072e3fa1376ff3b3ebc747597822c9c07bb7f76b3e1ef89d4c8155af4c1fcd95272bf93ca058eae43b71997edf14d3f09edb495c7ce361c78ff8dc8cc95a639ce0332b955bd66d9a4ff4c882297338172622cc3a05f2bf02eb8103b32083c42d64259df53d0ba3e4cf80307eb0e00380213370d6a7ce33e685237949fc14657b6eead581de144fe6ab1d318efe2e14823ad3bac3f83819c1810a0c49664c7400af906f6c670e41b94582551cefd8462ae86e1ae10b1f56e48e2591737c0336985f09ce751f68924760daa1881417ea27db9ecfa7580ff9c2879a267d5db8b88d6f984563038c25254cdb88a1fa5240b76cbe0614ab1d4e81072d26ce1d0b1c4b1780e201937fcfd6db6a4561315e1e6be0a381fdecfb42cacb575a5d86aff6a92a4454637ad249d24573ccea9d71ed580eeae16a09f79e27ddf38a281c8779f945720b067a10005cdc04d3f7b483df35d4bc0503a0c66cdb87b3f58c6e367cbb902236ab95cc817b79969865e6a9cde65d543f6f624b5f9e53e4b07b43d77ca7bb503d7a39a35114152f804c78bc9211f61c2f0eb3842c0d1e9a9b3b4585318a007490ad0343ce1368ae5582da587af3c4c156ed943acbd977ec6060047a8fd89005af9ab41302ec3a72c88030fec45013d35efc5ecbd7ff5b41c6bef7ce7adddd7cc322c6ea213f1b7dba5a844f630c63bb5a3662be935d013b3d4104da390d87c127651d1abe3d2b183cf51720f1d3eab3342c6414d5b8d09e635b618712b510e6fbf4376df28870087ad2be875994e1538729dccbeebd3f532814db319e961b3ab3c718f5025bf68c6a366a180f638b074ee966ccb9db4cf321af69d3c5e654146d3c73a47a48a2df1d6dbf27f6e863978d64ba8e59ddfcdf45e485b44ef5025690dfc85d3f8b0fed638f8017d81b82f4bcaa6dab7ad10ce1ac59a6ec59725521b17ae5212e7bf1e71cc4be8d9c57bcccaea6afc256b9947c618616ae75df1952b683e9382f9b69a86b214007fab11c10dc4758e809880fa3ccc4a4966a333af9652d10aeb2830c9cc0c4dd1c50b5b19830cb5ad0bba23927c72097084002acc317c134b467e8ef66481d295af5216ba2b2227463ff4c52cc8ba8f84dc940edb9384394f66c3683821677635baefe43d09e53f421307a22a675c89b7704b93d26b68aa601f12b98c80522672be8fb44114f5ee4577609792d4a8731765316f46d08e25936a38535925462fd884fb699e6024a27c66f45a00d2c941da5c1213cc7fb08470450af51c9b9e366630c4deff3b0aad756750d8e9a0570170a111d8d9dfb26ca6df846e5e0e960dd76223e3e5a356241420cb63fe7638afb2b393c89f3784463313dd0502ce2582fe494c33358b228df38d673801a13aef8ccbfb601499b05eab9fc1ea79ff0457136b8505f5a0828b14cabc11da7d8064a1ea6512a5235440f18e424509eaa917901fc04d403a0ac0c009ddfd54fc64c87b93395271b3d6645775029bf2b5ccc97ccaded244ca5970f6cf5c7885a411e45de398c6b06f3553e25604bf7dcf10a080e836864875d2949496f0256c60919fca02970cc6b866c799284a111b61251a8335a4dda28997cf73eef8423a8edc5ea103d50ad86da49a82a5eef5e1adfeb2b674ab274b3e1d7c425b19ff279de9514f4f9178893bad99fd9b27b99e8d07f98166d9c24cc7761f37449354a07904334a36c86429b96b906bb9aaf854d5512a2f2139cc4076832d2cd1f3aafa601680c6ed9a729c4388a760ec3e660e3a9a3b6c0e842aacdf3f8a1558b090053f99721dab91d8200d4fd49efb89db83a7c8683e666632dd8f8e50665d27890b214c14feee115579a9799d42babf78830611654826a4fb5f352964e4f0f6fcd8beff16301ffd8e69979c635b1e00254492f1e2a9683eb14abd24e25f9c7a973befd88024811203b8c5891edb1224e68aed33264f1c195137e9dfac078dee77dad6f1aaf618447f7126c2e63637573163a104111991e81213bd9de6ae8a47185c3d37b52202077e93b4e97d9b5514a58079c45b10de04d38d7f2af2115e33b98d46011e5fb3d52092daed0a8a6f98ec79e6a9ddb7469f66c44d5ce7f76013aacb1e162c874134064bf0faf37236c6104598967cb18bcb99aea6f0fe0fb1c42706663b0adc7ee75d0a5f4be66a9ac60f9e9b4d71d4408e777b763163f5695f8852bb567b1cd12e056a61d5c16443622a5730a34a5d4b2146e19b366d2aaaf2c11abdf69e304387b9951093d404a5da6ffcdc161282b625f32eec22b02e1830daa3c5f692cd0e7be3d59efe1671a1e28381e506699fe5cf533ec2854a27b91079e3efb6aeb9886f8a040e4d37210929e02ca7a06d74d4ea884aca97b9b592afdcd5758662f4b258988248117f3db349c5e76cdeb89e598950f465497d138b7b810611198e5ea7ebcb8bf347c41b5c704e1ab3618454039177a929aa60f882b1d27a55454ae08c5077c468e8de8de555f558c9d0cda133698044686d3d4f8c36edae2ee9e6cc430355d45b40ee99366a63b50d5fbd71b6403324807e822afdee6788a3ce97a79da4b730e6079d1d9f62b35ea4e6859c569e6f7ced8e029358ed5c8b6db16a37f7bdbe8969429759681001fbb5f963acb46d3398d59ba92cb435e0ae954f33be138e45007dc1c1acb8f4b3816b2e35f93341587364ef6473992aeda5cef90557b13a48fcb760c704e732937ff455fed55e84cfbf2d7232271706029e2bbdd08d7262541fe62df2d8b6b8f36ec6582fcb3364a256a72b701cb74a85b4c0ed0339b05c41157d8324903772066e393868aa77f923b46b9f4e5109d34a250c5e579c9882029e6c10e19750b315747f665fdcc89f6335614f9668d4fdb233907ff2d0a9b1fc342ee609926431b667728afac5d01690d4fe4d514ccceff7a9b62cbe7046d6d20e128a09f2c2ea684e318086dd470369058dcefefe314a2dd275d06dc7d05ce96076e10139596833f522e962f503906b647a6852481d90176737c0d5e193127792e3bb0543f3c3d37bfc0724744d8b0abc32e1b62a0b40466ed8e74a072838abba492654a7d6c4821e4918575079f71ce332258b72f7a84c51769386415c1719df530277d7028703deb53e3f86b266914042965c0b08905bb96559253e46173a4054bd9d12fe3bcc6abb2a8de808039b039bc8abdea0b055f525e8f1f11a02fd3102a3c1587beafff1c57ad32c8721cccc3525c673472d898bfae25b12346121ac46e18c4ab29ae51e11481d4c59f9a5627dacf9940ee538c88100e8a2b09ca2831cc269adbc1b0aab0b3a80c101be80fcb972838ba49465bd947c60122ebfc7d1ed6c5ce35426a3f700", 0x2000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x294, 0x0, &(0x7f0000000180)="c3ef7f670000fc67d7fbdfdfffca56d527eb5283b4241544b50000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d925bde6a1b56f92241432fa00228f11b0cc67e2e158d909c57270d30b39d3050b381d0000000000000004e1932780b192d2d61359ae0fe90b9d2a6faff570879d2f1b517210627c69e56ed195980a9a880700d5f059a6b7bb7b6a9787136a408914de373597695c519462765ac26a88185098ad1245c1d4d5162ce2fea5c53a8a44e93948de54e526e931694b28cdbc247797e769ef43a9f6bd08ef5c0abb843cc87035a5b7000083add0ccba38d197307108bfdbfae41be13e5d862e02e9f2d2582ff8ac1633f06ec78ba44e55b01022e45711ffff4ab5fdc0434372f826013043d00700000000000000a398285fc817fcc5ff0f02ea32cfd39b6a35f62e75f5a187d82beaef784d6bc73e9146cd67f57e2826f63986c202521300f2d4de3a1aed06b4771d349920e5e7891bd7b0ce80fdcbced288defdce000000e5ff00000000f75ac937aa74824fc2d467e0cfc3ff42b92176967ffb5940c531cb0dfb88cb3218c79c622b233ff7a008adf59e6dc4f4f306dd87ff882fa663110d10b9360893de41007872ca49edb852b1892823276badf3eaba18117ab83f7e38c666252d78151229b91119ba29e621def514c7f8ce13db7c270c0de77d53b5e759de5619636fe24e472e82043acf5731ca68b3b46a5b96bb8dba2b2dfc4782ac75523fcadbb4147f4de6546f39e622375ae8c3e80e119f7246aa38607321e69d1191e4355fe6e2bad8b51f16e2534365637c3a9a1c92ed0d9aaa58c1d7cf718a1c126aa5c0088ef55dda5a9f01c8ae67587917ecca17d90f0ba13ba0e38f6ba2f7f59a1ce7f8e52c585e5d92c5566fac32a062eef4ccc723a608894a5b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000008}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f00000000c0)={0x3, @pix_mp={0x60, 0xe, 0x31364d4e, 0x5, 0x9, [{0x7fff, 0xe}, {0x7fffffff, 0xffff8959}, {0x9, 0x3}, {0x6, 0x47}, {0xe563, 0x3}, {0x7, 0x8}, {0xfffffff8, 0x4}, {0x80000000, 0x4}], 0x7, 0x3, 0x7, 0x1, 0x7}}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = syz_usb_connect$uac2(0x3, 0x101, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x8, 0xc0, 0xc6, {0x8, 0xb, 0x2, 0x0, 0x1, 0xc, 0x20, 0xa7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x8, 0x32, 0x8}, [@multiply_unit={0x7, 0x24, 0xc, 0x8, 0x5, 0xf}, @selector_unit={0x6, 0x24, 0xb, 0x0, 0x1, "e8"}, @extension_unit={0xc, 0x24, 0x9, 0x6, 0x6, 0x8, "4de9b085df"}, @source_unit={0x8, 0x24, 0xa, 0xc8, 0x4, 0x7, 0x2, 0x2}, @selector_unit={0x8, 0x24, 0xb, 0x4, 0x3, "c4cff3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x2, 0x37, 0x7}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x4, 0x6, 'w', "ba"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x0, 0x3, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x90, 0x30, 0xb9, {0x8, 0x25, 0x1, 0x84, 0x1, 0x7, 0x94}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9e, 0xab, 0x8, 0x16, 0x7}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x3, 0x0, "3a36ed", "f7"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9c, 0x7, 0xf8, 0xa0, 0x10}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x3, 0x4, 0x3e, "f20b", "1b0b"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xf, 0x8, 0xa6, 0xc}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x6, 0x1, {0x8, 0x25, 0x1, 0x82}}}}}}}}]}}, &(0x7f0000002780)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x10, 0x31, 0x3, 0x8, 0x4}, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="050ffe08000000"], 0x2, [{0xfc, &(0x7f0000002b80)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x422}}]}) syz_usb_control_io$uac2(r8, &(0x7f0000002840)={0x14, &(0x7f00000027c0)={0x40, 0x31, 0x32, {0x32, 0x8, "6f574e9e4698cd02513b27a45439d59d7a9b1dfce567ff5412ada81e911b3d8111211fe85c072073f552b9047607d19d"}}, &(0x7f0000002800)={0x0, 0x3, 0xb, @string={0xb, 0x3, "7a5c16988f3d1d8227"}}}, &(0x7f0000002b00)={0x44, &(0x7f0000002880)={0x0, 0x15, 0xa4, "b80e6821a8b62676b7017181eeaf409fd7d3addf2ce4ebcdc72f3a772ba82c4ff83af69c0ab37b0372db38502bd759668fd97a3add67c661e21edd0bd912dc7e4569cd070a13030c7dc41f80744a694d49fb9e34376c0660647e479f354a6812bea51d4274c6e54e59ccc3b362a883dc07cced0fd742ccdc4ddba6c36946be717afd990843e45f952eec26bfb40ad8d879eb5c57a4fff0e857222cbde995836dcd2ff1d4"}, &(0x7f0000002940)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002980)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000029c0)={0x20, 0x81, 0x3, "f76e50"}, &(0x7f0000002a00)=ANY=[@ANYBLOB="2882030000be43ffc4"], &(0x7f0000002a40)={0x20, 0x83, 0x3, 'uLM'}, &(0x7f0000002a80)={0x20, 0x84, 0x1, "9a"}, &(0x7f0000002ac0)={0x20, 0x85, 0x3, "471070"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0xc0cd4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.240376849s ago: executing program 0 (id=1175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000026080003400000000808000640ffffff00500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000024000380200000800800034000000002100002800400028008000180"], 0xe4}}, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff7010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, 0x0, 0x0}, 0x0) 2.13968031s ago: executing program 1 (id=1176): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) pread64(r0, 0x0, 0x0, 0x8002) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0x5, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @vbi={0x3, 0xec, 0x4, 0xa0363159, [0x1, 0x2], [0x2, 0x3], 0x108}}, 0x9}) writev(r4, &(0x7f0000002240)=[{&(0x7f0000001080)="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", 0xf2f}], 0x1) 2.098567503s ago: executing program 2 (id=1177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x3}) syz_open_dev$sg(&(0x7f0000000000), 0x1228, 0x210083) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x6f5e, 0x7a9b4d6f402c8853) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001380)={0x53, 0xfffffffffffffffc, 0xd4, 0xe, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="4ad83158706642f12e2de3b38db386bc4e07d71eddb1cb19038f2ab85f2d56e2508da49d5c361354f489b4020881998bdc25d757278f074d5eb11e316576d7fbd00e653c8f87bb4651841e685f462bc03b1e5640eef2631fe8f2635f6cb2c5fc3763a0318225ca2c2e6787ad4ef7b41d2b361e6e8c96ccccac6eb00bcbe20f02ac972515efb3ac499234a91139e84ac20926e09df0e60340d20f9305ba0a6837c83ebf5d02e14545fa58b63cd5f3b19c4411421411890eb660b141467810d366798febaf442d1f99410d3593a31a069c3fe094dc", 0x0, 0x7, 0x2, 0x2, 0x0}) 1.890617723s ago: executing program 2 (id=1178): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$unix(r3, &(0x7f0000002300)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)=""/84, 0x54}, {0x0}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000000)=""/27, 0x1b}], 0x5}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/117, 0x75}, {&(0x7f0000001500)=""/183, 0xb7}, {&(0x7f00000015c0)=""/3, 0x3}, {0x0}, {&(0x7f00000016c0)=""/111, 0x6f}, {&(0x7f0000001740)=""/21, 0x15}], 0x7, &(0x7f0000001800)}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001840)=""/183, 0xb7}, {&(0x7f0000001900)=""/32, 0x20}, {&(0x7f0000001940)=""/245, 0xf5}, {&(0x7f0000001a40)=""/127, 0x7f}, {&(0x7f0000001ac0)=""/214, 0xd6}, {&(0x7f0000002400)=""/254, 0xfe}], 0x6}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001d40)=""/130, 0x82}, {&(0x7f0000001e00)=""/129, 0x81}, {&(0x7f0000001ec0)=""/244, 0xf4}, {&(0x7f0000001fc0)=""/248, 0xf8}], 0x4, &(0x7f0000002100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x34}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/5, 0x5}], 0x1, &(0x7f0000002240)=[@rights={{0xc}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}], 0x5, 0x123, &(0x7f00000023c0)={0x77359400}) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) (async) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38001000030301040020cb3bed7700030000000000000000000c000200ffffffff000000030f0002002200fffc000100"], 0x38}}, 0x8004) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$IPC_STAT(0x0, 0x2, 0x0) (async) write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6) (async) writev(r1, &(0x7f0000000340)=[{0x0, 0xff0f}, {&(0x7f0000000080)="2d0360c642", 0x5}], 0x2) pread64(r0, &(0x7f0000001900)=""/4079, 0xfef, 0x4b) (async) pread64(r0, &(0x7f0000000180)=""/135, 0x87, 0x1) 1.115103109s ago: executing program 6 (id=1179): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000a041f6c9bf69b567427cca6305cc22045d5ca3782ee385ea937f311bdeb9bd9730c8e9304caf6e5626", @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf250e00000005002e000000000005002f0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001580), 0x40580) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffe0, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408dc}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = add_key$fscrypt_v1(&(0x7f0000002e40), &(0x7f0000002e80)={'fscrypt:', @desc4}, &(0x7f0000002ec0)={0x0, "ea3d44c1153597ed27b8123fae53940b4ead6634607d5d6a4e20bacc9458a97062e2819310bd0b759212f0d12845896e21c15479910adfa38266dabe453348ed", 0x1d}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r4, 0x74) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) 0s ago: executing program 0 (id=1180): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @loopback}}]}, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @broadcast}}, [0x3, 0x3, 0x1, 0x0, 0x1, 0x6, 0x100000001, 0xfffffffffffffff0, 0x612, 0x7, 0x9, 0x9, 0x40000000, 0x4, 0x1]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={r2, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0xfd, @private1={0xfc, 0x1, '\x00', 0x65}, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x2c, 0x24, 0xc8fe83ee7f0e7fd5, 0x0, 0x0, "", [@nested={0x8, 0x0, 0x0, 0x0, [@typed={0x4}]}, @typed={0x14, 0x31, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x2c}], 0x1}, 0x4000) kernel console output (not intermixed with test programs): 0xc8 (error=-5) [ 303.012894][ T5953] usb 6-1: USB disconnect, device number 15 [ 303.046021][ T5906] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 303.094867][ T9] usb 3-1: config 0 has no interfaces? [ 303.103952][ T5953] em28xx 6-1:0.132: Disconnecting em28xx [ 303.131416][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 303.133967][ T5906] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 303.165785][ T5906] em28xx 6-1:0.132: No AC97 audio processor [ 303.176993][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.206857][ T5906] usb 6-1: Decoder not found [ 303.212644][ T5906] em28xx 6-1:0.132: failed to create media graph [ 303.219258][ T9] usb 3-1: Product: syz [ 303.219283][ T9] usb 3-1: Manufacturer: syz [ 303.219300][ T9] usb 3-1: SerialNumber: syz [ 303.246526][ T9] usb 3-1: config 0 descriptor?? [ 303.249546][ T5906] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 303.316780][ T5906] em28xx 6-1:0.132: Remote control support is not available for this card. [ 303.338583][ T5953] em28xx 6-1:0.132: Closing input extension [ 303.380852][ T5953] em28xx 6-1:0.132: Freeing device [ 304.231666][ T5953] usb 3-1: USB disconnect, device number 47 [ 304.669272][ T9421] netlink: 'syz.5.831': attribute type 1 has an invalid length. [ 304.736058][ T5906] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 304.915993][ T9422] netlink: 36 bytes leftover after parsing attributes in process `syz.5.831'. [ 304.936288][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 304.943430][ T5906] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 304.954158][ T5906] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 304.966540][ T5906] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.043096][ T9424] vxcan3: entered promiscuous mode [ 305.048671][ T9424] vxcan3: entered allmulticast mode [ 305.060050][ T5906] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 305.200529][ T5906] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 305.224999][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.227106][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.833'. [ 305.275992][ T5906] usb 2-1: Product: syz [ 305.280237][ T5906] usb 2-1: Manufacturer: syz [ 305.284877][ T5906] usb 2-1: SerialNumber: syz [ 305.349937][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 305.359329][ T5906] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input35 [ 305.424811][ T9427] bond1 (unregistering): Released all slaves [ 305.512477][ T9428] tipc: Started in network mode [ 305.525817][ T9428] tipc: Node identity ac14140f, cluster identity 4711 [ 305.575809][ T5906] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 305.591074][ T9428] tipc: New replicast peer: 255.255.255.255 [ 305.606785][ T5906] (id 0x00) [ 305.614644][ T9428] tipc: Enabled bearer , priority 10 [ 305.756664][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.773371][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.789093][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.806449][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.810231][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.834'. [ 305.897139][ T5906] rc_core: IR keymap rc-imon-pad not found [ 305.916843][ T5906] Registered IR keymap rc-empty [ 305.931835][ T5906] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 305.956450][ T5906] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 306.009058][ T5906] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 306.086241][ T5906] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input36 [ 306.126375][ T5906] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:55> initialized [ 306.231643][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.250213][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.285856][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.293471][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.319297][ T9448] binder: 9441:9448 ioctl c0306201 2000000003c0 returned -14 [ 306.327987][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.342811][ T9449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.836'. [ 306.459256][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.487581][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 306.487604][ T30] audit: type=1326 audit(1775385962.712:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.5.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ea59c819 code=0x7fc00000 [ 306.520305][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.580129][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.651022][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.682306][ T30] audit: type=1326 audit(1775385962.722:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.5.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd7ea59c819 code=0x7fc00000 [ 306.706666][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.746838][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.761270][ T9451] imon:send_packet: task interrupted [ 306.766291][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032f86c00: rx timeout, send abort [ 306.768751][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.811123][ T9] tipc: Node number set to 2886997007 [ 306.824272][ T5953] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 306.885540][ T9451] imon:send_packet: packet tx failed (-512) [ 306.906708][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.924838][ T9442] binder: 9441:9442 ioctl 4020ae46 7f1648469fc0 returned -22 [ 306.999462][ T9451] imon:vfd_write: send packet #1 failed [ 307.037013][ T9451] imon:send_packet: packet tx failed (-32) [ 307.075967][ T9451] imon:vfd_write: send packet #0 failed [ 307.093129][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 307.115256][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.145694][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.185969][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.214528][ T5953] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 307.245436][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.267370][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032f84400: rx timeout, send abort [ 307.273422][ T5824] usb 2-1: USB disconnect, device number 55 [ 307.278217][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032f86c00: abort rx timeout. Force session deactivation [ 307.295165][ T5953] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 307.304788][ T5953] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 307.317079][ T5953] usb 1-1: Manufacturer: syz [ 307.359764][ T5953] usb 1-1: config 0 descriptor?? [ 307.741303][ T9460] syzkaller0: entered promiscuous mode [ 307.747022][ T9460] syzkaller0: entered allmulticast mode [ 307.748318][ T9] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 307.775963][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032f84400: abort rx timeout. Force session deactivation [ 307.797152][ T5953] rc_core: IR keymap rc-hauppauge not found [ 307.803160][ T5953] Registered IR keymap rc-empty [ 307.835302][ T5953] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 307.865803][ T5953] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 307.887137][ T5953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 307.955711][ T9] usb 6-1: device descriptor read/64, error -71 [ 307.967360][ T5953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 308.017222][ T5953] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 308.084473][ T5953] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 308.106601][ T5953] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 308.145914][ T5953] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 308.156126][ T5824] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 308.166397][ T5953] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 308.185736][ T5953] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 308.220189][ T5953] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 308.227808][ T9] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 308.242506][ T5920] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 308.266875][ T5953] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 308.296053][ T5953] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 308.318886][ T5953] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 308.327385][ T5824] usb 3-1: config 0 has no interfaces? [ 308.335139][ T5824] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 308.346834][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.354944][ T5824] usb 3-1: Product: syz [ 308.360382][ T5824] usb 3-1: Manufacturer: syz [ 308.365125][ T5824] usb 3-1: SerialNumber: syz [ 308.367415][ T5953] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 308.381250][ T5953] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 308.390332][ T9] usb 6-1: device descriptor read/64, error -71 [ 308.406110][ T5824] usb 3-1: config 0 descriptor?? [ 308.410807][ T5953] usb 1-1: USB disconnect, device number 52 [ 308.420307][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 308.432887][ T5920] usb 2-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 308.444507][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.463775][ T5920] usb 2-1: config 0 descriptor?? [ 308.506456][ T9] usb usb6-port1: attempt power cycle [ 308.625713][ T5824] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 308.639380][ T5829] usb 3-1: USB disconnect, device number 48 [ 308.792088][ T5824] usb 5-1: Using ep0 maxpacket: 8 [ 308.800454][ T5824] usb 5-1: config 0 has an invalid interface number: 20 but max is 2 [ 308.809095][ T5824] usb 5-1: config 0 has an invalid interface number: 7 but max is 2 [ 308.817682][ T5824] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 308.826594][ T5824] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 308.835338][ T5824] usb 5-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 308.847022][ T5824] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 308.856956][ T5824] usb 5-1: config 0 has no interface number 0 [ 308.863104][ T5824] usb 5-1: config 0 has no interface number 1 [ 308.871639][ T5824] usb 5-1: config 0 interface 20 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 308.885769][ T9] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 308.893689][ T5824] usb 5-1: config 0 interface 20 altsetting 2 bulk endpoint 0xA has invalid maxpacket 1023 [ 308.911457][ T5920] asus 0003:0B05:1822.0015: unknown main item tag 0x0 [ 308.914570][ T5824] usb 5-1: config 0 interface 20 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 308.928748][ T9] usb 6-1: device descriptor read/8, error -71 [ 308.937088][ T5920] asus 0003:0B05:1822.0015: unknown main item tag 0x0 [ 308.944041][ T5920] asus 0003:0B05:1822.0015: unknown main item tag 0x0 [ 308.952990][ T5920] asus 0003:0B05:1822.0015: unknown main item tag 0x0 [ 308.960683][ T5920] asus 0003:0B05:1822.0015: unknown main item tag 0x0 [ 308.968322][ T5920] asus 0003:0B05:1822.0015: unknown main item tag 0x0 [ 308.975434][ T5920] asus 0003:0B05:1822.0015: unknown main item tag 0x0 [ 308.984169][ T5920] asus 0003:0B05:1822.0015: unknown main item tag 0x0 [ 308.986607][ T5824] usb 5-1: config 0 interface 20 altsetting 2 bulk endpoint 0xE has invalid maxpacket 1024 [ 308.994950][ T5920] asus 0003:0B05:1822.0015: unknown main item tag 0x0 [ 309.009408][ T5920] asus 0003:0B05:1822.0015: unknown main item tag 0x0 [ 309.018991][ T5920] asus 0003:0B05:1822.0015: unknown global tag 0xd [ 309.023025][ T5824] usb 5-1: config 0 interface 7 altsetting 16 has a duplicate endpoint with address 0x4, skipping [ 309.025954][ T5920] asus 0003:0B05:1822.0015: item 0 2 1 13 parsing failed [ 309.040813][ T5824] usb 5-1: config 0 interface 7 altsetting 16 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 309.049425][ T5920] asus 0003:0B05:1822.0015: Asus hid parse failed: -22 [ 309.063574][ T5824] usb 5-1: config 0 interface 7 altsetting 16 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 309.064366][ T5920] asus 0003:0B05:1822.0015: probe with driver asus failed with error -22 [ 309.075125][ T5824] usb 5-1: config 0 interface 7 altsetting 16 has a duplicate endpoint with address 0x8, skipping [ 309.134630][ T5824] usb 5-1: config 0 interface 7 altsetting 16 has a duplicate endpoint with address 0x7, skipping [ 309.146319][ T5824] usb 5-1: config 0 interface 7 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 309.182001][ T5824] usb 5-1: config 0 interface 7 altsetting 16 has a duplicate endpoint with address 0xF, skipping [ 309.193692][ T5824] usb 5-1: config 0 interface 7 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 309.197165][ T9] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 309.218896][ T5906] usb 2-1: USB disconnect, device number 56 [ 309.257254][ T9] usb 6-1: device descriptor read/8, error -71 [ 309.378983][ T5824] usb 5-1: config 0 interface 7 altsetting 16 has an endpoint descriptor with address 0x24, changing to 0x4 [ 309.391482][ T5824] usb 5-1: config 0 interface 7 altsetting 16 has a duplicate endpoint with address 0x4, skipping [ 309.427337][ T9] usb usb6-port1: unable to enumerate USB device [ 309.460938][ T5824] usb 5-1: config 0 interface 7 altsetting 16 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 309.478651][ T5824] usb 5-1: config 0 interface 20 has no altsetting 0 [ 309.512436][ T5824] usb 5-1: config 0 interface 7 has no altsetting 0 [ 309.537045][ T5824] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=2c.76 [ 309.561088][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.574757][ T5824] usb 5-1: Product: syz [ 309.619034][ T5824] usb 5-1: Manufacturer: syz [ 309.626944][ T5824] usb 5-1: SerialNumber: syz [ 309.838846][ T5824] usb 5-1: config 0 descriptor?? [ 309.861715][ T9471] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 309.887941][ T9471] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 309.988601][ T9487] netlink: 'syz.2.849': attribute type 8 has an invalid length. [ 310.169730][ T9471] xt_TCPMSS: Only works on TCP SYN packets [ 310.177666][ T9471] ptrace attach of "./syz-executor exec"[5848] was attempted by "\x0a @   \x0a N   `         $ @   \x0c   , @ ( H n [ 310.181267][ T9495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.287563][ T9495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.428998][ T5824] (null): radio-mr800 - initialization failed [ 310.435474][ T5824] radio-mr800 5-1:0.20: probe with driver radio-mr800 failed with error -22 [ 310.505214][ T5824] usbhid 5-1:0.20: couldn't find an input interrupt endpoint [ 310.607867][ T5824] usb 5-1: USB disconnect, device number 46 [ 310.617618][ T9504] SET target dimension over the limit! [ 310.648467][ T9507] netlink: 'syz.5.854': attribute type 10 has an invalid length. [ 310.682825][ T9507] team0: Device ipvlan1 failed to register rx_handler [ 310.993608][ T9521] ipt_REJECT: ECHOREPLY no longer supported. [ 311.214170][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.859'. [ 311.703758][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 311.852668][ T5824] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 312.085953][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 312.101419][ T5824] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 312.121284][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.142281][ T5824] usb 2-1: Product: syz [ 312.158010][ T5824] usb 2-1: Manufacturer: syz [ 312.175415][ T5824] usb 2-1: SerialNumber: syz [ 312.204105][ T5824] usb 2-1: config 0 descriptor?? [ 312.234402][ T5824] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 312.634483][ T5824] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 312.643186][ T5824] visor 2-1:0.0: probe with driver visor failed with error -71 [ 312.670939][ T5824] usb 2-1: USB disconnect, device number 57 [ 312.992671][ T30] audit: type=1326 audit(1775385969.252:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9555 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e0f9c819 code=0x7ffc0000 [ 313.066556][ T30] audit: type=1326 audit(1775385969.252:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9555 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f29e0f9c819 code=0x7ffc0000 [ 313.121916][ T30] audit: type=1326 audit(1775385969.252:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9555 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e0f9c819 code=0x7ffc0000 [ 313.122375][ T9556] IPVS: Scheduler module ip_vs_ not found [ 313.151896][ T30] audit: type=1326 audit(1775385969.252:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9555 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29e0f5d04e code=0x7ffc0000 [ 313.174342][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 313.221353][ T30] audit: type=1326 audit(1775385969.262:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9555 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e0f9c819 code=0x7ffc0000 [ 313.244230][ T30] audit: type=1326 audit(1775385969.262:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9555 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29e0f9c819 code=0x7ffc0000 [ 313.269703][ T30] audit: type=1326 audit(1775385969.262:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9555 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e0f9c819 code=0x7ffc0000 [ 313.346158][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 313.362249][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.379705][ T30] audit: type=1326 audit(1775385969.262:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9555 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f29e0f9c819 code=0x7ffc0000 [ 313.404441][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.417393][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.439662][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.452464][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.472172][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.486075][ T30] audit: type=1326 audit(1775385969.262:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9555 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e0f9c819 code=0x7ffc0000 [ 313.527519][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.537173][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.545344][ T30] audit: type=1326 audit(1775385969.262:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9555 comm="syz.2.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f29e0f9c819 code=0x7ffc0000 [ 313.616197][ T5824] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 313.635132][ T9567] netlink: 'syz.2.872': attribute type 1 has an invalid length. [ 313.684534][ T9567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 313.691616][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 313.702497][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.872'. [ 313.718002][ T9567] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 313.734173][ T9567] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 313.758085][ T5824] usb 2-1: device descriptor read/64, error -71 [ 313.792618][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 313.798356][ T9] usbtmc 5-1:16.0: can't read capabilities [ 313.997882][ T9] usb 5-1: USB disconnect, device number 47 [ 314.016041][ T5824] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 314.104531][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.876'. [ 314.114231][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.876'. [ 314.157423][ T5824] usb 2-1: device descriptor read/64, error -71 [ 314.216064][ T5920] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 314.276542][ T5824] usb usb2-port1: attempt power cycle [ 314.375690][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 314.383882][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.394624][ T5920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.408949][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.418562][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.427837][ T5920] usb 1-1: Product: syz [ 314.432128][ T5920] usb 1-1: Manufacturer: syz [ 314.436835][ T5920] usb 1-1: SerialNumber: syz [ 314.584975][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.880'. [ 314.695974][ T5824] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 314.716749][ T5824] usb 2-1: device descriptor read/8, error -71 [ 314.745460][ T9603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.754399][ T9603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.976364][ T1211] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 314.996058][ T5824] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 315.026323][ T5824] usb 2-1: device descriptor read/8, error -71 [ 315.129308][ T1211] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.141263][ T5824] usb usb2-port1: unable to enumerate USB device [ 315.149039][ T1211] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 315.167166][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.195333][ T1211] usb 5-1: config 0 descriptor?? [ 315.224940][ T1211] pwc: Askey VC010 type 2 USB webcam detected. [ 315.428728][ T1211] pwc: recv_control_msg error -32 req 02 val 2b00 [ 315.447964][ T1211] pwc: recv_control_msg error -32 req 02 val 2700 [ 315.512255][ T1211] pwc: recv_control_msg error -71 req 02 val 2c00 [ 315.534125][ T1211] pwc: recv_control_msg error -71 req 04 val 1000 [ 315.551775][ T1211] pwc: recv_control_msg error -71 req 04 val 1300 [ 315.570095][ T1211] pwc: recv_control_msg error -71 req 04 val 1400 [ 315.578348][ T1211] pwc: recv_control_msg error -71 req 02 val 2000 [ 315.586187][ T1211] pwc: recv_control_msg error -71 req 02 val 2100 [ 315.600743][ T1211] pwc: recv_control_msg error -71 req 04 val 1500 [ 315.613845][ T1211] pwc: recv_control_msg error -71 req 02 val 2500 [ 315.627892][ T1211] pwc: recv_control_msg error -71 req 02 val 2400 [ 315.635072][ T1211] pwc: recv_control_msg error -71 req 02 val 2600 [ 315.642512][ T1211] pwc: recv_control_msg error -71 req 02 val 2900 [ 315.650406][ T1211] pwc: recv_control_msg error -71 req 02 val 2800 [ 315.658113][ T1211] pwc: recv_control_msg error -71 req 04 val 1100 [ 315.665259][ T1211] pwc: recv_control_msg error -71 req 04 val 1200 [ 315.682628][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 315.686441][ T1211] pwc: Registered as video103. [ 315.720601][ T1211] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 315.768075][ T1211] usb 5-1: USB disconnect, device number 48 [ 317.266783][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.884'. [ 317.340340][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.348647][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.405335][ T5920] usb 1-1: 0:2 : does not exist [ 317.459206][ T5920] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 317.745971][ T5920] usb 1-1: USB disconnect, device number 53 [ 317.901065][ T6677] udevd[6677]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.926304][ T9] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 318.694714][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 318.832709][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 319.170763][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.464398][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.941712][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.125048][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.536427][ T1211] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 320.639619][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.656512][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.666754][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.677642][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 320.685542][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.688618][ T36] bridge_slave_1: left allmulticast mode [ 320.701671][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.718032][ T1211] usb 5-1: Using ep0 maxpacket: 8 [ 320.723843][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 320.733139][ T9] usb 3-1: can't read configurations, error -71 [ 320.756995][ T1211] usb 5-1: unable to get BOS descriptor or descriptor too short [ 320.779307][ T36] bridge_slave_1: left promiscuous mode [ 320.785232][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.804752][ T1211] usb 5-1: config 2 has an invalid interface number: 187 but max is 0 [ 320.823962][ T1211] usb 5-1: config 2 has no interface number 0 [ 320.844791][ T36] bridge_slave_0: left allmulticast mode [ 320.853737][ T1211] usb 5-1: config 2 interface 187 altsetting 0 endpoint 0xA has invalid maxpacket 1028, setting to 1024 [ 320.879263][ T36] bridge_slave_0: left promiscuous mode [ 320.885133][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.916267][ T1211] usb 5-1: config 2 interface 187 altsetting 0 endpoint 0x5 has an invalid bInterval 239, changing to 11 [ 320.955227][ T1211] usb 5-1: New USB device found, idVendor=04b4, idProduct=5500, bcdDevice=2a.7c [ 320.989398][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.031477][ T1211] usb 5-1: Product: syz [ 321.053427][ T1211] usb 5-1: Manufacturer: syz [ 321.080443][ T1211] usb 5-1: SerialNumber: syz [ 321.108671][ T9655] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 321.130397][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 321.373065][ T1211] cypress_m8 5-1:2.187: HID->COM RS232 Adapter converter detected [ 321.430844][ T1211] cyphidcom ttyUSB0: required endpoint is missing [ 321.489787][ T1211] usb 5-1: USB disconnect, device number 49 [ 321.517126][ T1211] cypress_m8 5-1:2.187: device disconnected [ 321.540952][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.569779][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.600732][ T9681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.900'. [ 321.617698][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 321.627496][ T36] bond0 (unregistering): Released all slaves [ 321.775707][ T9] usb 3-1: device descriptor read/64, error -71 [ 321.896015][ T9] usb usb3-port1: attempt power cycle [ 321.933202][ T36] tipc: Disabling bearer [ 321.948325][ T36] tipc: Left network mode [ 322.248924][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 322.287355][ T9] usb 3-1: device descriptor read/8, error -71 [ 322.545752][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 322.554490][ T9697] fuse: Bad value for 'user_id' [ 322.569808][ T9697] fuse: Bad value for 'user_id' [ 322.627912][ T9] usb 3-1: device descriptor read/8, error -71 [ 322.700159][ T9663] chnl_net:caif_netlink_parms(): no params data found [ 322.744998][ T36] hsr_slave_0: left promiscuous mode [ 322.750783][ T9] usb usb3-port1: unable to enumerate USB device [ 322.761093][ T36] hsr_slave_1: left promiscuous mode [ 322.768457][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.776578][ T5832] Bluetooth: hci4: command tx timeout [ 322.783302][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.791483][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.798984][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.813608][ T36] veth1_macvtap: left promiscuous mode [ 322.819270][ T36] veth0_macvtap: left promiscuous mode [ 322.824964][ T36] veth1_vlan: left promiscuous mode [ 322.830485][ T36] veth0_vlan: left promiscuous mode [ 323.074747][ T36] team0 (unregistering): Port device team_slave_1 removed [ 323.090936][ T36] team0 (unregistering): Port device team_slave_0 removed [ 323.775528][ T9663] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.815844][ T9663] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.840325][ T9663] bridge_slave_0: entered allmulticast mode [ 323.878873][ T9663] bridge_slave_0: entered promiscuous mode [ 323.926108][ T9663] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.947506][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.971989][ T9663] bridge_slave_1: entered allmulticast mode [ 324.029675][ T9663] bridge_slave_1: entered promiscuous mode [ 324.323108][ T9663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.350391][ T9663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.468803][ T9663] team0: Port device team_slave_0 added [ 324.490567][ T9663] team0: Port device team_slave_1 added [ 324.523440][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 324.596690][ T1211] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 324.703071][ T9663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.715740][ T9663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.743772][ T9663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.768222][ T5906] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 324.798666][ T1211] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.807740][ T1211] usb 2-1: not running at top speed; connect to a high speed hub [ 324.835334][ T1211] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 324.856113][ T5832] Bluetooth: hci4: command tx timeout [ 324.861808][ T1211] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 324.878138][ T9663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.882774][ T1211] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 324.894564][ T9663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.894600][ T9663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.011476][ T5906] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 325.021819][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.032719][ T1211] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 325.058175][ T5906] usb 3-1: Product: syz [ 325.069859][ T5906] usb 3-1: Manufacturer: syz [ 325.088317][ T5906] usb 3-1: SerialNumber: syz [ 325.098960][ T1211] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.135157][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.164019][ T1211] usb 2-1: Product: syz [ 325.183415][ T1211] usb 2-1: Manufacturer: syz [ 325.206122][ T1211] usb 2-1: SerialNumber: syz [ 325.269774][ T9663] hsr_slave_0: entered promiscuous mode [ 325.293595][ T9663] hsr_slave_1: entered promiscuous mode [ 325.490367][ T1211] usb 2-1: 0:2 : does not exist [ 325.759903][ T1211] usb 2-1: USB disconnect, device number 62 [ 325.833264][ T6743] udevd[6743]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.948209][ T5832] Bluetooth: hci4: command tx timeout [ 327.028870][ T9663] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 327.088395][ T1211] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 327.135687][ T9663] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 327.181423][ T9663] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 327.237394][ T1211] usb 5-1: device descriptor read/64, error -71 [ 327.248128][ T9663] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 327.302223][ T5906] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 327.365361][ T5906] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 327.412433][ T5906] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 327.473486][ T5906] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 327.486421][ T1211] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 327.552275][ T5906] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 327.615132][ T5906] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 327.646871][ T1211] usb 5-1: device descriptor read/64, error -71 [ 327.692908][ T5906] usb 3-1: USB disconnect, device number 53 [ 327.806192][ T1211] usb usb5-port1: attempt power cycle [ 327.953422][ T9663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.028459][ T9790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.048551][ T9663] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.072206][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.079477][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.182429][ T1211] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 328.228920][ T1211] usb 5-1: device descriptor read/8, error -71 [ 328.575941][ T1211] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 328.637053][ T1211] usb 5-1: device descriptor read/8, error -71 [ 328.746306][ T1211] usb usb5-port1: unable to enumerate USB device [ 328.756021][ T5824] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 328.769198][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.776434][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.884437][ T9803] hub 1-0:1.0: USB hub found [ 328.890634][ T9803] hub 1-0:1.0: 1 port detected [ 328.998071][ T5824] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 329.007267][ T5824] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 329.015445][ T5824] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 329.033390][ T5832] Bluetooth: hci4: command tx timeout [ 329.166697][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.205387][ T5824] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 329.321103][ T5824] usb 3-1: config 0 has no interface number 0 [ 329.493005][ T5824] usb 3-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.593270][ T9663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.741557][ T9810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.759759][ T5824] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.822450][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.862087][ T5824] usb 3-1: Product: syz [ 329.873048][ T5824] usb 3-1: Manufacturer: syz [ 329.884742][ T5824] usb 3-1: SerialNumber: syz [ 329.909358][ T5824] usb 3-1: config 0 descriptor?? [ 329.940225][ T9663] veth0_vlan: entered promiscuous mode [ 330.142656][ T9799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.155719][ T9799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.212907][ T9663] veth1_vlan: entered promiscuous mode [ 330.441929][ T9663] veth0_macvtap: entered promiscuous mode [ 330.530365][ T9663] veth1_macvtap: entered promiscuous mode [ 330.602104][ T9663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.669506][ T9663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.740197][ T1147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.747666][ T5824] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 330.779864][ T5824] usb 3-1: MIDIStreaming interface descriptor not found [ 330.797490][ T1147] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.832825][ T1147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.998836][ T1147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.047853][ T5824] usb 3-1: USB disconnect, device number 54 [ 331.476894][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.540514][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.662969][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.717127][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.885757][ T5920] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 332.011931][ T9844] syzkaller1: entered promiscuous mode [ 332.026732][ T9844] syzkaller1: entered allmulticast mode [ 332.147417][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 332.246268][ T5920] usb 1-1: not running at top speed; connect to a high speed hub [ 332.274011][ T5920] usb 1-1: config 3 has an invalid interface number: 36 but max is 0 [ 332.282425][ T5920] usb 1-1: config 3 has no interface number 0 [ 332.295166][ T5920] usb 1-1: config 3 interface 36 has no altsetting 0 [ 332.325501][ T5920] usb 1-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=31.fc [ 332.354623][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.378026][ T5920] usb 1-1: Product: syz [ 332.395768][ T5920] usb 1-1: Manufacturer: syz [ 332.407710][ T5920] usb 1-1: SerialNumber: syz [ 332.480288][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 333.037817][ T5920] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.36/input/input40 [ 333.051647][ T5920] bcm5974 1-1:3.36: could not read from device [ 333.107095][ T5179] bcm5974 1-1:3.36: could not read from device [ 334.010305][ T5920] input: failed to attach handler mousedev to device input40, error: -5 [ 334.057601][ T5179] bcm5974 1-1:3.36: could not read from device [ 334.090017][ T5920] usb 1-1: USB disconnect, device number 54 [ 334.153357][ T5179] bcm5974 1-1:3.36: could not read from device [ 334.434222][ T6743] udevd[6743]: Error opening device "/dev/input/event4": No such file or directory [ 334.475369][ T6743] udevd[6743]: Unable to EVIOCGABS device "/dev/input/event4" [ 334.536886][ T6743] udevd[6743]: Unable to EVIOCGABS device "/dev/input/event4" [ 334.544580][ T6743] udevd[6743]: Unable to EVIOCGABS device "/dev/input/event4" [ 334.565790][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 334.651736][ T6743] udevd[6743]: Unable to EVIOCGABS device "/dev/input/event4" [ 334.817463][ T9874] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.930'. [ 335.030668][ T9879] use of bytesused == 0 is deprecated and will be removed in the future, [ 335.039339][ T9879] use the actual size instead. [ 335.242678][ T9884] netlink: 9 bytes leftover after parsing attributes in process `syz.4.933'. [ 335.294564][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 335.312262][ T9884] ..0: renamed from hsr0 [ 335.351157][ T9884] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.389775][ T9884] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.400445][ T9884] ..0: entered allmulticast mode [ 335.405696][ T9884] hsr_slave_0: entered allmulticast mode [ 335.412302][ T9884] hsr_slave_1: entered allmulticast mode [ 335.418229][ T5934] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 335.433124][ T9884] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check. [ 335.576929][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 335.594108][ T5934] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 335.614666][ T5934] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.663613][ T5934] usb 7-1: config 0 has no interface number 0 [ 335.678498][ T5934] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 335.689220][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.698638][ T5934] usb 7-1: Product: syz [ 335.702965][ T5934] usb 7-1: Manufacturer: syz [ 335.710235][ T5934] usb 7-1: SerialNumber: syz [ 335.726947][ T5934] usb 7-1: config 0 descriptor?? [ 335.744283][ T5934] uvcvideo 7-1:0.105: Found Unit with invalid ID 0 [ 335.866880][ T9891] netlink: 132 bytes leftover after parsing attributes in process `syz.4.935'. [ 335.942302][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.982699][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.995990][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.026286][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.060198][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.089193][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.138601][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.175863][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.213956][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.226242][ T5829] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 336.252159][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.324342][ T5934] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 336.345252][ T5934] uvcvideo 7-1:0.105: No valid video chain found. [ 336.415903][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 336.415923][ T30] audit: type=1326 audit(1775385992.652:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd733d9c819 code=0x7ffc0000 [ 336.430904][ T5934] usb 7-1: USB disconnect, device number 2 [ 336.446008][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 336.472030][ T5829] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 336.481992][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.503690][ T30] audit: type=1326 audit(1775385992.652:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd733d9c819 code=0x7ffc0000 [ 336.528709][ T5829] usb 5-1: config 0 has no interface number 0 [ 336.564057][ T5829] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 336.600446][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.621840][ T30] audit: type=1326 audit(1775385992.652:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd733d9c819 code=0x7ffc0000 [ 336.657077][ T5829] usb 5-1: Product: syz [ 336.661318][ T5829] usb 5-1: Manufacturer: syz [ 336.682421][ T5829] usb 5-1: SerialNumber: syz [ 336.707489][ T30] audit: type=1326 audit(1775385992.652:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd733d9c819 code=0x7ffc0000 [ 336.738948][ T5829] usb 5-1: config 0 descriptor?? [ 336.761744][ T5829] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22 [ 336.777946][ T30] audit: type=1326 audit(1775385992.652:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd733d9c819 code=0x7ffc0000 [ 336.879211][ T30] audit: type=1326 audit(1775385992.652:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd733d9c819 code=0x7ffc0000 [ 337.146248][ T5829] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 337.155667][ T30] audit: type=1326 audit(1775385992.652:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd733d9c819 code=0x7ffc0000 [ 337.178815][ T30] audit: type=1326 audit(1775385992.652:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fd733d9c819 code=0x7ffc0000 [ 337.257557][ T9913] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 337.333068][ T30] audit: type=1326 audit(1775385992.652:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd733d9c819 code=0x7ffc0000 [ 337.375896][ T9913] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 337.397530][ T5829] usb 3-1: config 0 has an invalid descriptor of length 131, skipping remainder of the config [ 337.442188][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 337.454359][ T30] audit: type=1326 audit(1775385992.652:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fd733d9c819 code=0x7ffc0000 [ 337.498720][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 7526, setting to 64 [ 337.566931][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 337.645764][ T5934] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 337.653598][ T5906] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 337.708076][ T5829] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 337.735647][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 337.745344][ T5829] usb 3-1: Product: syz [ 337.772022][ T5829] usb 3-1: Manufacturer: syz [ 337.792504][ T5829] usb 3-1: SerialNumber: syz [ 337.802672][ T5829] usb 3-1: config 0 descriptor?? [ 337.824049][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 337.837970][ T5906] usb 7-1: unable to get BOS descriptor or descriptor too short [ 337.849471][ T5934] usb 1-1: not running at top speed; connect to a high speed hub [ 337.857873][ T5906] usb 7-1: not running at top speed; connect to a high speed hub [ 337.869688][ T5934] usb 1-1: config 133 has an invalid interface number: 190 but max is 0 [ 337.878465][ T5906] usb 7-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 337.888290][ T5906] usb 7-1: config 5 interface 0 has no altsetting 1 [ 337.895185][ T5934] usb 1-1: config 133 has no interface number 0 [ 337.902287][ T5934] usb 1-1: config 133 interface 190 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 337.917707][ T5906] usb 7-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 337.926704][ T9909] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 337.937135][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.955184][ T5934] usb 1-1: config 133 interface 190 has no altsetting 0 [ 337.983995][ T5906] usb 7-1: Product: syz [ 337.994049][ T5934] usb 1-1: New USB device found, idVendor=083a, idProduct=4507, bcdDevice=31.24 [ 338.003753][ T5906] usb 7-1: Manufacturer: syz [ 338.010109][ T5906] usb 7-1: SerialNumber: syz [ 338.018153][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.049471][ T5934] usb 1-1: Product: 侗⌅﷜쑪䠳㷁韄槱㗳琁儖儅屻ᄠ蝩캴鋖⳾뫄烾ﲅ៛恎喛ㄨフ [ 338.067011][ T5934] usb 1-1: Manufacturer: 覙雽һ욪ꧺ䢢췏궃⳿跈䎋豐솣˥䚚遾ꩄ㍈瑥뉜ꯙ玜娵ᴝ᠖鸋ᆲ钠﹍ねꨖ鶸։ [ 338.096095][ T5934] usb 1-1: SerialNumber: ї [ 338.152504][ T5829] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 338.165693][ T5829] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 338.603771][ T5906] usb 7-1: USB disconnect, device number 3 [ 338.662514][ T6743] udevd[6743]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.958880][ T5953] usb 5-1: USB disconnect, device number 54 [ 339.579927][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 340.001040][ T5829] usb 3-1: USB disconnect, device number 55 [ 340.388252][ T5934] usb 1-1: Could not find all expected endpoints [ 340.402675][ T5934] usb 1-1: USB disconnect, device number 55 [ 340.705683][ T5829] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 340.855803][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 340.883421][ T5829] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 340.926112][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.945120][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.986658][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 341.031695][ T5829] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 341.067253][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.086062][ T5829] usb 3-1: config 0 descriptor?? [ 341.273121][ T9972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.380933][ T5829] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0016/input/input42 [ 341.535502][ T9944] veth1_to_hsr: entered promiscuous mode [ 341.541467][ T9944] macsec1: entered promiscuous mode [ 341.547858][ T5829] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0016/input/input43 [ 341.563474][ T9944] macsec1: entered allmulticast mode [ 341.581527][ T9944] veth1_to_hsr: entered allmulticast mode [ 341.738334][ T9982] netlink: 184 bytes leftover after parsing attributes in process `syz.6.957'. [ 341.750207][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.957'. [ 341.831644][ T5829] kye 0003:0458:5013.0016: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 341.905711][ T5829] usb 3-1: USB disconnect, device number 56 [ 342.157307][ T9984] fido_id[9984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 342.656072][ T5920] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 342.825889][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 342.833154][ T5920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.846227][ T5920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 342.856348][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 342.856387][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 342.856434][ T5920] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 342.856459][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.922758][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 342.975929][ T5920] hub 2-1:1.0: bad descriptor, ignoring hub [ 342.992970][ T5920] hub 2-1:1.0: probe with driver hub failed with error -5 [ 343.016670][ T5920] cdc_wdm 2-1:1.0: skipping garbage [ 343.028157][ T5920] cdc_wdm 2-1:1.0: skipping garbage [ 343.039729][ T5920] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 343.053833][ T5920] cdc_wdm 2-1:1.0: Unknown control protocol [ 343.273604][ T9989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.291463][ T9989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.656585][ T5934] usb 2-1: USB disconnect, device number 63 [ 343.702891][T10000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.961'. [ 343.839081][T10013] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 343.847744][T10013] netlink: 'syz.6.964': attribute type 2 has an invalid length. [ 343.855521][T10013] netlink: 132 bytes leftover after parsing attributes in process `syz.6.964'. [ 344.025659][ T5920] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 344.175630][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 344.192331][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 344.232821][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 344.265732][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 344.287829][ T5920] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 344.310171][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12032, setting to 1024 [ 344.343927][ T5920] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 344.355955][ T5934] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 344.404651][ T5920] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 344.443189][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.479513][ T5920] usb 2-1: Product: syz [ 344.495356][ T5920] usb 2-1: Manufacturer: syz [ 344.497303][ T5934] usb 1-1: device descriptor read/64, error -71 [ 344.516539][ T5920] usb 2-1: SerialNumber: syz [ 344.566528][ T5920] usb 2-1: config 0 descriptor?? [ 344.619936][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 344.673070][ T5920] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 344.680472][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 344.795951][ T5934] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 344.814377][ C0] mcba_usb 2-1:0.0 can0: Unsupported msg (0x22) [ 344.820766][ C0] mcba_usb 2-1:0.0 can0: format error [ 344.907348][T10023] syzkaller0: entered promiscuous mode [ 344.925937][T10023] syzkaller0: entered allmulticast mode [ 344.975996][ T5934] usb 1-1: device descriptor read/64, error -71 [ 344.983467][T10023] 0: reclassify loop, rule prio 0, protocol 800 [ 345.086118][ T5934] usb usb1-port1: attempt power cycle [ 345.133926][ T1211] usb 2-1: USB disconnect, device number 64 [ 345.170625][ T1211] mcba_usb 2-1:0.0 can0: device disconnected [ 345.365854][ T5920] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 345.478766][ T5934] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 345.548116][ T5934] usb 1-1: device descriptor read/8, error -71 [ 345.575807][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 345.588528][ T5920] usb 7-1: config 51 has an invalid interface number: 208 but max is 0 [ 345.608435][ T5920] usb 7-1: config 51 has no interface number 0 [ 345.632504][ T5920] usb 7-1: config 51 interface 208 has no altsetting 0 [ 345.657701][ T5920] usb 7-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 345.668759][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.677546][ T5920] usb 7-1: Product: syz [ 345.682578][ T5920] usb 7-1: Manufacturer: syz [ 345.689356][ T5920] usb 7-1: SerialNumber: syz [ 345.817050][ T5934] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 345.847890][ T5934] usb 1-1: device descriptor read/8, error -71 [ 345.940699][ T5920] f81534a_ctrl 7-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 345.957231][ T5934] usb usb1-port1: unable to enumerate USB device [ 346.106273][ T8199] wlan0: Trigger new scan to find an IBSS to join [ 346.134954][ T5920] usb 7-1: USB disconnect, device number 4 [ 346.505390][T10060] netlink: 68 bytes leftover after parsing attributes in process `syz.4.973'. [ 346.585731][ T5906] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 346.770890][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 346.811826][ T5906] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 346.875917][ T5906] usb 2-1: config 0 has no interface number 0 [ 346.915997][ T5906] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 346.960639][ T5906] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 346.977143][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.005233][ T5906] usb 2-1: Product: syz [ 347.068564][ T5906] usb 2-1: Manufacturer: syz [ 347.073245][ T5906] usb 2-1: SerialNumber: syz [ 347.123709][ T5906] usb 2-1: config 0 descriptor?? [ 347.159585][T10052] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 347.168120][ T5934] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 347.281270][T10093] binder: BINDER_SET_CONTEXT_MGR already set [ 347.287604][T10093] binder: 10085:10093 ioctl 4018620d 200000000040 returned -16 [ 347.349337][ T5934] usb 5-1: unable to get BOS descriptor or descriptor too short [ 347.383791][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.977'. [ 347.434660][T10052] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 347.441979][ T5934] usb 5-1: not running at top speed; connect to a high speed hub [ 347.464348][ T5934] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.538640][ T5934] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.565402][ T5934] usb 5-1: string descriptor 0 read error: -22 [ 347.583184][ T5934] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.605243][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.642795][ T5934] usb 5-1: 0:2 : does not exist [ 347.852167][ T5906] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 347.857941][T10052] fuse: Unknown parameter 'b' [ 347.872558][ T5906] asix 2-1:0.188: probe with driver asix failed with error -32 [ 347.954423][ T5906] usb 2-1: USB disconnect, device number 65 [ 348.309816][T10105] 8021q: adding VLAN 0 to HW filter on device bond3 [ 348.359472][T10105] bond2: (slave bond3): Enslaving as an active interface with an up link [ 348.530687][T10109] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 348.630023][T10116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.643716][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 348.643736][ T30] audit: type=1800 audit(1775386004.902:638): pid=10113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.980" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 349.526957][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 349.565362][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 350.344596][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 350.606115][ T5934] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 350.689308][ T5934] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 350.748533][ T5934] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 350.811048][ T5934] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 350.968091][ T5934] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 351.017713][ T78] wlan0: Trigger new scan to find an IBSS to join [ 351.247852][ T5934] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 351.388327][ T5934] usb 5-1: USB disconnect, device number 55 [ 351.478318][ T5920] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 351.516448][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'. [ 351.712301][ T5920] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 351.723680][ T30] audit: type=1326 audit(1775386007.982:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 351.730691][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.815282][ T5920] usb 2-1: config 0 descriptor?? [ 351.840990][ T30] audit: type=1326 audit(1775386007.982:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 351.931609][ T30] audit: type=1326 audit(1775386007.982:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 351.996560][ T30] audit: type=1326 audit(1775386007.982:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 352.088816][T10151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.092012][ T30] audit: type=1326 audit(1775386007.982:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 352.150794][T10151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.180713][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.212972][ T30] audit: type=1326 audit(1775386007.982:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 352.314174][ T30] audit: type=1326 audit(1775386007.982:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 352.377080][ T5920] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 352.389563][ T30] audit: type=1326 audit(1775386008.012:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 352.413337][ T30] audit: type=1326 audit(1775386008.012:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10159 comm="syz.6.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c2ef96597 code=0x7ffc0000 [ 352.555103][ T5920] [drm:udl_init] *ERROR* Selecting channel failed [ 352.569722][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 352.673055][ T5920] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 352.700345][ T5920] [drm] Initialized udl on minor 2 [ 352.736101][ T5920] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 352.776724][ T5920] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 352.813869][ T5829] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 352.845002][ T5920] usb 2-1: USB disconnect, device number 66 [ 352.862810][ T5829] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 353.269935][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'. [ 354.596113][ T5920] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 354.620871][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 354.635448][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 354.663345][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 354.674473][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 354.775935][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 354.783868][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 354.794636][ T5920] usb 3-1: config 1 has too many interfaces: 67, using maximum allowed: 32 [ 354.805688][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.805719][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 67 [ 354.805741][ T5920] usb 3-1: config 1 has no interface number 0 [ 354.909282][ T5920] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 354.919156][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.945235][ T5920] usb 3-1: Product: syz [ 354.958918][ T5920] usb 3-1: Manufacturer: syz [ 354.972059][ T5920] usb 3-1: SerialNumber: syz [ 355.269573][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.326028][ T5934] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 355.365826][ T5920] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 355.397646][ T5920] usb 3-1: USB disconnect, device number 57 [ 355.458227][ T6677] udevd[6677]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.516894][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.578074][ T5934] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 355.587723][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.622699][ T5934] usb 5-1: Product: syz [ 355.638317][ T5934] usb 5-1: Manufacturer: syz [ 355.642996][ T5934] usb 5-1: SerialNumber: syz [ 355.694863][ T5934] usb 5-1: config 0 descriptor?? [ 355.727328][ T5934] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 355.734564][ T5934] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 355.770303][T10233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1006'. [ 355.909132][ T5934] usb 5-1: USB disconnect, device number 56 [ 356.195707][ T29] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 356.227437][T10248] pimreg: entered allmulticast mode [ 356.253754][T10248] pimreg: left allmulticast mode [ 356.366117][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 356.388100][ T29] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 356.397197][ T5934] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 356.415766][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.445917][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.497303][ T29] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.520097][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.538083][ T29] usb 3-1: Product: syz [ 356.542436][ T29] usb 3-1: Manufacturer: syz [ 356.558425][ T29] usb 3-1: SerialNumber: syz [ 356.588139][ T5934] usb 5-1: config index 0 descriptor too short (expected 36, got 27) [ 356.605929][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.623666][ T5934] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=34.b1 [ 356.645916][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.654016][ T5934] usb 5-1: Product: syz [ 356.675659][ T5934] usb 5-1: Manufacturer: syz [ 356.680322][ T5934] usb 5-1: SerialNumber: syz [ 356.702629][ T5934] usb 5-1: config 0 descriptor?? [ 356.715298][ T5934] bfusb 5-1:0.0: probe with driver bfusb failed with error -5 [ 356.755692][ T5920] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 356.786936][ T5953] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 356.849391][T10259] xt_TPROXY: Can be used only with -p tcp or -p udp [ 356.920117][T10265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.930734][ T5920] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 356.939330][ T5906] usb 5-1: USB disconnect, device number 57 [ 356.946794][ T5920] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 356.955358][ T5920] usb 1-1: config 0 has no interface number 0 [ 356.962829][T10265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.980249][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 357.012609][ T5920] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 357.024894][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 357.041097][ T5920] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 357.051318][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 357.062933][ T5920] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 357.072164][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 357.083280][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.100155][ T5953] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 357.119594][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.133475][ T5920] usb 1-1: config 0 descriptor?? [ 357.139217][ T5953] usb 2-1: Product: syz [ 357.143748][ T5953] usb 2-1: Manufacturer: syz [ 357.151533][ T5953] usb 2-1: SerialNumber: syz [ 357.165785][ T5953] usb 2-1: config 0 descriptor?? [ 357.178734][ T5953] iguanair 2-1:0.0: failed to get version [ 357.187273][ T5953] iguanair 2-1:0.0: probe with driver iguanair failed with error -90 [ 357.255721][ T5906] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 357.330747][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1015'. [ 357.439398][ T5934] usb 2-1: USB disconnect, device number 67 [ 357.456132][ T5906] usb 5-1: config index 0 descriptor too short (expected 36, got 27) [ 357.465461][ T5906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.488829][ T5906] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=34.b1 [ 357.499522][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.508174][ T5906] usb 5-1: Product: syz [ 357.512693][ T5906] usb 5-1: Manufacturer: syz [ 357.521089][ T5906] usb 5-1: SerialNumber: syz [ 357.538913][ T5906] usb 5-1: config 0 descriptor?? [ 357.552284][ T5906] bfusb 5-1:0.0: probe with driver bfusb failed with error -5 [ 357.747325][ T5953] usb 5-1: USB disconnect, device number 58 [ 357.846853][ T5920] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input44 [ 357.864353][ T5920] input: failed to attach handler kbd to device input44, error: -5 [ 358.053230][ T5934] usb 1-1: USB disconnect, device number 60 [ 358.073280][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.100165][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.315826][ T5953] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 359.044073][ T29] usb 3-1: 0:2 : does not exist [ 359.088298][ T29] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 359.244153][ T29] usb 3-1: USB disconnect, device number 58 [ 359.301209][ T6677] udevd[6677]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.465778][ T5934] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 359.565487][T10296] netlink: 'syz.2.1021': attribute type 4 has an invalid length. [ 359.655951][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 359.663167][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.673979][ T5934] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.690747][ T5934] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.754816][ T5934] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 359.802824][ T5934] usb 1-1: config 0 interface 0 has no altsetting 0 [ 359.828866][ T5934] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 359.959310][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.014091][ T5934] usb 1-1: config 0 descriptor?? [ 360.394662][T10314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.417284][T10314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.458551][ T5934] hid-thrustmaster 0003:044F:B65D.0017: unbalanced collection at end of report description [ 360.480132][ T5934] hid-thrustmaster 0003:044F:B65D.0017: parse failed with error -22 [ 360.489695][ T5934] hid-thrustmaster 0003:044F:B65D.0017: probe with driver hid-thrustmaster failed with error -22 [ 360.742744][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 360.885682][ T5953] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 360.927932][ T9] usb 7-1: config 0 has no interfaces? [ 360.935313][ T9] usb 7-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 360.947210][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.962126][ T9] usb 7-1: config 0 descriptor?? [ 361.055892][ T5920] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 361.065470][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 361.079866][ T5953] usb 2-1: config 0 has no interfaces? [ 361.087641][ T5953] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 361.098864][ T5953] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 361.123058][ T5953] usb 2-1: Manufacturer: syz [ 361.134272][ T5953] usb 2-1: config 0 descriptor?? [ 361.185808][T10310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.207565][T10310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.225791][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 361.235327][ T5920] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 361.255485][ T5920] usb 5-1: config 251 has no interface number 0 [ 361.262289][ T5920] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 361.272597][ T5934] usb 7-1: USB disconnect, device number 5 [ 361.283497][ T5920] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 361.294964][ T5920] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 361.320269][ T5920] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 361.725685][ T5920] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 361.740922][ T5920] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.751312][ T5920] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.765073][ T5920] usb 5-1: config 251 interface 202 has no altsetting 0 [ 361.774146][ T5920] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 361.786068][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 361.794235][ T5920] usb 5-1: Product: syz [ 361.798791][ T5920] usb 5-1: SerialNumber: syz [ 362.021953][ T5920] cxacru 5-1:251.202: cxacru_bind: interface has incorrect endpoints [ 362.031127][ T5920] cxacru 5-1:251.202: usbatm_usb_probe: bind failed: -19! [ 362.047543][ T5920] usb 5-1: USB disconnect, device number 59 [ 362.304585][ T5934] usb 1-1: USB disconnect, device number 61 [ 362.536281][ T29] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 362.676597][ T29] usb 3-1: device descriptor read/64, error -71 [ 362.743712][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1037'. [ 362.965828][ T29] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 363.106111][ T29] usb 3-1: device descriptor read/64, error -71 [ 363.227189][ T29] usb usb3-port1: attempt power cycle [ 363.300878][ T5920] usb 2-1: USB disconnect, device number 69 [ 363.576014][ T29] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 363.605022][ T29] usb 3-1: device descriptor read/8, error -71 [ 363.976191][ T5920] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 363.984668][ T29] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 364.016679][ T29] usb 3-1: device descriptor read/8, error -71 [ 364.036521][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 364.127804][ T5920] usb 2-1: too many configurations: 244, using maximum allowed: 8 [ 364.136623][ T29] usb usb3-port1: unable to enumerate USB device [ 364.219831][ T5920] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 364.230506][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.239478][ T5920] usb 2-1: Product: syz [ 364.243823][ T5920] usb 2-1: Manufacturer: syz [ 364.249117][ T5920] usb 2-1: SerialNumber: syz [ 364.336515][ T5920] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 364.401143][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 365.142529][ T30] kauditd_printk_skb: 217 callbacks suppressed [ 365.142554][ T30] audit: type=1326 audit(1775386021.292:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10361 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164759c819 code=0x7ffc0000 [ 365.218742][ T30] audit: type=1326 audit(1775386021.292:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10361 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164759c819 code=0x7ffc0000 [ 365.250173][ T30] audit: type=1326 audit(1775386021.292:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10361 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f164759c819 code=0x7ffc0000 [ 365.319878][ T30] audit: type=1326 audit(1775386021.292:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10361 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164759c819 code=0x7ffc0000 [ 365.359311][ T29] usb 2-1: USB disconnect, device number 70 [ 365.433781][ T30] audit: type=1326 audit(1775386021.292:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10361 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f164759c819 code=0x7ffc0000 [ 365.519350][ T30] audit: type=1326 audit(1775386021.292:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10361 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164759c819 code=0x7ffc0000 [ 365.586714][ T30] audit: type=1326 audit(1775386021.292:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10361 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f164759c819 code=0x7ffc0000 [ 365.648143][ T30] audit: type=1326 audit(1775386021.292:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10361 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164759c819 code=0x7ffc0000 [ 365.711318][ T30] audit: type=1326 audit(1775386021.302:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10361 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164759c819 code=0x7ffc0000 [ 365.735959][ T9] usb 2-1: Service connection timeout for: 256 [ 365.742295][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 365.766034][ T30] audit: type=1326 audit(1775386021.302:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10361 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f164759c819 code=0x7ffc0000 [ 365.795510][ T9] ath9k_htc: Failed to initialize the device [ 365.809308][ T5934] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 365.823002][ T29] usb 2-1: ath9k_htc: USB layer deinitialized [ 365.987624][ T5934] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 366.008156][ T5906] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 366.031973][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.057641][ T5934] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.110951][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 366.126916][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.228197][ T5934] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.239597][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 366.246629][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 366.258936][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.283446][ T5934] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.295805][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.337389][ T5906] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 366.349518][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 366.370907][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.389549][ T5906] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 366.405167][ T5934] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.432542][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.461577][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 366.478373][ T5906] usb 1-1: Product: syz [ 366.493576][ T5906] usb 1-1: Manufacturer: syz [ 366.501647][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.518861][ T5906] usb 1-1: SerialNumber: syz [ 366.533065][ T5934] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.547756][ T5906] usb 1-1: config 0 descriptor?? [ 366.572057][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 366.611821][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.748683][T10393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.905187][ T5934] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.924148][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 366.938236][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.947533][ T5934] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 367.022192][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 367.067769][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 367.079425][ T5934] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 367.165359][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 367.200098][ T5934] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 367.209973][ T5934] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 367.218851][ T5934] usb 3-1: Product: syz [ 367.225478][ T5934] usb 3-1: Manufacturer: syz [ 367.284968][ T5934] usb 3-1: SerialNumber: syz [ 367.541193][ T5934] usb 3-1: config 0 descriptor?? [ 367.553885][ T5934] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 367.604701][T10398] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1053'. [ 367.917939][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 367.919056][ T9] usb 3-1: USB disconnect, device number 63 [ 367.959836][ T9] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 368.028476][T10402] fuse: Bad value for 'fd' [ 368.595305][T10410] bridge0: entered promiscuous mode [ 368.721441][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'. [ 368.769663][T10414] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1058'. [ 368.980673][ T9] usb 1-1: USB disconnect, device number 62 [ 369.399196][T10431] bond1: option all_slaves_active: invalid value (9) [ 369.425149][T10431] bond1 (unregistering): Released all slaves [ 369.515674][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 369.556449][ T5906] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 369.645654][ T9] usb 1-1: device descriptor read/64, error -71 [ 369.718533][ T5906] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 369.745674][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.765169][ T5906] usb 3-1: config 0 descriptor?? [ 369.885691][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 369.896378][T10446] fuse: Unknown parameter 'f0x0000000000000004' [ 370.026308][ T9] usb 1-1: device descriptor read/64, error -71 [ 370.035947][ T5920] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 370.098671][ T5906] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 370.136381][ T5906] [drm:udl_init] *ERROR* Selecting channel failed [ 370.158455][ T9] usb usb1-port1: attempt power cycle [ 370.210015][ T5906] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 370.217540][ T5906] [drm] Initialized udl on minor 2 [ 370.225108][ T5906] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 370.236351][ T5906] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 370.243515][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 370.250749][ T29] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 370.260576][ T5920] usb 2-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b [ 370.266060][ T5906] usb 3-1: USB disconnect, device number 64 [ 370.282147][ T29] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 370.299041][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.336740][ T5934] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 370.372040][ T5920] usb 2-1: config 0 descriptor?? [ 370.409417][ T5920] usb 2-1: selecting invalid altsetting 0 [ 370.415235][ T5920] usb 2-1: can't set first interface for hiFace device. [ 370.458999][ T5920] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 370.505699][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 370.515870][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 370.525448][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.555980][ T5934] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 370.566885][ T9] usb 1-1: device descriptor read/8, error -71 [ 370.581991][ T5934] usb 5-1: New USB device found, idVendor=0596, idProduct=bd5c, bcdDevice=d0.0e [ 370.596543][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 370.614896][ T5934] usb 5-1: Manufacturer: syz [ 370.635319][ T5934] usb 5-1: SerialNumber: syz [ 370.654642][ T5934] usb 5-1: config 0 descriptor?? [ 370.815819][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 370.870213][ T9] usb 1-1: device descriptor read/8, error -71 [ 370.903772][ T5920] usb 5-1: USB disconnect, device number 60 [ 370.986819][ T9] usb usb1-port1: unable to enumerate USB device [ 371.168921][ T5829] usb 2-1: USB disconnect, device number 71 [ 371.301550][T10482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.355659][ T5920] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 371.538271][ T5920] usb 5-1: config 0 has no interfaces? [ 371.545116][ T5920] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 371.562147][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.573633][ T5920] usb 5-1: config 0 descriptor?? [ 371.675743][ T5829] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 371.902515][ T5906] usb 5-1: USB disconnect, device number 61 [ 371.955730][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 371.974482][ T5829] usb 2-1: unable to get BOS descriptor or descriptor too short [ 372.001172][ T5829] usb 2-1: string descriptor 0 read error: -22 [ 372.033084][ T5829] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 372.069581][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.117950][ T5829] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 372.131528][ T5829] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 372.314722][T10485] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1078'. [ 372.325261][ T1211] usb 2-1: USB disconnect, device number 72 [ 372.415964][ T5906] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 372.625669][ T5934] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 372.625669][ T5829] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 372.727737][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 372.737475][ T5906] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 372.764069][ T5906] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 372.778469][ T5934] usb 7-1: config 0 has no interfaces? [ 372.787581][ T5906] usb 5-1: string descriptor 0 read error: -22 [ 372.793909][ T5906] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 372.807068][ T5934] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 372.811266][ T5829] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 372.825933][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.828693][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.837268][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.847969][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.864644][ T5934] usb 7-1: Product: syz [ 372.865342][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 372.884485][ T5829] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 372.885927][ T5934] usb 7-1: Manufacturer: syz [ 372.897430][ T5829] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 372.917421][ T5829] usb 1-1: Manufacturer: syz [ 372.924725][ T5934] usb 7-1: SerialNumber: syz [ 372.935176][ T5829] usb 1-1: config 0 descriptor?? [ 372.944060][ T5934] usb 7-1: config 0 descriptor?? [ 373.086651][ T5906] usb 5-1: Can't get UAC3 power state for id 10 [ 373.093989][T10480] netlink: 'syz.4.1077': attribute type 21 has an invalid length. [ 373.401778][T10495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.499841][T10495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.593951][ T5829] usbhid 1-1:0.0: can't add hid device: -71 [ 373.600787][ T5829] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 373.638067][ T5829] usb 1-1: USB disconnect, device number 67 [ 373.846043][ T5906] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 373.860792][ T5920] usb 7-1: USB disconnect, device number 6 [ 374.456291][ T5920] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 374.628386][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 374.643166][ T5920] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 374.655693][ T5829] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 374.667968][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.684044][ T5920] usb 7-1: Product: syz [ 374.688573][ T5920] usb 7-1: Manufacturer: syz [ 374.693216][ T5920] usb 7-1: SerialNumber: syz [ 374.732975][ T5920] usb 7-1: config 0 descriptor?? [ 374.825972][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 374.844789][ T5829] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 374.872876][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.886319][ T5829] usb 1-1: config 0 has no interface number 0 [ 374.899333][ T5829] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 374.909163][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.917874][ T5829] usb 1-1: Product: syz [ 374.923323][ T5829] usb 1-1: Manufacturer: syz [ 374.928491][ T5829] usb 1-1: SerialNumber: syz [ 374.945992][ T5829] usb 1-1: config 0 descriptor?? [ 375.159711][ T5829] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 375.182331][ T5829] uvcvideo 1-1:0.105: No valid video chain found. [ 375.362092][ T1211] usb 1-1: USB disconnect, device number 68 [ 375.478947][ T5920] peak_usb 7-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 375.515347][ T5906] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 375.548693][ T5934] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 375.581743][ T5920] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 375.645269][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 375.665034][ T5920] usb 7-1: USB disconnect, device number 7 [ 375.744698][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 375.760089][ T5906] usb 5-1: USB disconnect, device number 62 [ 375.776348][ T5934] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 375.789100][ T5934] usb 3-1: config 0 has no interface number 0 [ 375.795295][ T5934] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.823196][ T5934] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 375.878040][ T5934] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 375.926173][ T5934] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.962542][ T5934] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 375.980230][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.012576][ T5934] usb 3-1: config 0 descriptor?? [ 376.034927][ T5934] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 376.264530][ T5920] usb 3-1: USB disconnect, device number 65 [ 376.270615][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 376.292186][ T5920] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 376.503370][T10566] vlan2: entered promiscuous mode [ 376.515253][T10566] bridge0: entered promiscuous mode [ 376.520927][ T5934] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 376.686159][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 376.735622][ T5934] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 376.774150][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.805934][ T5934] usb 7-1: Product: syz [ 376.810173][ T5934] usb 7-1: Manufacturer: syz [ 376.814808][ T5934] usb 7-1: SerialNumber: syz [ 376.843998][ T5934] usb 7-1: config 0 descriptor?? [ 376.904333][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 376.910660][ T5934] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 377.111088][ T5934] pwc: Warning: more than 1 configuration available. [ 377.119400][ T5934] pwc: Failed to set LED on/off time (-71) [ 377.125737][ T5934] pwc: send_video_command error -71 [ 377.138081][ T5934] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 377.175144][ T5934] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 377.212071][ T5934] usb 7-1: USB disconnect, device number 8 [ 377.439800][T10583] netlink: 'syz.1.1100': attribute type 4 has an invalid length. [ 377.996047][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 378.147728][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 378.162368][ T9] usb 2-1: config 0 has no interfaces? [ 378.186544][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 378.205814][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 378.227594][ T9] usb 2-1: Manufacturer: syz [ 378.363844][ T9] usb 2-1: config 0 descriptor?? [ 378.662966][T10585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.671974][T10585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.836054][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.842487][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.168500][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1105'. [ 379.178118][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1105'. [ 379.234502][T10606] hsr_slave_0: left promiscuous mode [ 379.247601][T10606] hsr_slave_1: left promiscuous mode [ 379.984564][T10633] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 380.078002][ T5920] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 380.247918][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 380.266151][ T5920] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 380.303788][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 380.344555][ T5920] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 380.354310][ T5920] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 380.438513][ T5920] usb 3-1: Manufacturer: syz [ 380.446334][ T5824] usb 2-1: USB disconnect, device number 73 [ 380.503601][ T5920] usb 3-1: config 0 descriptor?? [ 380.523848][ T5920] smsusb:smsusb_probe: board id=9, interface number 0 [ 380.537675][ T5920] smsusb:smsusb_probe: Device initialized with return code -19 [ 380.796281][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 380.815968][T10624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1112'. [ 380.828792][ T5906] usb 3-1: USB disconnect, device number 66 [ 381.285639][ T5906] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 381.447757][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 381.462063][ T5906] usb 1-1: config 8 has an invalid interface number: 178 but max is 2 [ 381.480540][ T5906] usb 1-1: config 8 has an invalid interface number: 112 but max is 2 [ 381.509202][ T5906] usb 1-1: config 8 has no interface number 1 [ 381.535873][ T5906] usb 1-1: config 8 has no interface number 2 [ 381.557138][ T5906] usb 1-1: too many endpoints for config 8 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 381.590877][ T5906] usb 1-1: config 8 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 381.642008][ T5906] usb 1-1: config 8 interface 178 has no altsetting 0 [ 381.650420][ T5906] usb 1-1: config 8 interface 112 has no altsetting 0 [ 381.660790][ T5906] usb 1-1: New USB device found, idVendor=05c6, idProduct=9201, bcdDevice=c5.50 [ 381.672863][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.692926][ T5906] usb 1-1: Product: syz [ 381.703983][ T5906] usb 1-1: Manufacturer: syz [ 381.719331][ T5906] usb 1-1: SerialNumber: syz [ 381.966800][T10644] netlink: 'syz.4.1118': attribute type 2 has an invalid length. [ 381.979835][ T5906] usb 1-1: selecting invalid altsetting 1 [ 381.995999][ T5906] usb 1-1: Could not set interface, error -22 [ 382.027225][ T5920] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 382.073502][ T5906] usb 1-1: USB disconnect, device number 69 [ 382.208977][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.222998][ T5920] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 382.232478][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.298879][ T5920] usb 3-1: Product: syz [ 382.303214][ T5920] usb 3-1: Manufacturer: syz [ 382.323285][ T5920] usb 3-1: SerialNumber: syz [ 382.329670][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 382.426625][ T5920] usb 3-1: config 0 descriptor?? [ 382.465506][ T5920] ljca 3-1:0.0: bulk endpoints not found [ 382.491706][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 382.555458][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.605805][ T9] usb 5-1: Product: syz [ 382.629396][ T9] usb 5-1: Manufacturer: syz [ 382.648336][ T9] usb 5-1: SerialNumber: syz [ 382.983821][T10657] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 382.993653][T10657] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 383.102664][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 383.140480][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 383.214080][ T1001] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.224884][ T1001] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.241606][ T1001] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.260290][ T1001] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.536348][ T1001] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 384.760251][ T5934] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 384.967633][ T5934] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 384.978192][ T5934] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 384.990742][ T5934] usb 7-1: config 1 interface 0 has no altsetting 0 [ 385.002564][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 385.009160][ T5934] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 385.025510][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.034647][ T5934] usb 7-1: Product: syz [ 385.039055][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 385.039572][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 385.066450][ T5934] usb 7-1: Manufacturer: syz [ 385.071304][ T5934] usb 7-1: SerialNumber: syz [ 385.078659][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 385.084789][T10666] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 385.094944][T10666] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 385.150159][ T9] usb 5-1: USB disconnect, device number 63 [ 385.257112][ T5906] usb 3-1: USB disconnect, device number 67 [ 385.307456][ T5824] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 385.450610][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 385.475699][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 385.492945][ T5824] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.504694][ T5824] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 385.520407][ T5824] usb 2-1: New USB device found, idVendor=046d, idProduct=0921, bcdDevice=ab.34 [ 385.537195][T10678] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1127'. [ 385.549297][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.568715][ T5824] usb 2-1: Product: syz [ 385.573761][ T5824] usb 2-1: Manufacturer: syz [ 385.579523][ T5824] usb 2-1: SerialNumber: syz [ 385.619159][ T5824] usb 2-1: config 0 descriptor?? [ 385.676845][ T5934] rtl8150 7-1:1.0: couldn't reset the device [ 385.693398][ T5934] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 385.724173][ T5934] usb 7-1: USB disconnect, device number 9 [ 385.975736][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 386.152932][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 386.177901][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.250234][ T9] usb 5-1: Product: syz [ 386.261409][ T9] usb 5-1: Manufacturer: syz [ 386.273365][ T9] usb 5-1: SerialNumber: syz [ 387.046901][T10688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1132'. [ 387.165356][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 387.214983][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 387.265639][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 387.306049][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 387.376912][ T9] usb 5-1: USB disconnect, device number 64 [ 387.645950][ T5934] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 387.819586][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.868074][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.891908][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.920274][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 387.948002][ T5934] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.960218][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.977835][ T5824] gspca_main: tv8532-2.14.0 probing 046d:0921 [ 388.021482][ T5934] usb 3-1: config 0 descriptor?? [ 388.043335][ T5824] usb 2-1: USB disconnect, device number 74 [ 388.073594][T10715] syzkaller0: entered promiscuous mode [ 388.099145][T10715] syzkaller0: entered allmulticast mode [ 388.465351][ T5934] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xe [ 388.492010][ T5934] hid_parser_main: 45 callbacks suppressed [ 388.492037][ T5934] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x4 [ 388.523358][ T5934] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 388.559319][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 388.559342][ T30] audit: type=1326 audit(1775386044.812:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.6.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 388.610396][ T30] audit: type=1326 audit(1775386044.812:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.6.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 388.680650][ T30] audit: type=1326 audit(1775386044.862:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.6.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 388.778592][ T30] audit: type=1326 audit(1775386044.862:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.6.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 388.855991][ T30] audit: type=1326 audit(1775386044.862:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.6.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 388.894644][ T30] audit: type=1326 audit(1775386044.862:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.6.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 388.919515][ T30] audit: type=1326 audit(1775386044.862:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.6.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 388.942609][ T5934] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 388.967575][ T30] audit: type=1326 audit(1775386044.872:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.6.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 389.057439][ T30] audit: type=1326 audit(1775386044.872:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.6.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 389.115992][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 389.136616][ T5934] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.155970][ T5934] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.303817][ T5934] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.313219][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.323386][ T30] audit: type=1326 audit(1775386044.872:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.6.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7c2ef9c819 code=0x7ffc0000 [ 389.354142][ T5934] usb 2-1: Product: syz [ 389.363689][ T5934] usb 2-1: Manufacturer: syz [ 389.393953][ T5934] usb 2-1: SerialNumber: syz [ 389.645930][ T5934] usb 2-1: 0:2 : does not exist [ 389.664181][ T5934] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 389.728178][T10699] usb 3-1: string descriptor 0 read error: -71 [ 389.738972][ T5934] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 389.769898][ T5934] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 389.852958][ T5934] usb 2-1: USB disconnect, device number 75 [ 389.865945][ T5920] usb 3-1: reset high-speed USB device number 68 using dummy_hcd [ 390.042562][ T6677] udevd[6677]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.771431][ T9] usb 3-1: USB disconnect, device number 68 [ 391.043297][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 391.285995][ T5920] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 391.465631][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 391.483666][ T5920] usb 7-1: New USB device found, idVendor=0e41, idProduct=4141, bcdDevice= 0.40 [ 391.507324][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.515613][ T5920] usb 7-1: Product: syz [ 391.519991][ T5920] usb 7-1: Manufacturer: syz [ 391.524640][ T5920] usb 7-1: SerialNumber: syz [ 391.676018][ T5829] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 391.797445][ T5920] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 391.846062][ T5920] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 391.856321][ T1211] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 391.876366][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 391.885099][ T5829] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 391.903650][ T5829] usb 5-1: config 0 has no interface number 0 [ 391.927807][ T5829] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 391.961017][ T5829] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 391.975672][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.992163][ T5920] usb 7-1: USB disconnect, device number 10 [ 392.006347][ T5829] usb 5-1: Product: syz [ 392.016031][ T1211] usb 2-1: Using ep0 maxpacket: 32 [ 392.017095][ T5829] usb 5-1: Manufacturer: syz [ 392.031344][ T1211] usb 2-1: unable to get BOS descriptor or descriptor too short [ 392.052994][ T6677] udevd[6677]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.060638][ T1211] usb 2-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config [ 392.078722][ T5829] usb 5-1: SerialNumber: syz [ 392.105900][ T5829] usb 5-1: config 0 descriptor?? [ 392.111807][T10774] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 392.135460][ T1211] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 392.189017][ T1211] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 392.206143][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.271501][ T1211] usb 2-1: Product: syz [ 392.293486][ T1211] usb 2-1: Manufacturer: syz [ 392.313756][ T1211] usb 2-1: SerialNumber: syz [ 392.343215][T10774] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 392.374401][T10790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.228280][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.258783][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.700434][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 393.885751][ T9] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 394.031609][T10817] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10817 comm: syz.2.1163) [ 394.065397][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 394.065438][ T30] audit: type=1800 audit(1775386050.322:933): pid=10817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1163" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=37702 res=0 errno=0 [ 394.109673][ T9] usb 7-1: Invalid ep0 maxpacket: 64 [ 394.265474][ T9] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 394.515648][ T9] usb 7-1: Invalid ep0 maxpacket: 64 [ 394.529285][ T9] usb usb7-port1: attempt power cycle [ 394.602257][ T5829] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 394.646862][ T5829] asix 5-1:0.188: probe with driver asix failed with error -71 [ 394.667319][ T5829] usb 5-1: USB disconnect, device number 65 [ 394.985723][ T9] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 395.067145][ T9] usb 7-1: Invalid ep0 maxpacket: 64 [ 395.123405][ T1211] usb 2-1: USB disconnect, device number 76 [ 395.196483][ T9] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 395.221794][ T6677] udevd[6677]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.278026][ T9] usb 7-1: Invalid ep0 maxpacket: 64 [ 395.283859][ T9] usb usb7-port1: unable to enumerate USB device [ 395.396544][T10835] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 395.685669][ T5920] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 395.936115][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 395.977636][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.005812][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.057585][ T5920] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.073465][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.108605][ T5920] usb 5-1: Product: syz [ 396.112833][ T5920] usb 5-1: Manufacturer: syz [ 396.145687][ T5920] usb 5-1: SerialNumber: syz [ 396.411984][T10837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1169'. [ 396.423127][T10837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1169'. [ 396.432340][T10837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1169'. [ 396.492628][ T5920] usb 5-1: 0:2 : does not exist [ 396.561309][T10850] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.1171'. [ 396.571123][T10850] bridge_slave_1: default FDB implementation only supports local addresses [ 396.673840][ T5920] usb 5-1: USB disconnect, device number 66 [ 396.701238][ T6677] udevd[6677]: setting mode of /dev/bus/usb/005/066 to 020664 failed: No such file or directory [ 396.745873][ T6677] udevd[6677]: setting owner of /dev/bus/usb/005/066 to uid=0, gid=0 failed: No such file or directory [ 396.840435][ T6677] udevd[6677]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.870266][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 397.077831][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 397.108712][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 397.143604][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 397.182598][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.202950][ T9] usb 7-1: Product: syz [ 397.243646][ T9] usb 7-1: Manufacturer: syz [ 397.251186][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'. [ 397.264468][ T9] usb 7-1: SerialNumber: syz [ 397.278355][ T9] usb 7-1: config 0 descriptor?? [ 397.284302][T10850] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 397.293224][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'. [ 397.346058][ T9] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 397.406437][ T1211] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 397.608751][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.627650][ T1211] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 397.645703][ T9] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 397.661780][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.690878][ T1211] usb 5-1: config 0 descriptor?? [ 397.849938][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.860586][ T9] usb 1-1: config 0 has no interface number 0 [ 397.882760][ T9] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 397.913559][ T9] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 397.929430][ T1211] usbhid 5-1:0.0: can't add hid device: -71 [ 397.936465][ T1211] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 397.953536][ T1211] usb 5-1: USB disconnect, device number 67 [ 397.991815][ T9] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 398.048412][ T9] usb 1-1: config 0 interface 2 has no altsetting 0 [ 398.053482][ T5934] usb 7-1: USB disconnect, device number 15 [ 398.055232][ C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 398.067540][ C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 398.108254][ T5934] mcba_usb 7-1:0.0 can0: device disconnected [ 398.150379][ T9] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 398.205838][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.224295][ T9] usb 1-1: Product: syz [ 398.233967][ T9] usb 1-1: Manufacturer: syz [ 398.246589][ T9] usb 1-1: SerialNumber: syz [ 398.269644][ T9] usb 1-1: config 0 descriptor?? [ 398.296664][T10861] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 398.305852][T10861] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 398.465755][ T1211] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 398.536019][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.630676][ T1211] usb 5-1: Using ep0 maxpacket: 16 [ 398.648139][ T1211] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.665620][ T1211] usb 5-1: config 0 interface 0 has no altsetting 0 [ 398.677109][ T1211] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 398.686372][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.718435][ T1211] usb 5-1: config 0 descriptor?? [ 398.784054][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1179'. [ 398.812373][ T9] usb 1-1: USB disconnect, device number 70 [ 399.258800][ T1211] mcp2221 0003:04D8:00DD.0019: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 399.436915][ C1] ================================================================== [ 399.445099][ C1] BUG: KASAN: use-after-free in mcp2221_raw_event+0x106a/0x1240 [ 399.452857][ C1] Read of size 1 at addr ffff8880526d3fff by task syz.6.1179/10878 [ 399.460803][ C1] [ 399.463200][ C1] CPU: 1 UID: 0 PID: 10878 Comm: syz.6.1179 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.463267][ C1] Tainted: [L]=SOFTLOCKUP [ 399.463274][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 399.463306][ C1] Call Trace: [ 399.463328][ C1] [ 399.463338][ C1] dump_stack_lvl+0xe8/0x150 [ 399.463413][ C1] print_report+0xba/0x230 [ 399.463461][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 399.463515][ C1] kasan_report+0x117/0x150 [ 399.463579][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 399.463629][ C1] mcp2221_raw_event+0x106a/0x1240 [ 399.463675][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 399.463736][ C1] ? down_trylock+0x50/0xb0 [ 399.463848][ C1] hid_input_report+0x41d/0x580 [ 399.463913][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 399.463962][ C1] hid_irq_in+0x47e/0x6d0 [ 399.464023][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 399.464091][ C1] dummy_timer+0xbbd/0x45d0 [ 399.464200][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 399.464287][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 399.464339][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 399.464447][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 399.464507][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 399.464587][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 399.464649][ C1] ? read_tsc+0x9/0x20 [ 399.464693][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 399.464743][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 399.464807][ C1] handle_softirqs+0x22a/0x870 [ 399.464870][ C1] ? __flush_smp_call_function_queue+0x87f/0xa90 [ 399.464914][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 399.464978][ C1] __irq_exit_rcu+0x5f/0x150 [ 399.465030][ C1] irq_exit_rcu+0x9/0x30 [ 399.465098][ C1] sysvec_call_function_single+0x54/0xc0 [ 399.465146][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 399.465194][ C1] RIP: 0033:0x7f7c2ee6cd30 [ 399.465225][ C1] Code: eb c0 48 39 f2 72 a4 48 39 f0 0f 83 c0 00 00 00 48 89 75 00 49 89 4c 24 f8 48 8b 4d 08 48 8b 55 00 eb 91 0f 1f 80 00 00 00 00 <4c> 89 ea 4c 89 e6 48 89 df e8 02 ff ff ff 48 89 d8 48 29 e8 48 3d [ 399.465267][ C1] RSP: 002b:00007f7c2f33f9a0 EFLAGS: 00000212 [ 399.465297][ C1] RAX: 00007f7c2ead9358 RBX: 00007f7c2ead9360 RCX: ffffffff81be6b11 [ 399.465325][ C1] RDX: ffffffff81be6b11 RSI: ffffffff81be6b11 RDI: 00007f7c2ead9358 [ 399.465386][ C1] RBP: 00007f7c2ead9310 R08: 00007f7c2f200000 R09: 00007f7c2f216038 [ 399.465417][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: 00007f7c2ead93a8 [ 399.465441][ C1] R13: 0000000000000015 R14: 0000000000000013 R15: 0000000000000001 [ 399.465469][ C1] ? __cgroup_account_cputime+0x71/0x120 [ 399.465516][ C1] ? __cgroup_account_cputime+0x71/0x120 [ 399.465562][ C1] ? __cgroup_account_cputime+0x71/0x120 [ 399.465612][ C1] [ 399.465633][ C1] [ 399.738052][ C1] The buggy address belongs to the physical page: [ 399.744606][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880526d3500 pfn:0x526d3 [ 399.754717][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 399.761872][ C1] raw: 00fff00000000000 ffffea0000a23e48 ffffea0000c1e3c8 0000000000000000 [ 399.770489][ C1] raw: ffff8880526d3500 0000000000000000 00000000ffffffff 0000000000000000 [ 399.779097][ C1] page dumped because: kasan: bad access detected [ 399.785555][ C1] page_owner tracks the page as freed [ 399.790957][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52dc0(GFP_KERNEL|__GFP_ZERO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10833, tgid 10831 (syz.1.1168), ts 395654952892, free_ts 396144459522 [ 399.811423][ C1] post_alloc_hook+0x231/0x280 [ 399.816233][ C1] get_page_from_freelist+0x24dc/0x2580 [ 399.821824][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 399.827675][ C1] alloc_pages_mpol+0x232/0x4a0 [ 399.832569][ C1] alloc_pages_noprof+0xa8/0x1a0 [ 399.837542][ C1] get_free_pages_noprof+0xf/0x80 [ 399.842610][ C1] packet_set_ring+0x735/0x2490 [ 399.847497][ C1] packet_setsockopt+0xd9c/0x1510 [ 399.852552][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 399.857612][ C1] __x64_sys_setsockopt+0x13d/0x1b0 [ 399.862851][ C1] do_syscall_64+0x14d/0xf80 [ 399.867470][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.873398][ C1] page last free pid 10831 tgid 10831 stack trace: [ 399.879921][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 399.885068][ C1] packet_set_ring+0x1a21/0x2490 [ 399.890045][ C1] packet_release+0x7e8/0xd10 [ 399.894752][ C1] sock_close+0xc3/0x240 [ 399.899036][ C1] __fput+0x44f/0xa70 [ 399.903069][ C1] task_work_run+0x1d9/0x270 [ 399.907696][ C1] exit_to_user_mode_loop+0xed/0x480 [ 399.913019][ C1] do_syscall_64+0x32d/0xf80 [ 399.917642][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.923568][ C1] [ 399.925926][ C1] Memory state around the buggy address: [ 399.931585][ C1] ffff8880526d3e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 399.939693][ C1] ffff8880526d3f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 399.947787][ C1] >ffff8880526d3f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 399.955884][ C1] ^ [ 399.963889][ C1] ffff8880526d4000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 399.973557][ C1] ffff8880526d4080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 399.981653][ C1] ================================================================== [ 399.989758][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 399.997001][ C1] CPU: 1 UID: 0 PID: 10878 Comm: syz.6.1179 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.007989][ C1] Tainted: [L]=SOFTLOCKUP [ 400.012370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 400.022548][ C1] Call Trace: [ 400.025954][ C1] [ 400.028924][ C1] vpanic+0x56c/0xa60 [ 400.032949][ C1] ? __pfx_vpanic+0x10/0x10 [ 400.037499][ C1] panic+0xc5/0xd0 [ 400.041258][ C1] ? __pfx_panic+0x10/0x10 [ 400.045715][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 400.051039][ C1] ? rcu_is_watching+0x15/0xb0 [ 400.055845][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 400.061171][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 400.066499][ C1] check_panic_on_warn+0x89/0xb0 [ 400.071478][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 400.076799][ C1] end_report+0x73/0x180 [ 400.081078][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 400.086496][ C1] kasan_report+0x128/0x150 [ 400.091077][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 400.096412][ C1] mcp2221_raw_event+0x106a/0x1240 [ 400.101571][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 400.107422][ C1] ? down_trylock+0x50/0xb0 [ 400.111967][ C1] hid_input_report+0x41d/0x580 [ 400.116868][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 400.122369][ C1] hid_irq_in+0x47e/0x6d0 [ 400.126800][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 400.132240][ C1] dummy_timer+0xbbd/0x45d0 [ 400.136815][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 400.141806][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 400.147656][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 400.152641][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 400.157622][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 400.162874][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 400.168637][ C1] ? read_tsc+0x9/0x20 [ 400.172738][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 400.178851][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 400.184007][ C1] handle_softirqs+0x22a/0x870 [ 400.188815][ C1] ? __flush_smp_call_function_queue+0x87f/0xa90 [ 400.195180][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 400.199992][ C1] __irq_exit_rcu+0x5f/0x150 [ 400.204629][ C1] irq_exit_rcu+0x9/0x30 [ 400.208909][ C1] sysvec_call_function_single+0x54/0xc0 [ 400.214586][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 400.220609][ C1] RIP: 0033:0x7f7c2ee6cd30 [ 400.225060][ C1] Code: eb c0 48 39 f2 72 a4 48 39 f0 0f 83 c0 00 00 00 48 89 75 00 49 89 4c 24 f8 48 8b 4d 08 48 8b 55 00 eb 91 0f 1f 80 00 00 00 00 <4c> 89 ea 4c 89 e6 48 89 df e8 02 ff ff ff 48 89 d8 48 29 e8 48 3d [ 400.244704][ C1] RSP: 002b:00007f7c2f33f9a0 EFLAGS: 00000212 [ 400.250816][ C1] RAX: 00007f7c2ead9358 RBX: 00007f7c2ead9360 RCX: ffffffff81be6b11 [ 400.258830][ C1] RDX: ffffffff81be6b11 RSI: ffffffff81be6b11 RDI: 00007f7c2ead9358 [ 400.266924][ C1] RBP: 00007f7c2ead9310 R08: 00007f7c2f200000 R09: 00007f7c2f216038 [ 400.274933][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: 00007f7c2ead93a8 [ 400.282936][ C1] R13: 0000000000000015 R14: 0000000000000013 R15: 0000000000000001 [ 400.290952][ C1] ? __cgroup_account_cputime+0x71/0x120 [ 400.296719][ C1] ? __cgroup_account_cputime+0x71/0x120 [ 400.302411][ C1] ? __cgroup_account_cputime+0x71/0x120 [ 400.308093][ C1] [ 400.311307][ C1] Kernel Offset: disabled [ 400.315652][ C1] Rebooting in 86400 seconds..