last executing test programs: 13m37.195115619s ago: executing program 3 (id=449): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1], 0x50) syz_io_uring_setup(0x104, &(0x7f00000000c0)={0x0, 0xc2ce, 0x10000, 0x0, 0x105}, &(0x7f0000003000), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x229) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0d000000000002fdbf43eb000300000041010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000f00", [0x0, 0x8000000000000000]}}) 13m36.234933623s ago: executing program 3 (id=453): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x40142) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/209) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20000000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20058080}, 0x80) r1 = syz_usb_connect$cdc_ncm(0x1, 0x18e, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x17c, 0x2, 0x1, 0x7, 0x70, 0x28, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3144c96981"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x8001, 0x6}, {0x6, 0x24, 0x1a, 0x5, 0x18}, [@mdlm_detail={0xfc, 0x24, 0x13, 0x3, "c82952226ceb9495584d421146494d9cfd79a1cab59a5e592ab709ded5e38ab4783ad7dd460d3509bcba679eae28954274b9575f32a99d68cad81129b31badb888d5e67ffa58ed20e70089d447e9389fe95c820af11c6d808ddb1fc747dff900267960c4d84d5b806c6a37cf55e8e18d7bcf683d23d96f49ef603809b6546ec61ee001eb241d9f6d98ebdee51621e44dd56699e32f7b7b79010b595f2b9f1d5473d2dc00c751752695b4eca445ad8bb678418401e7be5bed4b3098bd5925d2f4114152efa7d9828fc0ab9c2fba24b3fe77ea24a9ce6cb1980468568814fefc655b0c0e337fb057325b685b48c03bb8aece54219730d1a735"}, @obex={0x5, 0x24, 0x15, 0x6}, @dmm={0x7, 0x24, 0x14, 0x1, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3cc, 0x0, 0x100}, @acm={0x4, 0x24, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0x8, 0x8001}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0xc1, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x7, 0x9}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x8, 0x2d, 0x9, 0x40, 0xd}, 0x1db, &(0x7f0000000480)={0x5, 0xf, 0x1db, 0x5, [@generic={0xf7, 0x10, 0x4, "1cbcce4654d0b59e235022f6973825121b94cc3b86826ad806bf6293dce7485aa935deee393cd731f545afb28c94d04d89bdd60ec1f2fd9060c54ebd87bcc25f0bb40fa1daa836686ab7ea4541813980863a2b8a57db64eb913706ec36317969349eb4a7f60222eccf77ea641fec325632d4dd18c0a256400909673c9dca757d59e0e53345e3b5229ef8cae69c6f427adfc657f54486e492e6b7691e3dbe9aace41771ea2902492d802bcf373a953fe9244830602209018ca33751383db67b3106bb91360c28228bf2823ee8ca8d18af4aea0c692da744a540b4645d40c415e5b6d7313d2f150c15ac4ee397071f586e9f21f260"}, @ptm_cap={0x3}, @generic={0xd1, 0x10, 0x2, "48fe986062d2309fd4877f5e35c3275b1de4b7c3649cc7477b491562fb9d7d7704a25de2717cadc80152d2162998d1ddcb4780635f894cb4571dd91d19634e1f2480af339fdebb5c965997748f41ca3689c71bbe37542cf64e7b136832085f6bd6352624cce8b741cf1ce8ed79f561da826112278dc3879c074475db77516cf3e098ce86edf99017388d7be9d87518d4a233cc066edee299a1efc3561ea92119f7d79dc29f0110a313da052a16891053385f1bc7db21f61277bb855f383e8169b86b6706cdc22aefb79036fc4908"}, @generic={0x8, 0x10, 0xa, "3022c64575"}, @ptm_cap={0x3}]}, 0x7, [{0x47, &(0x7f0000000680)=@string={0x47, 0x3, "251f011621f2558a8ddf457b71b897808cba0f221d396f2b0b07336f1fd1b7198faf0d3233379dcc4ef599b06dcfbb3d73e049d3fdd989fc5323e8a627880188f9e1a2ddcb"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x429}}, {0x44, &(0x7f0000000740)=@string={0x44, 0x3, "cb668b5f1e00864f6e0c10c7ed513a41b65816094cfa5dce2a90d0c4c54c2eb19b982b9fcae659ea9c3d2e6bd0d3ce85e4d88c7ea8fcabec9e638b28a09891e951ba"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x1e, &(0x7f0000000880)=@string={0x1e, 0x3, "bb8a2ade01c42d218c5cfbba8314c9ed413895fdd496013f811510b9"}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x10e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x4, 0x27, 0x1, {0x22, 0x4d0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x4, 0x9}}}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x300, 0xa, 0x7, 0x2, 0xff, 0xfd}, 0x42, &(0x7f00000009c0)={0x5, 0xf, 0x42, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x3, 0x4, 0x17d}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0xc000}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x5, 0xf, 0x9, [0xc0f7, 0x0, 0x3f00, 0x0, 0x3f00, 0x7f8000]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0xdb, 0xf, 0x1, 0x7}]}, 0x5, [{0x5c, &(0x7f0000000a40)=@string={0x5c, 0x3, "179625e3c263dabaed879a6e82dc1387cd5ab7f1906f0b40c5230dc3db08fce57657d5622078a80a9a095c0bcc6f27b98e7755a4440c2000fea2a3a66b72c01325dd550fefc5cfd4fa0ffe60fea49a64e942a009ea7b95e2c5b6"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x140a}}, {0x2, &(0x7f0000000b40)=@string={0x2}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0xc0a}}]}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000c40)) r2 = syz_usb_connect(0x5, 0xa77, &(0x7f0000000c80)={{0x12, 0x1, 0x211, 0x3c, 0xdd, 0xd1, 0x8, 0x12d1, 0x9f0e, 0xa58d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa65, 0x3, 0x8, 0x3, 0x20, 0x3, [{{0x9, 0x4, 0x68, 0x8, 0x7, 0xff, 0x3, 0x79, 0x4, [@hid_hid={0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xf71}}, @uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x1, 0x5, 0x35}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x5, 0x4, "1680", 'y'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xa0, 0x6, 0x24, "c4dd1c41266605"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0xff7f, 0x2}]}], [{{0x9, 0x5, 0xf, 0x10, 0x20, 0x1, 0x8, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xc, 0x0, 0x5, [@generic={0xfb, 0x31, "8eee1adcb28e32de88975f04e8de7e78499655f830b43c95216bfec13e10d06f94aaed1fb189acf4bcb97b77e33c1bcdbf1f46ccdfb5ca7be63e7d96a8f17140c61c77e99dd36c8c854aebc1ae418d2255c800a0bba28372433e490655ca754f75ed6b2c049f6c948f77da5ddea06ea45e18f723cecda8e3aecb83a3772f3ac9cde66209df40d3bcc3c3861bd339eba30ae61c90ff408d4031eb9a2137c211f2f74bfb6e4f6e7a9459d54cd869ce40635e46a68ae4fc5aeb666a54ff1412cadc0649e9ffeeda3064e4d765069a7ea31411a62c367dc8b917ce53f8cb46f48a7e02c39fce66c43bb25cf7b63e7f930362598fe5e5ead4b18d97"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x6}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x3, 0x5, 0x7f, [@generic={0x4a, 0x31, "70a321afe9c498ece68cf16a635425ae29c47bea19955e44208ad7f33d30e822eee020666e2e89b7c2149f76b73f8941ee41c795a5819f1c0bf0e8ea8c7ca4cc0fc1cb5c5f671f5e"}]}}, {{0x9, 0x5, 0x80, 0x0, 0xa10, 0x0, 0x5, 0xc0, [@generic={0x6b, 0x11, "bf5b986b3b27857e2a4e653fa42d96c950b56aecee892ee41f517a55d250309781b8697ef1d4f7d0d8f6ff607768fede18568cc8115a5f9e65bcd887172d4fbaf905bf4fabb9cba8e64009312acca18243da0328278be153c2012bfb1893de749b97e2aca5b75c60c9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x9}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x3, 0xff, 0x6}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x9, 0x3, 0x2}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x0, 0x4, 0x5}}]}}, {{0x9, 0x4, 0x8, 0x0, 0xa, 0xe8, 0xe4, 0x25, 0x7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "aa744d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x3b4, 0x3}, {0x6, 0x24, 0x1a, 0x101}, [@country_functional={0x8, 0x24, 0x7, 0x7f, 0x100, [0x9]}, @acm={0x4}]}], [{{0x9, 0x5, 0x1, 0x8, 0x8, 0x4, 0x4, 0x5, [@generic={0x56, 0x4, "ba9e8b001979eb121a67866d316b38bf5c176182e7de88ad62bfb3efa05c4ea448c152c36bed6893b7e95cd970c9fec72d13b69e7da003c190f2229b965d50ab587f361a8051cd8ab7b7f0da51ad3e562b34e2e7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x27, 0x2, 0x6, [@generic={0xd1, 0xa, "4d40de3f93fd055f9898350d71343ce9070727c7d9a93ff5ecffaafc55e3d0351a13c9427f966d19cc632d634adaa3a8b85aa590d1d2be1bdd236fbe2ce2d3c3947cc31de0164d8bad37547dde2922192da712c3ab6fdbadff9396c20fdcae1fd8803a9eff944b09a51ecf0a4294176253e7c70b2197ad5e29d312be50da7ba2e7a387cc892751d9cc75df885c955fcc21c96a2f55ff09f0b55151bdb3152e6791196996f22c5393abbf79534d04bf2951a18443f45cc944bc78d686d74f4440065877a5c2113cacee437d9e5adc83"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0xd, 0x1, 0xff}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x2, 0x80, 0x80, [@generic={0x8, 0x2924cf4d7a8724f6, "ae6d9b369294"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x9, 0x7, 0x3, [@generic={0x62, 0x23, "a5ab628c1dcc049cb68ed26992740697afc1d393fb174365c257a9bf6072c6c4d63a37741d99f99ff52f4443b4031658ae7badb19381ff60fce7b2a15e440b93db303ec056e9023b806195aff44442e28ab332e28d216a4f107452ec741d9911"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xe3, 0x5, 0x6}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x3}, @generic={0x9d, 0xaed38583b3ff1bf1, "4738394b743d66d30b82b3c6af9fe524de9b5acdd71ee57ffde1b3b52a4eb171f3ba0d3eaee3dcd2618e9752fb575412bd7ce633f02659f8bc7ec2e62ebf69c0494b1a21c2d42b70dae89e112de189c1b2c2d2a8b6f0bb7b2e17ef4c80e58b68b69f31bd97dd4bfd05ae7266ecb989aa5712faf2f94048f40fa7b1f6003fb15ac1db99cf0c52a76ad331194c4bdbcbf002ed7199b13e7d5444cd1d"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x4, 0x7f, 0x0, [@generic={0x37, 0x21, "3b7927e9fcb6b1c1fbd6d2666f9122e7d91cca2f1249a408ca13196630f14b760427aed42f1e4b9ab7b127356d7ce3df77746d3483"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x5, 0x6, 0x5}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x5, 0x3, 0x1, [@generic={0xdc, 0xc, "b68469b422a5cf9eab72fc1723f928d4776dc4b3d53fcb9a83f2ec3a73278feb50d68395c21eb05f6ea45d656891f9933f91a5dbdc20d650965d215c181add4b9ba212c7deba2c29b83ce5126ef06bc2fa47a44780db551f9237d14584094dc0bc26025b26fd8315dc12540f5e7492c3903968dcc91585da5db8ac2c378bd466d7282003dce98d9cc2103183d588dcc9264863a2eedca3985830fd11b35f5e194faa60f10617a92495393f889878e0a5caa369c7fbcc078e36570adf57ed9585074dd63713bce461c026c102279f16107aff1d7bdba839070d83"}, @generic={0xfd, 0x0, "a4a1eaf4eecb33999fbf2bd5421f629bf6a203b22b020525ab0932befdc95efab2fce38f3cadb92270aa8518cafd7eba77cd003aa42aecd815f6a5b78c7c2c89fcb33f1dac3dc332ed0bc93473ac730429b6aa8e1776e55ffe53c83c01c25fd0b22411a2bd8fd6009f48cf151625598c2e77757356760c27800d4ea28f54245be8544060c643c183dffbf81b919e2b1094e797dc44c40fb1f665d307d2301c49b44cb596f3b86205bfe82162cb68496b44232625b24e4f79554bbb8995d07ad60a6f3d7249a0d3a4d80a8abeed4c2e6b6bf61434231f64f5ff612942750a1291e447f8ad941899bcb6bde23327a1f8b909549aec5b1d0aeefb943a"}]}}]}}, {{0x9, 0x4, 0xfe, 0x7f, 0xe, 0xff, 0x5d, 0x1, 0x7, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "19377da078"}, {0x5, 0x24, 0x0, 0xce2b}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x4, 0xdc}, [@mdlm_detail={0xff, 0x24, 0x13, 0x8a, "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"}, @ncm={0x6, 0x24, 0x1a, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0xa1, 0x4, 0x5}, @mdlm_detail={0x8, 0x24, 0x13, 0x34, "0f634a97"}, @network_terminal={0x7, 0x24, 0xa, 0xfd, 0x0, 0x2, 0xa}, @country_functional={0xa, 0x24, 0x7, 0x7f, 0x6, [0x624, 0x79d3]}]}, @uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x9, 0x5, "", "95d0"}, @as_header={0x7, 0x24, 0x1, 0xc, 0x7, 0x5}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x2, 0x3, 0x3, "c95d0e7d000f22"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5f8, 0x0, 0x2, "42b8d35282ef80"}]}], [{{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x4, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x9}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x8, 0x7, 0x3}}, {{0x9, 0x5, 0x2, 0x95b9e2451bf956f7, 0x40, 0xe9, 0x8, 0x99, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xc000}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x4, 0x9, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x2, 0x10, 0x5}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0xb3, 0x3, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x6, 0xd, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x9, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x101}, @generic={0x3b, 0x21, "ee1b78fb5e30e5e465832d426cc4820a422633b231445bd37902d6c540ba804c24422b9e647e36bb7a5202d0a599b33296c4e69d082ee69aa0"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x6, 0x55, 0x2, [@generic={0x23, 0x10, "78b0d83ebbf964c376fda720691848053874b988a14123d715c277d423aa328344"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0x5, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x4, 0x0, 0x0, [@generic={0x69, 0xc, "be27eca2c260e45426e04590cc0f3e16ecaaf2af18d7fc3229aa2d5fb689802f1892184bf96f1f881cef33431c2a6462ce0cefb87987795e400884c557f1241ab9ccac15507e493186b3ff1fde3108f88ed2ce13c20fb6dfa4566d59e9c78528a21b7f89cc35a8"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x8, 0x1, 0x9, [@generic={0x5d, 0x1, "e458ece29a53435db11e92c50101868339acb750d675eb0e7bfd78d0f01ff36542f87ac8768f49bbd81ec337be0434766df40abf64f01ac5ebc55c5b99e4a79d57435981087302cf7be843eb2666d4c4a8332c86a989d9bcef5d7e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8001}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0xee, 0x8, 0x8}}]}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001700)={0xa, 0x6, 0xc960a814cf182847, 0x10, 0x9, 0x1, 0xff}, 0x8, &(0x7f0000001740)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x4818}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0xc01}}, {0xa0, &(0x7f0000001800)=@string={0xa0, 0x3, "7eb909e25f90912467d96591098360f62f341bf461a2764157e2ef563788eb7eacff7e950e98e3a2f78b4987e0f90174dde80cd9eb39e68873a0252da0d33ee56bf9dc10e4b457ab9f09b569d34c4d846d83256b79155aac194d1726106fb085429648e48103262936737c7989b8f90d4610aef2681ff54673ff7dac99f621ebaefb5a7f84a5b218acc0ade4f18ba53782c795b65321f595a6f62abcabbf"}}, {0xee, &(0x7f00000018c0)=@string={0xee, 0x3, "e09acff7b61af6013fde66cb905f49575f045201d273a6a1093ad24124e5b222da661e9f2bd9f261aa45a477d52d77f26d3234c22fde2ef240ead1166d4e68fae8f2d890610c0eb4485be63a7b5c9bf0b74e40cbc0c6492aebb59ad62d8ed00b11c0676e17812707d4419123918affe9217478dc8b94866182813cc77d219497ea01505af0c8d1402f5ebc4e436fd11a3761baad342140bcd03adf19dfa5e5e09aabb94ca898297fca840e2c27acf0217e2c643e23e147d70ab27e049e6fb271d8c74271de6b8aa03a8f61da433e559a9ea2f148802e627ffc7727d0a15e9fafc495c4f430ed6ae3d6987c91"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x801}}, {0x9b, &(0x7f0000001a40)=@string={0x9b, 0x3, "239143932e241115890c3822377436918bb02ddda4d18efceb9064f54a9dcabbaa25351cbc5febe57a10fde463bcdbb526b42d0b1d514506009e9a94d6cc4e00aeea6650ebca3397f08291ac0ab70de48aeddff2cae77bb340a1bb97cff6c91b344e21fd3d630572a794c50ab8633663329c0de9e329f4f5b2b5d3f0b86699b218ddf168204c0ab09fe90c79440fe34411c69fa2f23469e3dd"}}, {0x8a, &(0x7f0000001b00)=@string={0x8a, 0x3, "acaadb69f86d605f211209e51511169b5eabd5cafc5558aa63777d43c0e38d5e0fabe1b5d2810fbd88a6fc46d9e08d127534d28aa7d27a3d83c9c05be0d8c27adf8743bceaa9378694400b78ea60f5789bae896b789afd7b4d68d0129883a9d662fc6d0a1c922e69f446bd559acda6e9c5ce9e48fcbda889d02b62a0324992e8f97828d394afe0ca"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x40e}}]}) r3 = socket$netlink(0x10, 0x3, 0xe937cf977c2a900f) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xd4, 0x9, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR2={0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}, @IPSET_ATTR_COMMENT={0xd, 0x1a, '^](^+)\xf0&\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz0\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x20000045) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x90, &(0x7f0000001e80)=@generic={0x1, 0x2, 0x88, "fb57830a", "1ece819727620bd7cfde82f6e9e5c73d76b1a19d84b26826724b50bf89260e372b36c756314e9aa86a853b24b088152c01bcb9afaed0435f94c44c89556c82a936e5e430eab1905c36edcf7a6c6b703e34af583f071e8dfd7a79f635d516ad2917ab2d1ab15767c95daab39ec77c223e882fe251fb8989cabfe6b2bc749a7275d0680e6308769b33"}) syz_usb_control_io(r1, &(0x7f00000020c0)={0x2c, &(0x7f0000001f40)={0x40, 0x21, 0x2c, {0x2c, 0xe, "4f4040bb99b850cb54ac85f8c49a96da5fc09eb92d0c90bf5ecdb7c2a2285233697ba080dfc5be109805"}}, &(0x7f0000001f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000001fc0)={0x0, 0xf, 0x64, {0x5, 0xf, 0x64, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xfa, 0xe, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x7feffff, 0xff07, 0x8ae, [0xffc0, 0xa0, 0xc0ff, 0xff00c0, 0xc0c0, 0xc00f]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0xa2, 0xf0f, 0x5, [0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xff, 0x1, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "864c898b350ee84d7c258f9b61273f54"}]}}, &(0x7f0000002040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x80, 0x28, 0x2, "05712fce", "d66faffb"}}, &(0x7f0000002080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0x0, 0x6, 0x25, 0x1f29, 0x4}}}, &(0x7f0000002500)={0x84, &(0x7f0000002100)={0x40, 0xb, 0x2d, "9122c898c0eb635c65daba3b8ae4e888c97eb83187703b1f55b2106555ea879ea9129915fdbf66d27599c1737e"}, &(0x7f0000002140)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002180)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000021c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000002200)={0x20, 0x0, 0x8, {0x0, 0x20, [0x0]}}, &(0x7f0000002240)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000002280)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000022c0)={0x40, 0xb, 0x2, "55c0"}, &(0x7f0000002300)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000002340)={0x40, 0x13, 0x6, @local}, &(0x7f0000002380)={0x40, 0x17, 0x6, @local}, &(0x7f00000023c0)={0x40, 0x19, 0x2, "90ed"}, &(0x7f0000002400)={0x40, 0x1a, 0x2, 0xe102}, &(0x7f0000002440)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000002480)={0x40, 0x1e, 0x1, 0x81}, &(0x7f00000024c0)={0x40, 0x21, 0x1, 0x1}}) sendfile(r3, r3, &(0x7f00000025c0)=0x100000000, 0xfffffffffffffff9) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000002600)=@conn_svc_rsp={0x0, 0x0, 0xa, "b57d74b1", {0x3, 0x1, 0x0, 0x9, 0x8, 0xa, 0x2}}) syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000002640)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0xc, 0x80, 0xfd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "fb7fcd09"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x5, 0xa}, {0x6, 0x24, 0x1a, 0x0, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xef, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x3, 0x3}}}}}}}]}}, &(0x7f0000002b40)={0xa, &(0x7f00000026c0)={0xa, 0x6, 0x250, 0x9, 0x7f, 0x8, 0x40, 0x2}, 0x4e, &(0x7f0000002700)={0x5, 0xf, 0x4e, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "04029b63a588d7233f3edb6ac68b0b00"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x40, 0xf00, 0xfffb, [0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "0a897285ad6ea7fb9eb2d4a9e25c13c6"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0xf, 0xfff9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x2b, 0x2}]}, 0x8, [{0x4, &(0x7f0000002780)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000027c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x3c01}}, {0xb3, &(0x7f0000002840)=@string={0xb3, 0x3, "a7b2131c7bc7c3a6c402b3d786fdfd82ff1600b3559cd8fa202a8aded8b2e849fd38eebd2fd8818398eb39a630ff57247a13a43b6dc61299961d3cc361c525829ad009ee4e2d4ed4b3b02409604be894fb9be9494dc9961debde88fd579cae933bb8207bf051c21f8e28e229bd2c9eeb13452e6abc2ec3fc928d1e31d82dc923faaf84b5e505b79d2d7ac22cbeeeaf351cda63e70d039015079e92b30da3e2227928a6af36ae86aa7dc9b6ff9dacc061ce"}}, {0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x825}}, {0x77, &(0x7f0000002940)=@string={0x77, 0x3, "050217f7e44c80d9a56aad2b9d566c9d2a4198d62a9f743fde13ad526be276e93405ce17688fd542e0aef45cb50d8d9285db6abf907bb01da886a6626dbc7f71cbe3acf57f5b7dc0c88e3367bb16e7561ca8ad175f02581a88f05b07f647792d3881b1a934b11443537a9b55e8d5457d05f70841de"}}, {0x6e, &(0x7f00000029c0)=@string={0x6e, 0x3, "89c34a058b164c8ec568ee41bee19825455bfc2899de0003c8ef21c110a04b021cadba9742bc2eaca8fc7f5b59348d386221bb9a57749304947a02171c6e2e0cc1dacb570085e0afeb32fc48776b8b87f27f0d5da3051528393b00363ac69fefbfa1d9e5c97aa08dd5185559"}}, {0xc4, &(0x7f0000002a40)=@string={0xc4, 0x3, "071d27c4bc4038450a4d47a46d27d2937ae2bb46273c6aaded9137792d9622275727cedf1235284255d24e120ce4a5cabeca89b2f10513ec3ecc74719699b4b7b3ecbe58bf5139dbe3d3137a44f2673c25bb5e1dee1e9064dd443eea581946387b0b4f189238ee1e7001d9e19f549c66e08048d7ba4f89a3164b72c1d7dd64244bec76def9e79010984a48b0be01dc929826c5dcad37fdaaef5aed09d2027daf521728f4e00c303c84361de012fb8f38ea2ca4daadfb7bcb8c95e6c4c477d1ff1a30"}}]}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000002d00)={0x0, 0x5, 0x1, 'queue0\x00', 0x7}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002dc0), 0xdcc3f2ddcab1dc03, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002e00), r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002e40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002e80), r3) syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000002ec0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x0, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "bcdfb3"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0xec9, 0x5}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfc, 0xf9, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0xe6, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x95, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000003080)={0xa, &(0x7f0000002f40)={0xa, 0x6, 0x250, 0x8, 0xde, 0x3, 0x8, 0x5}, 0x2b, &(0x7f0000002f80)={0x5, 0xf, 0x2b, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x7f, 0x4, 0xd9, 0xee00, 0x8, [0xff0000, 0xc0, 0xc000, 0xffa0c0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x7, 0xee7d}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000002fc0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000003000)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000003040)=@lang_id={0x4, 0x3, 0x140c}}]}) r8 = dup(r0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000030c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000003100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0xf8, 0x60, 0x4e, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x6, 0x24, 0x6, 0x0, 0x0, "d5"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0xd, 0x4, 0x7}, [@obex={0x5, 0x24, 0x15, 0xd}, @dmm={0x7, 0x24, 0x14, 0xfff8, 0x21b}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2e, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xb, 0x5, 0x2}}}}}]}}]}}, &(0x7f00000034c0)={0xa, &(0x7f0000003180)={0xa, 0x6, 0x250, 0x1, 0xd, 0x7f, 0x8, 0x8}, 0x6f, &(0x7f00000031c0)={0x5, 0xf, 0x6f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x4, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x6, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x0, 0xf000, 0x1ff, [0xffc0, 0xffc000, 0xffc03f, 0xffc00f, 0xffc018, 0xf]}, @ssp_cap={0x24, 0x10, 0xa, 0xba, 0x6, 0x5, 0x0, 0x52dd, [0x0, 0xc00f, 0xffc000, 0x0, 0xffc0, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9c1eee3287b5aa8c8dac7bd94859d388"}]}, 0x6, [{0x4, &(0x7f0000003240)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000003280)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f00000032c0)=@lang_id={0x4, 0x3, 0x1409}}, {0x69, &(0x7f0000003300)=@string={0x69, 0x3, "9b146627044fdb035cb74daeaaca92d6669b67bf55f6b769fdac79547f7de45d4381837054a200c77f8469c07f2fb071d9f6a3662a993b6d1af88cd6a120fdae2c5ebd46cc6be4588970d67f18025d6e2fceeb0cc5f4e2871e27d38356c5a56c29fd8b96c84c38"}}, {0xd5, &(0x7f0000003380)=@string={0xd5, 0x3, "f5a09732430df0b3590d099ef69b4351a90cb8d34b7ea07b1c9adc85facf6ddff4e4dfb1386750d48e949debccd94d3d68de8e29fbec81134a34c1aaf3910e44b0fc413956339596ea1c44299b3e0c72bea2c3aa29654a53dfd9eb03b73edbc17ec9b80e8111b55e63992a1d7f5bcbf7f05a74a5b7d394afccd581d91e0cabff91fca2c6d40f56f72430b7e16d024b4e8bf4a3cbadd6c5777fbf482d62ad00caf307780f759a4a2c0aae76fc9fbcb5ed216ad987e1a2cb02394d1ed77ebaebe5be6f8361285f7765f9bb84175416ed6960f972"}}, {0x3a, &(0x7f0000003480)=@string={0x3a, 0x3, "808b474a8a7783e4a7eaef9e2c87b78003897dfe12df5ad78888ed16b171f84c09cd623de121b9f31896e1936498faff676105545a011a36"}}]}) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000003600)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0xc800) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000003640)={'team0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003680)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x1, '\x00', r9, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) 13m35.058009833s ago: executing program 3 (id=458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a3000000000140000001100010000000000000000000000000a3d2a3d020000005f4223c6513208b755c8e4db92e3d8d81cdd1248d5ad284afda50a12e00c4114cb913292d538c633b39259afa9ccce0a431eecff7440c1304aadd38ca93833659524ac6d47584c67ff75693412e7ca668116257725444ce431a55f1235152cae3799a92b532e"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x40010, 0xffffffffffffffff, 0x10000000) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x62, 0x4004, @fd=r1, 0x80000001, &(0x7f0000000700)="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", 0x1000, 0x0, 0x1}) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x62, 0x4004, @fd=r1, 0x80000001, &(0x7f0000000700)="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", 0x1000, 0x0, 0x1}) 13m34.728986398s ago: executing program 3 (id=461): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000580)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000100)=0x10) (fail_nth: 2) 13m34.324185203s ago: executing program 3 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000200001002bbd7000ffdbdf250a000079090000041f0001001400e7fffc020000000000000000000600000000080017"], 0x38}, 0x1, 0x0, 0x0, 0x8884}, 0x1854) socket$inet(0x2, 0x0, 0x9) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = epoll_create1(0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000080)={0x2c, 0x1, '\x00', [@pad1, @jumbo]}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x4}) write$FUSE_INIT(r7, 0x0, 0x0) accept4$alg(r7, 0x0, 0x0, 0x80000) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x45, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1, {0x2}}) r8 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cd}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r8, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_AFTER={0xffffffffffffff97, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x7c}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x5d31]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_LABELS_MASK={0x1c, 0x17, [0x5, 0x5, 0x9, 0x3, 0x3, 0xfffffffa]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 13m33.556051023s ago: executing program 3 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x484600, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d0b, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$NL80211_CMD_DISASSOCIATE(r0, 0x0, 0x814) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, 0x0) r5 = syz_open_dev$hiddev(0x0, 0x6, 0x408240) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f0000000100)={0x2, 0x200, 0xc}) r6 = syz_io_uring_setup(0x7e73, &(0x7f0000000280)={0x0, 0xca5b, 0x8, 0x3, 0x166}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x37, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1cf601d21911edab}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @empty}, &(0x7f0000000140)=0xc) io_uring_enter(r6, 0x47b8, 0x2669, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000240)={0x2000005, 0x3132564e, 0x2, @discrete={0x400, 0x5}}) 13m17.643762939s ago: executing program 32 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x484600, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d0b, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$NL80211_CMD_DISASSOCIATE(r0, 0x0, 0x814) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, 0x0) r5 = syz_open_dev$hiddev(0x0, 0x6, 0x408240) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f0000000100)={0x2, 0x200, 0xc}) r6 = syz_io_uring_setup(0x7e73, &(0x7f0000000280)={0x0, 0xca5b, 0x8, 0x3, 0x166}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x37, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1cf601d21911edab}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @empty}, &(0x7f0000000140)=0xc) io_uring_enter(r6, 0x47b8, 0x2669, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000240)={0x2000005, 0x3132564e, 0x2, @discrete={0x400, 0x5}}) 4m20.910134818s ago: executing program 0 (id=2632): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x60, @private0={0xfc, 0x0, '\x00', 0x40}, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="a4", 0x1}], 0x1}}], 0x1, 0x800) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, &(0x7f0000000080)="1a00000002000000", 0x8) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3138, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3e, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x7ba}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0xd, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x2, 0x8, 0x1}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x5, 0xb, 0x40, 0xff, 0x3}, 0x36, &(0x7f0000000080)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8a, 0x15, 0x5, 0x1, 0x7}, @generic={0xb, 0x10, 0x2, "5f1ae09d9be37bbf"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "0df71828b76e07bb53c46d7d14d37c6c"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x7, 0x2, 0x7fff}]}, 0x2, [{0xa9, &(0x7f0000000140)=@string={0xa9, 0x3, "2ab686501e9dc3938868f9474418983448056f2ee2a343bbeb4ff329ed6aa0d5206df7d109b6bc10efbd4e27049efbcc2105b9f4cf2e7a41aeafaf39fb897f06698a228621d0541092616900bdf503a9a48598b4f14b9291d140447c7ef9baef093069828bbcb0e9436e02b17a49d7c76cf2fecb8a506b9732d762bc9c6d39adb0f7ccec947dcd1cea03ecc783fad83fd0b9f337058d9c9f4f9ebcb02215ff32e38d2f2fb0731c"}}, {0x2c, &(0x7f0000000200)=@string={0x2c, 0x3, "78b85521a603cad641d3db6296ed2db2743134de0c35d2ccb8500b9220e89c640eaf87c5578df40d2282"}}]}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 4m17.671362473s ago: executing program 0 (id=2645): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10, 0x20}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, 0x13, 0x200, 0x70bd29, 0x25dfdbfe, {0x1d, 0x6, 0x0, 0x8, {0x4e23, 0x4e24, [0xfffffff7, 0xfffffa7b, 0x10, 0x7], [0x3, 0x8, 0x4, 0x9], 0x0, [0x7ff, 0xc]}, 0x1, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "0c1b9f24554fc4ffcd0c59121d571415f6dc44141fe3d5410d917203a11a14c03c10fc739cfc4c775b4c006e844f9a9c306d4388aee51247b947cb760cecd3e6ffb31ff7ad288215f2373578e419bc01e233131c48399bf3089a2a33eb897cdc1bfc85de490acb5e9764213415bd4b011f4cbc5c04dd68fde09440cc230d68b5c70c"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000801) pipe(&(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10, 0x20}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, 0x13, 0x200, 0x70bd29, 0x25dfdbfe, {0x1d, 0x6, 0x0, 0x8, {0x4e23, 0x4e24, [0xfffffff7, 0xfffffa7b, 0x10, 0x7], [0x3, 0x8, 0x4, 0x9], 0x0, [0x7ff, 0xc]}, 0x1, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "0c1b9f24554fc4ffcd0c59121d571415f6dc44141fe3d5410d917203a11a14c03c10fc739cfc4c775b4c006e844f9a9c306d4388aee51247b947cb760cecd3e6ffb31ff7ad288215f2373578e419bc01e233131c48399bf3089a2a33eb897cdc1bfc85de490acb5e9764213415bd4b011f4cbc5c04dd68fde09440cc230d68b5c70c"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000801) (async) 4m17.515751201s ago: executing program 0 (id=2647): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000900) (async) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000240)={0x1, 0x1}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x0, 0x2ae3cb2a, 0x7, 0x2260, 0xe999, 0xfa13, 0x6}, 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x440) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7, 0x0, 0x8}}) (async) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) close(r5) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000340)='./file0/file0\x00', 0x89804, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) umount2(&(0x7f0000000100)='./file0\x00', 0x0) (async) gettid() (async) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f00000003c0)="3182aa9fdfcefb95d75348dfb5a207f39feaa1b8b3d21084e77c98211005bcc065c716a3e7a5ad9b2bd6d9a4de8b0dba8a7a538e568f2df4b4caa1c1c08514456467ac354b17a7a0f18db4aca9548862596e2f38f09738706bdc21a787ff385102608772f228dc40488ff7ae989dd88aaab31f9a20522ad8c7ef3624d7738bbe92271e335c9de8f4c6877c94250c805bce8cb57ceec9607189945c3df16879c6226353cd65268a35743e2c54efb971", &(0x7f0000000480)="07ccc22ad50e7ee19f92adc597eaf08f803dfaa961ab269903fa0878f64b345242590ccb131a03c17211d74b9923fddf61ff6b5a36f158448bf23b1a9db8e3e316392edf10c96f48123548cc6eb2fc27cd86db617148383a49a735167a3f17776205dd20713d0c5e05859e108f93328fb9b4ca2d3a8b8b507ef91ef109ae31233fa8f84ce7e8d6963094e3034e32c29f0a145ce96ec12d6e5e843d1b09df255ea743e68facbf43d5e79f6df32726490c6b4e497a64b841d7c4166fb3ce12acfbb422c623179d48b53a9c14dae18a5514ebf5ef8ad62d911c62e4ed9583c724b531bbcb94961251d0"}}, &(0x7f0000bbdffc)) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) (async) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800010025bd7000fbcbdf250a101400ff02fe01aa3ca15408001f"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) 4m15.167177163s ago: executing program 0 (id=2654): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x9, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x400000}, {0x6c}], 0x0, 0x0, 0x16, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000001c0)={0x20, 0x1, 0x4, "a37b40fe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x189842, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) write$cgroup_pid(r8, &(0x7f00000003c0), 0xffffffa0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x4, "52b16000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) 4m12.047209068s ago: executing program 0 (id=2667): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x10001e, 0x70, 0x0, {r0}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000003c0)={0x5, 0x6, 0x9000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf, 0xd}}, './file0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '#'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x38, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4246}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040804) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f00000007c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r6 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r6], 0x2b) sendfile(r8, r6, 0x0, 0x4000000053d6) r9 = syz_open_dev$audion(&(0x7f0000000a00), 0x2, 0x641000) r10 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r11, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r11, 0xb5) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0x2, &(0x7f0000000440)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x6}], &(0x7f0000000480)='GPL\x00', 0x7, 0x4f, &(0x7f0000000600)=""/79, 0x41100, 0x9, '\x00', 0x0, @cgroup_sock_addr=0x13, r1, 0x8, &(0x7f0000000680)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xb, 0x88e9c198, 0x7}, 0x10, r5, r0, 0x4, &(0x7f0000000a40)=[r6, r3, r0, r1, r9, r1, r11], &(0x7f0000000a80)=[{0x4, 0x4, 0x5, 0xc}, {0x4, 0x5, 0xd, 0x2}, {0x4, 0x5, 0xf, 0x2}, {0x2, 0x4, 0x8}]}, 0x94) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xd8, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x105, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x0, 0x3, "26a1b0e5cb1283e7867b7e5a0c1be5cb9050ed53214513a6e011bf10"}, @TIPC_NLA_NODE_KEY={0x0, 0x4, {'gcm(aes)\x00', 0x0, "60e82d89d9becdb8d46ef3629b72352aaa13b6496c5648"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20048044}, 0x10) r12 = socket$igmp6(0xa, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r12, {0x0, 0xee00}}, './file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x36, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xd0, 0x150, 0x150, 0x0, 0xf8010000, 0x198, 0x238, 0x238, 0x198, 0x238, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x7ff}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x15}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) 4m11.755310218s ago: executing program 0 (id=2668): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000140)={0x30, 0x8, 0x8}) (async) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040890) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) (async) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) (async) accept4(r0, 0x0, 0x0, 0x800) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02e9ffff03"], 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff07c7616414000000ff00"/23, @ANYRES32=0x0, @ANYBLOB="142e0300016a030024001280110001006272696467655f736c617665000000000c000580050001002a000000"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x8002) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x30e39, 0x59629}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000100)=0x2) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[], 0x0) 3m56.122693422s ago: executing program 33 (id=2668): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000140)={0x30, 0x8, 0x8}) (async) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040890) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) (async) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) (async) accept4(r0, 0x0, 0x0, 0x800) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02e9ffff03"], 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff07c7616414000000ff00"/23, @ANYRES32=0x0, @ANYBLOB="142e0300016a030024001280110001006272696467655f736c617665000000000c000580050001002a000000"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x8002) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x30e39, 0x59629}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000100)=0x2) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[], 0x0) 13.2359577s ago: executing program 6 (id=3526): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x20040014) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d00e99900000000fcdbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000e2f6cbfee518000000000004000000000000a30a000000000040f8ffffffffffffff04000000003a8300003fe0000000000000000000000000000000000000000000000000000000000000e7070000000000007d3bd1eb00"/112], 0xb8}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000006c0)="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", 0x1e4, r6) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) gettid() bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000480)=@bloom_filter={0x1e, 0x100, 0x4, 0xfffffff9, 0x4600, 0xffffffffffffffff, 0x3dc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x3}, 0x50) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)={0x3}) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x5393, &(0x7f00000000c0)=ANY=[@ANYRES64=r7]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 11.017883914s ago: executing program 4 (id=3528): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r8 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f0000000300)={0x2, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="13000000320081084e81", 0xa}], 0x1}, 0x0) 9.079451019s ago: executing program 4 (id=3533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x49bee, 0x80, 0x0, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r2, 0x52dc, 0xf62e, 0x3, 0x0, 0xffffffffffffffc0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) 8.999842069s ago: executing program 6 (id=3534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000200)="2e05e8006664f30f7fc20f4edf66b8213a4d020f23c80f21f86635000050000f23f83e67f264650f300fc7b807000f20e06635000400000f22e0f32e6564eebaf80c66b805daf68b66efbafc0cb000ee0f01d1", 0x53}], 0x1, 0x64, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='erofs\x00', 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r7, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r7, 0x0, 0x2, 0x4}}, 0x20) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x3, 0x5, 0x4, 0x0, 0x2, 0x10}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000004c0), 0x83f}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000001980), 0xe, 0x280) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.039960705s ago: executing program 5 (id=3535): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000768731c00000000005000000000a00000000000000f33d5791a8c8ce7c62319cfa2d917d13a161b7e17c7b6a6d829b6b7fd60d33e8b5405b40ef3400"/115, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000000000000000000000a00000000000000000000008040000000000000000008000000000000000000000000000000004400050000000000000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f00000001c0)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r2, &(0x7f0000000840)="8bb3689fbf18c9", 0x7, 0x6}]) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000180)={'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.775839654s ago: executing program 5 (id=3536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776050203010902240001000000000904310002ff0107ff09058a02100000fa000905ff8a"], 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0xdddd0000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x10000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x80f, 0x0, 0x8001}]}) 6.553076863s ago: executing program 2 (id=3537): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0502103, 0xfffffffffffffffe) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x50}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000010c0)={&(0x7f0000001080)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) write$fb(r3, &(0x7f0000001100)="2d3a14b68ec5f3881b506f1e0fba2fe5aa95c028a6d84c58671a2801002bfbabee1e8cb86253e454714433799657eca4a4e46ea329f91810e77ccc858862", 0x3e) syz_emit_ethernet(0x2a, &(0x7f0000001040)=ANY=[@ANYRESOCT=r0], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = eventfd2(0xa, 0x0) r8 = eventfd2(0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x0, r8}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 6.389567478s ago: executing program 1 (id=3538): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1412, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000200)=0x5, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="48b801b8973400000000989823c80f23f835080050000f23f8c744240004000000c744240200000000c7442406000000000f011c244d0fc708c74424002a010000ff2c24b8010000000f01c10f23c00f21f835020002000f23f8c4e1b45702f341f4c4017d10e548b8c0770c90f03a5f34c42135e0220f20e035004000000f22e035080000000f23f8", 0x89}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.255591863s ago: executing program 4 (id=3539): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001200000000001000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000007b987600000000005608000002000000a500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 6.118776901s ago: executing program 4 (id=3540): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x8101, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_loaded', 0x301002, 0x150) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r1, 0x7, 0x1, r1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)}, 0x48846) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}}, 0x105, 0x6, 0xf06, 0xa, 0xbc, 0x9, 0x1}, 0x9c) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000914b2d7a5f518cdd000008000300", @ANYRES32=r9], 0x38}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xc8, 0x19, 0x8, 0x70bd2b, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x3b}, @in=@private=0xa010102, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x2e}, {0x1, 0x6, 0x3, 0x6, 0x6, 0x8, 0x5, 0x81}, {0xda, 0x2, 0xfffffffffffffff9, 0x4}, 0x7, 0x6e6bbd, 0x1, 0x0, 0x3, 0x3}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @extra_flags={0x8, 0x18, 0x9}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 5.908953492s ago: executing program 1 (id=3541): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000f10002000600000000000000000002"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 5.688138918s ago: executing program 6 (id=3542): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) pipe(&(0x7f0000000040)) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (async) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000080), 0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="48840000004000000800290004000000fce19827788f5d2abb6aaafa74ee8c3ff464db9f6168833f511de62af701c848cc9ff06cbbab7622bd1515e0c99fb0f943de60ceee"], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 5.564721733s ago: executing program 6 (id=3543): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffffffffffffff, 0x80, 0x0, {0x1c, 0x0, 0x10, 0x0, 0x0, 0x0, 0xff, 0x6}}, 0x1c}}, 0x4804) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x100, r1, 'id1\x00'}) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000080a060102000000000000000001000005080009bfe8edbc576977d8801cb2a24000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x2000080) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0xb0dc, 0x400, 0x40206, 0x11e}, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_clone(0x84202800, &(0x7f0000000880)="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", 0x1000, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000440)="20b7c305311a8b6047801a2619fb256598ec70ab61cce2753071f289cce9e5c6e6910a4b5df8a769bb124569b8fe31581000d39cee9f30c786a2a8dc75c19eb3eeee5e7aa96415d330334851d3beff6b8c7f9e211070fd0ce9a20b595ee6cc9347e46af33af8b2cbf9a282026fda254ce5d9a50713a135966d54f162f44448b7831662dc9c89791c9435d490d37ae0057ebda395736eb15917db9e89aca1df75b5e7bdd233d9f05ecf396a5e32c347083cca643225d62ae4d70efc324b73010028b3f937ab6f777086a17f43ea5e384781a591a54308f0d5ac77a51e") capset(&(0x7f00000003c0)={0x19980330, r5}, &(0x7f0000000540)={0x2, 0x8, 0x6, 0x6, 0x80, 0xab64}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) select(0x40, &(0x7f0000000080)={0x2, 0x2, 0x823, 0x1f, 0x5, 0x2, 0x8, 0x80000001}, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000380)="0f01764a652e36f2f0fe040f0e0f30baf80c66b81e17898f66efbafc0cedd9fa3eff580376870f015a000f01f6", 0x2d}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5.556077036s ago: executing program 1 (id=3544): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = memfd_secret(0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_disconnect(r5) syz_usb_control_io$printer(r5, &(0x7f0000000200)={0x14, &(0x7f0000000280)={0x20, 0xa, 0xa2, {0xa2, 0x7, "2dfc012eac47983b06b03cb76bd11c3123a07ec8344c6318aa1bcad85817d29c725b1413e37d034b338b7fe01ad218fc7c63c0ace0f2396e24642d0320996aa12fcdf03f635aad0a8c088b1b89aa292bc9fd5ffc8c2dcf04cf709cfdd7d1b2b086af5edf64a52b3971521abf6c45500b0509c15640c280288e6a70234707b2b420aee42bff74befc547e8fe57fce1afe58922ad0d4de606e915dee1d99e1aa26"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, &(0x7f0000000640)={0x34, &(0x7f00000006c0)={0x20, 0x8, 0xcd, "909bfa3f985dd0bc95f07efd8290d3612a57b89ed452fc7037f6bae1668eef4c17850e36a934db61f0643de62f8c8919c370e9f11e0b7f1ce5b85913d0fd615f44585228583176397f2c05877109dcff8967e77bafffd4b892a922b6a009b967e3c2b97e92914a26c728c3e96f3a75a06f21591a0edcee9f4112884105744b6bb404c56fb00353593c51f72742f106536e9127654e06eb56ad6c97a3ad38249b9f9e329983ed2ad2322d85c3a31b15feafbc1a028ccbfaf6aab5ebd4689397496d7d571be936b7d6aec7f80326"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xe3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x0, 0x98, {0x96, "cab23dfda45c75fe4293b9814476f227e1048f145ea753d8c7b05f38af86c4c8a045287125bed9a2f652fa4f2a660ec972319d118517a84caa84cee1f74ab81c167ead0f976fc4238d87c14660f3b5e0ec3aeb6667c334af19942cada1912d8d0e7c6dc8e9c5f2a6e4f36a9d800bea4f936bca61fd4dab162d732246ccd6325bf55ac4858da51c9b5188d59e49c71b6ce865f2b75ef5"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x1d}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1e, 0x4}]}, 0x38}}, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b"], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)={0x70, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4c, 0x5b, "fb17763d42f715521092b7c8058b70a29277807b03ec8459b42fdeb4e861520b6f4ecaa78ea89b6679e9db4d36dfd708d4ec9efe270e088d33ef209b1f1729874f6f17659a78828e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x70}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r11, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.912094008s ago: executing program 5 (id=3545): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x101) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close_range(r1, r2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2dc0cd6813f629dbe599bdcc3b6dd2031e824dea4000223cd706eeab05c6d780f7aa9dd452fae7a9c324a793da03a1ed0e8b901f5968ec8c75d72f5d6f33b78018f7d971f167567cad976046c6734b5131e91ee71284c2", @ANYRES64=0x3], 0x10) 4.798571109s ago: executing program 5 (id=3546): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r2}, &(0x7f00000000c0)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 3.617245356s ago: executing program 6 (id=3547): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) openat$rtc(0xffffffffffffff9c, 0x0, 0x12000, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x20040010) socket$netlink(0x10, 0x3, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x7, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x5, 0x3, 0x0, 0x2}, 0xe) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)=ANY=[@ANYRES32, @ANYBLOB="86448a0cef8c2193cfbbf0ba01a315d8be98031ed0b593dbe03c44dc29485f02db318ed93c7fa430b9a3a955b1360eafc8ab81e927e2b1c31edf41a1ec742e1ba06e8f77ffe8447631a985f83253cef54f72665eacc2c532ce7c13428771a249fe54410f1be54aae1ee7177939897970aedafceced36506ad8b214e49c58e7424c4f6dd4dd3bc0e8c6d7b4ae", @ANYBLOB="63da59a31faa0d93", @ANYRES32, @ANYRES32, @ANYBLOB="5e0d5a4fd99aa049cf74d4363a929d0358f74ef64ca63e9d951dcad64978053d19e15461eb6ad996712cab7e38c30816a5dbd5d668b636265a9063c7fc5d8adc1747e4b9b1a981e988cac7697e8b44663d63dbf778c746e1c544e7f1ad78798b000debd4d0141204e911f885e5e754e589b37770c2e6c4dc4b30474ca9e4bdfee2d645b1d02986187a0ec590c938fc63b3bd2833e1d2654437aa8169d47dd1a9cbe548d29f33712fc1d5329609cb2c74a0485e36e55fd6e6fcb3a53ed3fb715d7dd4d94ce1209d3fb52e60204ae334c850c04b91656144d54133502942bd20fc696c3d036f1352955440cb2f43e4adc4715db9bcf816e3e6", @ANYRES64=0x0], 0x20) r9 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xd) ioctl$TIOCMBIS(r9, 0x5416, &(0x7f0000000280)=0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3.463368011s ago: executing program 5 (id=3548): io_setup(0x72, &(0x7f00000003c0)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xcbee, r1, 0x0, 0x0, 0x5, 0x0, 0x3}]) pipe2$9p(&(0x7f0000000000), 0x0) getgid() socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private2, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000040)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) semget$private(0x0, 0x5, 0x1a4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x40) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x3003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x303040) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000540)={0x2caee010, 0x46, 0xfff, 0x5, '\x00', '\x00', '\x00', 0x800000, 0x20000000, 0x0, 0x0, "b6855a32674ffa64f778ddcf29c94337"}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_io_uring_setup(0x269, 0x0, &(0x7f0000000280), 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = signalfd4(r4, 0x0, 0x0, 0x80800) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x2d0, 0xa, 0x148, 0x200, 0x60, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x190, 0x200, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010100, [0xecd7dc017dfde287, 0xff000000, 0xffffff00, 0xffffffff], @ipv4=@broadcast, [0x0, 0xff, 0x0, 0xff000000], @ipv6=@empty, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], @ipv4=@local, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x0, 0x7ff, 0x32, 0x4e24, 0x4e20, 0x4e20, 0x4e22, 0x2620, 0x201}, 0xc1, 0x4, 0x4e24, 0x4e22, 0x4e21, 0x4e23}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x9, @random="d1a60bb8f9a6", 0x140e, 0x10, [0x31, 0x15, 0x29, 0x25, 0x20, 0xa, 0x0, 0x2f, 0x3f, 0x8, 0x3b, 0x1, 0x1c, 0x39, 0x2, 0x3f], 0x0, 0x2, 0x7fff}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3c8) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r8) r9 = syz_clone(0x82001000, &(0x7f0000001800), 0x0, &(0x7f0000001840), 0x0, 0x0) wait4(r9, 0x0, 0x2, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000840)={0x2, r9}) 3.404694073s ago: executing program 2 (id=3549): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='uid_map\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4400020}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x140c, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48880}, 0x14005) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0xfffffffffffffe39) pread64(r0, &(0x7f0000000380)=""/78, 0x4e, 0x10000) 3.206645661s ago: executing program 2 (id=3550): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001200000000001800fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000007b987600000000005608000002000000a500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 3.108133042s ago: executing program 2 (id=3551): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022050600000bd32052f2f1250431923b94c66011302dbc030000000000000016171e4141d7a27fc8fdd1583acf53eb706e40e8700acaf65e35cd7d7b94b2640524fd9a256480655ca0e9fb7d1a655cef"], 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc040480c, 0x0) (async) syz_emit_ethernet(0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000320000000000019078ac1e0001ac1414aa030490780300fffe4500000000000eff002f0000ac14140ae00000010000"], 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000240)=0x2, 0x4) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000e40)={{0x12, 0x1, 0x300, 0x94, 0xd5, 0xe1, 0x20, 0x9710, 0x7840, 0x6b91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x8, 0xd0, 0x9, [{{0x9, 0x4, 0x97, 0x0, 0x0, 0xf5, 0xf, 0xae, 0x6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x155555555555581d, [{0x4, &(0x7f0000000280)=@string={0x0, 0x3, "c1eb910c5697c938e63a0bc01047a751283a2e8b2489616d05e888aa2bc52ba4d8f970e9c9d6"}}]}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=r0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) (async) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_setup(0x6, &(0x7f0000000680)) 2.962045654s ago: executing program 4 (id=3552): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000006, 0x20010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x98, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x25, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x98}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) listen(0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000200)=""/219, 0xdb}], 0x3}}], 0x400000000000190, 0x36080, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001680)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a78700000000fddbdf250b00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x10000001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0xfb, 0x8, 0x8, 0x21, @mcast1, @mcast1, 0x40, 0x10, 0x8, 0xc240}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0xc4, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40011) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x0, 0x0, 0xffffffffffffff73, 0x2, 0x4f, 0x44}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x80000) remap_file_pages(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 2.649203578s ago: executing program 1 (id=3553): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5803, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x80003519, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) write$tun(r4, &(0x7f0000000000)={@void, @val={0x2, 0x4, 0x2, 0x5dd, 0x8, 0x3}, @x25={0x3, 0x1, 0xff}}, 0xd) syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) 2.299873985s ago: executing program 5 (id=3554): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xd1424c82d4482ee6, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x9, 0x6, 0x0, 0xc9b5d8d000000, 0x5, 0x5, 0x268f, 0x4, 0x0, 0xe9a6, 0xfffffffffffffff8, 0x100000001, 0x7c, 0x2}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000380)={{r2, 0x40, 0x1, 0x8, 0x3, 0x8001, 0x8, 0x4, 0xab3, 0x8, 0x10000, 0xd, 0x6, 0x9, 0xb}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x300) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000040)=0x80000001) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x8ba, 0x0, 0x104}]}) r7 = fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(r7, 0x3f, &(0x7f00000000c0)={0x27, 0xff, 0x514}) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r8, 0x801, 0x48e, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0xb2}}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r12, 0x84, 0xf, &(0x7f0000001380)={r13, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x9, 0xfffffffe, 0x3, 0x3, 0x3ff}, &(0x7f0000001440)=0x98) r14 = dup(r1) write$6lowpan_enable(r14, &(0x7f0000000000)='0', 0xfffffd86) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x13, r0, 0x0) 2.210085095s ago: executing program 1 (id=3555): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0x6, 0xfffffe0000000004, 0x1000fa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000300), 0x5, 0x1210c0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r9, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000002900000037000000000000000000000004a7f86dbdd824ac5c6642e1f4017400000000000edb74357c3c368c437c2a"], 0x20}}], 0x2, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000040601010400000000000003000000000500010007000000a6abba935ed959291a15ba549f08ec39cf62bd59fdbf76055f8414f9914c0f17d75625a129a5586ecba0b1ab973eb96293f871e4713af7d911d8174114b3610a9efd2ee8207931d713157b856a6085c1008e64d3a45a7592d8f91b1a70f0c44c634c740ea0c8ee9fe319dab19fe015121a616511f3023e06246fdecd1c58cf2e17d621ec"], 0x1c}}, 0x0) r10 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc4214d4a27e1614fbee0beac8f4a045070b770212d46d4a2df096b791f2a4ba218e12cb76aa24945b70a7c9dd5edeac52b5a876f73cfbe66371a72f11f3d9544d6b59b4a5541dcef5cbf11ffff37dfd147c8a3e5098a207be806ea7167101f8c1b5c8fe41e170fd0c775dbc5be0b6d3ab625ab702e5b1dc15f9c4b3d09be812f340e681e0694f5badf640da3fdfc2f929b4c2beb9a592c577287b6021bfeec24146c7f95608bb60a736207a09d9f47e89c4044eadde57cdefd15f25b822d2eaf2205df0d6b71b63ee0b63cb598f26509af36983578f6f4198a0843cc1b1bd780015007ab9709cc6211e3b5c685b972b5c5e95f054a7a9fe149282f679c8466b9734e3850ec98419dd0c887715902f9e7802842085bc606f30c2654869e9e3701fd0fc69137fe165592689465eebd5cafad7c29de2adadec42a818d8ee389ca1fe33a1ef23617c89116a3a458b56612e4c36c43a9150d5331adbb0beb01a062b1f1349fc2ecea76cb7c40cdfe378185f3099b1d71414d0fda5a47f8593260cc0bd723a4cca81435f041321635f91bcb15aac48883a9617fb4e58c19b18cf3a7e1299a07f45325fcd05a7c30f47e77073dcc584f7e0516cb74c55a0a2a30dc9f3163868f7c233ad1fff87a3c2a30f1312c3ad0fb71cc6433e9bd7c3209de0cba9552f5c7c04f24eccf206bdb745564539dd62d655a33d40a507660668c30f7720280c86c104e58d30d6cb65814e00b55ff9a33f3ed375dfb4b47d89a599f31a0"], 0x564) fsopen(&(0x7f0000000100)='bpf\x00', 0x0) 259.053762ms ago: executing program 4 (id=3556): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040303dfe5000000010902b901010000003f0904"], 0x0) 199.589167ms ago: executing program 6 (id=3557): syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004e4aa92082051600578e01020301090236000200000000090400f50003ed02000905030000000000000904"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f00000000c0)={[{0x7f, 0x8000, 0x9, 0x9, 0xfc, 0xa, 0x3, 0x8, 0x5, 0x4, 0x0, 0x2, 0x1}, {0xc022, 0x2, 0xd, 0x5, 0x4, 0x7, 0x80, 0x80, 0xff, 0x3, 0xa5, 0x6, 0x40}, {0x6, 0xa, 0x72, 0x80, 0x77, 0x5, 0x6, 0x9, 0xfe, 0x6, 0x9, 0x8, 0x5}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) syz_usb_connect$cdc_ecm(0x4, 0x57, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x7, 0xa0, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x79, {{0x6, 0x24, 0x6, 0x0, 0x0, "0e"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x5, 0x9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x40, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xc0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x40, 0x9f, 0x3}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xd, 0x4, 0x4, 0xff, 0x4}, 0xa2, &(0x7f00000003c0)={0x5, 0xf, 0xa2, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0xe1, 0x1, 0x9, 0x1, 0x2}, @generic={0xd, 0x10, 0xa, "69460ff3e185ed7ae3e0"}, @ptm_cap={0x3}, @generic={0x82, 0x10, 0x0, "2fc438b6d46f5c156b71564b89616f8060de5925454e07bca0f8bd8db35e28329e1e605f6da40ab5c63b27bbc10ef201be4f521590560fd79a1b454a608f4321d77f189668c725a30707418742cb0b7158fe6c065bf1ea28d1544c9731c1b3256361511ae5821dfb362935edf9c30844b42f4f58e36819c0c89272960d707b"}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41d}}, {0x65, &(0x7f0000000480)=@string={0x65, 0x3, "7bfdd40d90e6260f33509112deeba73d72d40395d6865afae60bc54bcd15299e94862def07d33f85cf84e410bfa4afb66de46f218e05ff0dcdf3eeb7baf2e1f30306749ccc042caab61a3e60356faa9a2fd307371689a16aa260126a6eddc79d6137c6"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3c08}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0xc3, &(0x7f0000000540)=@string={0xc3, 0x3, "e8a21897718cbc606d894245681d8ba824ff0276911b24018094f0dc7462d51111ea739b8a2e24d4cce956a9c2810df2e8043e74364b7b300e9b4eebe6fc0071a147a4d1e71dd6385f53104a7c85273ad07c8a3becb5a7403fd8c128d1fe6d0e802f7e80b571e746133182d75de534d8f02b5759520064ebbd26c0ed69dd1b6cd4ee09ba7414d6aeb106736cf1aae6e9fd5859ad77894a82c84043815a63f487a392a33a3a52806ecc8d19d0fcab7e941ded1b3092456a43a6671dca2e64e2bf21"}}]}) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r9, r8}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x38, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$KVM_CAP_HALT_POLL(r7, 0x4068aea3, &(0x7f00000006c0)={0xb6, 0x0, 0x6}) close(r5) r11 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r11, 0x40084146, &(0x7f0000000300)) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r0, 0xffff8000) 139.486159ms ago: executing program 2 (id=3558): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) (async) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="b9cfd5ee83a466d4f3e84b72d47f7ea2e5d69835b7d0930afb8663d62bdc3b00aa513e31fd2ae81f93780125322e60663e28968ec62891e731fb3defec3b8d3979644138b81785e931e6a0bde8e7df9cebccd6f0b0f8dbf674230034a6727e83b42e98887d0e3020a93eb1ee02511798bfec95ef35148ac4bc6159c413f2d43f1fab9941f04a828794b79228acdf3c36c299706b027a8583269bbeff5114309303e1eea3bed46a6e8fa1c32437df50d16973362269133ed68942b24b47572b5d6f551153c4ecf0", 0xc7, 0x20000010, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0xf7d}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0x2020) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xfd) (async) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) (async) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) getsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x83, &(0x7f0000000140)={r4}, 0x8) getdents(r1, &(0x7f0000000040)=""/44, 0x2c) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014935d1071040c03e9ba010203010902120001000000000904"], 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x100000) (async) fcntl$setpipe(r6, 0x407, 0x8001) (async) r7 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005500)={0x34, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 23.241811ms ago: executing program 1 (id=3559): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c64d2, &(0x7f0000000180)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=3560): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x1}}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000640)) (async, rerun: 64) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) (async) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x500}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000133000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00009b7000/0x4000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005d5000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f00007a0000/0x4000)=nil, 0x0}, 0x68) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async, rerun: 64) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x20000000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Releasing backup interface [ 903.354984][ T13] bond0 (unregistering): Released all slaves [ 903.380573][ T8057] usb 2-1: Using ep0 maxpacket: 32 [ 903.418273][ T8057] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 903.426563][ T8057] usb 2-1: config 0 has no interface number 0 [ 903.484799][ T8057] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 903.494721][ T8057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.515088][ T8057] usb 2-1: Product: syz [ 903.530195][ T8057] usb 2-1: Manufacturer: syz [ 903.535182][ T8057] usb 2-1: SerialNumber: syz [ 903.557596][ T8057] usb 2-1: config 0 descriptor?? [ 903.592153][ T8057] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 903.602395][ T8057] usb 2-1: selecting invalid altsetting 1 [ 903.622103][ T8057] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 903.644539][ T8057] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 903.655760][ T8057] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 903.664542][ T8057] usb 2-1: media controller created [ 903.673711][ T13] bond1 (unregistering): Released all slaves [ 903.687134][ T8057] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 903.695230][ T13] bond2 (unregistering): Released all slaves [ 903.721370][T18626] team0: Port device team_slave_0 added [ 903.742738][T18675] vlan2: entered promiscuous mode [ 903.747838][T18675] erspan0: entered promiscuous mode [ 903.847511][ T8057] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 903.863014][T18626] team0: Port device team_slave_1 added [ 903.882112][ T8057] zl10353_read_register: readreg error (reg=127, ret==-32) [ 903.920131][T18682] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 903.929245][ T8057] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 904.023224][ T13] tipc: Left network mode [ 904.048084][T18626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.064174][T18626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.121265][ T8057] usb 2-1: USB disconnect, device number 67 [ 904.125930][T18626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.182930][ T5150] Bluetooth: hci4: command tx timeout [ 904.206218][T18626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.231707][T18626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.284839][T18626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.542001][ T39] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 904.574378][T18626] hsr_slave_0: entered promiscuous mode [ 904.589784][T18626] hsr_slave_1: entered promiscuous mode [ 904.597670][T18626] debugfs: 'hsr0' already exists in 'hsr' [ 904.607011][T18626] Cannot create hsr debugfs directory [ 904.706655][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 904.717009][ T13] hsr_slave_0: left promiscuous mode [ 904.732999][ T39] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.753938][ T39] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 904.766861][ T13] hsr_slave_1: left promiscuous mode [ 904.791739][ T39] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 904.827363][ T39] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 904.843754][ T13] veth1_macvtap: left promiscuous mode [ 904.863228][ T13] veth0_macvtap: left promiscuous mode [ 904.869192][ T13] veth1_vlan: left promiscuous mode [ 904.900421][ T39] usb 7-1: config 0 interface 0 has no altsetting 0 [ 904.909944][ T13] veth0_vlan: left promiscuous mode [ 904.915636][T18705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3166'. [ 904.921763][ T39] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 904.961224][T18707] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3166'. [ 904.965884][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.012382][ T39] usb 7-1: config 0 descriptor?? [ 905.018632][T18694] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 905.477770][ T39] hid-thrustmaster 0003:044F:B65D.0048: unknown main item tag 0x0 [ 905.488895][ T39] hid-thrustmaster 0003:044F:B65D.0048: unknown main item tag 0x0 [ 905.498146][ T39] hid-thrustmaster 0003:044F:B65D.0048: unknown main item tag 0x0 [ 905.548187][ T39] hid-thrustmaster 0003:044F:B65D.0048: unknown main item tag 0x0 [ 905.595421][ T39] hid-thrustmaster 0003:044F:B65D.0048: unknown main item tag 0x0 [ 905.626884][ T5923] usb 5-1: USB disconnect, device number 77 [ 905.629738][ T39] hid-thrustmaster 0003:044F:B65D.0048: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 905.695165][ T39] hid-thrustmaster 0003:044F:B65D.0048: setup data couldn't be sent [ 905.736396][ C1] hid-thrustmaster 0003:044F:B65D.0048: URB to get model id failed with error -71 [ 905.807084][ T39] usb 7-1: USB disconnect, device number 23 [ 905.920326][T18721] fido_id[18721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 906.261984][ T5150] Bluetooth: hci4: command tx timeout [ 906.263303][ T8057] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 906.424021][ T8057] usb 6-1: device descriptor read/64, error -71 [ 906.692840][ T8057] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 906.831879][ T8057] usb 6-1: device descriptor read/64, error -71 [ 906.942320][ T8057] usb usb6-port1: attempt power cycle [ 906.996092][T18711] macsec1: entered allmulticast mode [ 907.002123][T18711] macvlan1: entered allmulticast mode [ 907.007657][T18711] veth1_vlan: entered allmulticast mode [ 907.019683][T18711] macvlan1: left allmulticast mode [ 907.025748][T18711] veth1_vlan: left allmulticast mode [ 907.226077][T18736] binder: 18735:18736 ioctl c0306201 200000000dc0 returned -14 [ 907.268147][T18736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.284786][T18736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.293627][T18736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.301169][T18736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.314683][ T8057] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 907.433826][ T8057] usb 6-1: device descriptor read/8, error -71 [ 907.751717][ T8057] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 907.965224][ T39] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 907.982419][ T8057] usb 6-1: device descriptor read/8, error -71 [ 908.023678][T18743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3172'. [ 908.056395][T18743] bridge: RTM_NEWNEIGH with invalid ether address [ 908.189987][ T8057] usb usb6-port1: unable to enumerate USB device [ 908.233243][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 908.240680][ T39] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.274479][ T39] usb 7-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 908.281236][T18748] netlink: 'syz.4.3176': attribute type 9 has an invalid length. [ 908.291995][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.293572][T18748] netlink: 'syz.4.3176': attribute type 11 has an invalid length. [ 908.321566][ T39] usb 7-1: Product: syz [ 908.322240][T18748] netlink: 'syz.4.3176': attribute type 12 has an invalid length. [ 908.334651][ T39] usb 7-1: Manufacturer: syz [ 908.339643][ T39] usb 7-1: SerialNumber: syz [ 908.343506][ T13] IPVS: stop unused estimator thread 0... [ 908.364499][ T39] usb 7-1: config 0 descriptor?? [ 908.370628][T18748] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3176'. [ 908.405840][ T39] cdc_phonet 7-1:0.0: probe with driver cdc_phonet failed with error -22 [ 908.418718][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'. [ 908.681041][T18745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.704212][T18745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.744997][T18745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.806151][T18745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.914843][ T30] audit: type=1326 audit(1766225027.681:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18755 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 909.011745][ T30] audit: type=1326 audit(1766225027.721:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18755 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 909.083091][ T39] usb 7-1: USB disconnect, device number 24 [ 909.140974][ T30] audit: type=1326 audit(1766225027.721:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18755 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 909.258741][ T30] audit: type=1326 audit(1766225027.721:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18755 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 909.352067][ T30] audit: type=1326 audit(1766225027.721:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18755 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f53afd8e1ff code=0x7ffc0000 [ 909.457893][T18626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 909.473604][ T30] audit: type=1326 audit(1766225027.721:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18755 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 909.502397][ T30] audit: type=1326 audit(1766225027.721:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18755 comm="syz.5.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 909.551339][T18626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 909.612903][T18626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 909.713792][T18626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 910.188006][T18626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.241934][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3183'. [ 910.392936][T18626] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.460807][T17118] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.468090][T17118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.543524][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.550752][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.193519][T18808] loop2: detected capacity change from 0 to 7 [ 911.269710][T18808] loop2: p4 [ 911.287063][T18808] loop2: partition table partially beyond EOD, truncated [ 911.313965][T18808] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 911.341840][ T39] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 911.380426][T18626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.468427][ T5878] udevd[5878]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 911.524645][ T39] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 911.605926][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.660369][ T39] usb 5-1: config 0 descriptor?? [ 911.680493][T18626] veth0_vlan: entered promiscuous mode [ 911.763573][T18626] veth1_vlan: entered promiscuous mode [ 911.830431][T18626] veth0_macvtap: entered promiscuous mode [ 911.886436][T18626] veth1_macvtap: entered promiscuous mode [ 911.931318][T18626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.965313][T18626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.999707][T18353] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.011301][T18353] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.039676][T18353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.051824][ T5923] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 912.071542][T18829] fuse: blksize only supported for fuseblk [ 912.104506][T18353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.327813][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 912.340647][ T5923] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 912.352984][ T3654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.359693][ T5923] usb 6-1: config 0 has no interface number 0 [ 912.361150][ T3654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.379644][ T5923] usb 6-1: config 0 interface 12 has no altsetting 0 [ 912.416148][ T5923] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 912.426055][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.456598][ T5923] usb 6-1: Product: syz [ 912.460889][ T5923] usb 6-1: Manufacturer: syz [ 912.472989][ T5923] usb 6-1: SerialNumber: syz [ 912.552080][ T5923] usb 6-1: config 0 descriptor?? [ 912.573776][ T5923] f81534 6-1:0.12: required endpoints missing [ 912.595191][T17118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.611186][ T39] usb 5-1: Cannot set autoneg [ 912.641947][ T39] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 912.668872][T17118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.694956][ T39] usb 5-1: USB disconnect, device number 78 [ 913.380349][ T30] audit: type=1326 audit(1766225032.131:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8089f8f749 code=0x7ffc0000 [ 913.473042][T18850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3192'. [ 913.514610][ T30] audit: type=1326 audit(1766225032.191:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f8089f8f749 code=0x7ffc0000 [ 913.608235][ T30] audit: type=1326 audit(1766225032.191:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8089f8f749 code=0x7ffc0000 [ 913.827516][T18850] netlink: 'syz.4.3192': attribute type 10 has an invalid length. [ 913.908071][T18850] bridge0: port 3(netdevsim0) entered blocking state [ 913.925592][T18850] bridge0: port 3(netdevsim0) entered disabled state [ 913.960590][T18861] delete_channel: no stack [ 913.988809][T18850] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 913.999549][T18850] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 914.055164][T18850] bridge0: port 3(netdevsim0) entered blocking state [ 914.062473][T18850] bridge0: port 3(netdevsim0) entered forwarding state [ 914.163496][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 914.163519][ T30] audit: type=1326 audit(1766225032.911:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8089f8f749 code=0x7ffc0000 [ 914.402137][ T30] audit: type=1326 audit(1766225032.911:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8089f8f749 code=0x7ffc0000 [ 914.468284][ T30] audit: type=1326 audit(1766225032.971:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8089f8f749 code=0x7ffc0000 [ 914.588953][ T1044] usb 6-1: USB disconnect, device number 54 [ 914.603180][ T30] audit: type=1326 audit(1766225032.971:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8089f8f749 code=0x7ffc0000 [ 914.685996][ T30] audit: type=1326 audit(1766225032.971:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18847 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8089f8f749 code=0x7ffc0000 [ 915.719489][T18885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3196'. [ 915.728879][T18885] bridge: RTM_NEWNEIGH with invalid ether address [ 915.902821][ T5879] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 916.136527][ T5879] usb 6-1: device descriptor read/64, error -71 [ 916.397239][ T5922] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 916.411857][ T5879] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 916.584252][ T5879] usb 6-1: device descriptor read/64, error -71 [ 916.612018][ T5922] usb 7-1: device descriptor read/64, error -71 [ 916.694335][ T5879] usb usb6-port1: attempt power cycle [ 916.891810][ T5922] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 917.041828][ T5879] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 917.052542][ T5922] usb 7-1: device descriptor read/64, error -71 [ 917.084214][ T5879] usb 6-1: device descriptor read/8, error -71 [ 917.184160][ T5922] usb usb7-port1: attempt power cycle [ 917.352513][ T5879] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 917.393591][ T5879] usb 6-1: device descriptor read/8, error -71 [ 917.580075][ T5879] usb usb6-port1: unable to enumerate USB device [ 917.601770][ T5922] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 917.623483][ T5922] usb 7-1: device descriptor read/8, error -71 [ 917.871740][ T5922] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 917.904523][ T5922] usb 7-1: device descriptor read/8, error -71 [ 918.033408][ T5922] usb usb7-port1: unable to enumerate USB device [ 918.068042][ T8057] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 918.260294][ T8057] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 918.305899][ T8057] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.392288][ T8057] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 918.403551][ T8057] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 918.411282][T18937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.420645][T18937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.460937][ T8057] usb 5-1: Manufacturer: syz [ 918.484561][ T8057] usb 5-1: config 0 descriptor?? [ 918.592645][ T8057] rc_core: IR keymap rc-hauppauge not found [ 918.598950][ T8057] Registered IR keymap rc-empty [ 918.610883][ T8057] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 918.646180][ T8057] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input85 [ 918.750433][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 918.834705][ C0] igorplugusb 5-1:0.0: receive overflow invalid: 120 [ 919.092138][ T1044] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 919.202118][ T39] usb 5-1: USB disconnect, device number 79 [ 919.231707][ T1044] usb 2-1: device descriptor read/64, error -71 [ 919.471764][ T1044] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 919.535334][T18957] input: syz0 as /devices/virtual/input/input86 [ 919.551929][ T24] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 919.649504][ T1044] usb 2-1: device descriptor read/64, error -71 [ 919.681004][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3214'. [ 919.711736][ T24] usb 6-1: device descriptor read/64, error -71 [ 919.731073][T18962] bridge: RTM_NEWNEIGH with invalid ether address [ 919.762017][ T1044] usb usb2-port1: attempt power cycle [ 919.932020][ T39] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 919.951761][ T24] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 920.121788][ T1044] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 920.129859][ T24] usb 6-1: device descriptor read/64, error -71 [ 920.334531][ T24] usb usb6-port1: attempt power cycle [ 920.344541][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 920.388562][ T1044] usb 2-1: device descriptor read/8, error -71 [ 920.433989][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.461769][ T39] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 920.476638][ T39] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 920.509465][ T39] usb 3-1: config 0 interface 0 has no altsetting 1 [ 920.546044][ T39] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 920.576275][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.601773][ T39] usb 3-1: Product: syz [ 920.606190][ T39] usb 3-1: Manufacturer: syz [ 920.610812][ T39] usb 3-1: SerialNumber: syz [ 920.635555][ T39] usb 3-1: config 0 descriptor?? [ 920.651940][ T1044] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 920.682561][ T1044] usb 2-1: device descriptor read/8, error -71 [ 920.688876][ T24] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 920.717710][ T24] usb 6-1: device descriptor read/8, error -71 [ 920.794379][ T1044] usb usb2-port1: unable to enumerate USB device [ 920.971748][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 921.024500][ T24] usb 6-1: device descriptor read/8, error -71 [ 921.133871][ T24] usb usb6-port1: unable to enumerate USB device [ 921.157390][T18979] veth1_to_bond: entered allmulticast mode [ 921.913987][T18971] veth1_to_bond: left allmulticast mode [ 921.934830][T18987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3220'. [ 922.722242][ T39] usb 3-1: USB disconnect, device number 50 [ 923.382649][T19005] all: renamed from lo (while UP) [ 923.485882][T19009] netlink: 'syz.4.3226': attribute type 1 has an invalid length. [ 923.494391][T19009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3226'. [ 923.811715][ T5918] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 924.028461][T19017] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3227'. [ 924.039164][T19017] bridge: RTM_NEWNEIGH with invalid ether address [ 924.322472][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.350450][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.476319][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 924.747961][ T5918] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 924.864227][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.909428][ T5918] usb 5-1: config 0 descriptor?? [ 925.495143][T19014] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3226'. [ 926.726239][ T5918] usbhid 5-1:0.0: can't add hid device: -71 [ 926.746614][ T5918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 926.782869][ T5918] usb 5-1: USB disconnect, device number 80 [ 926.907588][T18640] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 927.201693][ T5918] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 927.370269][ T5918] usb 5-1: Invalid ep0 maxpacket: 64 [ 927.529287][ T5918] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 927.756420][ T5918] usb 5-1: Invalid ep0 maxpacket: 64 [ 927.790700][ T5918] usb usb5-port1: attempt power cycle [ 928.180239][ T5918] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 928.235213][ T5918] usb 5-1: Invalid ep0 maxpacket: 64 [ 928.372518][ T5918] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 928.402621][ T5918] usb 5-1: Invalid ep0 maxpacket: 64 [ 928.409783][ T5918] usb usb5-port1: unable to enumerate USB device [ 930.017894][T19076] loop2: detected capacity change from 0 to 7 [ 930.033103][T19078] sock: sock_set_timeout: `syz.4.3243' (pid 19078) tries to set negative timeout [ 930.134928][T19076] Dev loop2: unable to read RDB block 7 [ 930.202411][T19076] loop2: AHDI p1 p2 p3 [ 930.218214][T19076] loop2: partition table partially beyond EOD, truncated [ 930.255056][T19076] loop2: p1 start 1601398130 is beyond EOD, truncated [ 930.406224][T19076] loop2: p2 start 1702059890 is beyond EOD, truncated [ 930.462548][T19082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3241'. [ 930.471549][T19082] bridge: RTM_NEWNEIGH with invalid ether address [ 930.605730][T19084] input: syz1 as /devices/virtual/input/input87 [ 931.217705][T19101] FAULT_INJECTION: forcing a failure. [ 931.217705][T19101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.251737][ T1044] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 931.274326][T19101] CPU: 1 UID: 0 PID: 19101 Comm: syz.4.3249 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.274350][T19101] Tainted: [L]=SOFTLOCKUP [ 931.274354][T19101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 931.274361][T19101] Call Trace: [ 931.274367][T19101] [ 931.274373][T19101] dump_stack_lvl+0x189/0x250 [ 931.274394][T19101] ? __pfx____ratelimit+0x10/0x10 [ 931.274408][T19101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 931.274421][T19101] ? __pfx__printk+0x10/0x10 [ 931.274438][T19101] ? __might_fault+0xb0/0x130 [ 931.274461][T19101] should_fail_ex+0x414/0x560 [ 931.274482][T19101] _copy_from_user+0x2d/0xb0 [ 931.274498][T19101] __sys_bind+0x199/0x3e0 [ 931.274511][T19101] ? __pfx___sys_bind+0x10/0x10 [ 931.274530][T19101] ? __pfx_ksys_write+0x10/0x10 [ 931.274545][T19101] __x64_sys_bind+0x7a/0x90 [ 931.274557][T19101] do_syscall_64+0xfa/0xf80 [ 931.274571][T19101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.274582][T19101] ? clear_bhb_loop+0x60/0xb0 [ 931.274596][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.274607][T19101] RIP: 0033:0x7f8089f8f749 [ 931.274619][T19101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.274629][T19101] RSP: 002b:00007f80881ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 931.274643][T19101] RAX: ffffffffffffffda RBX: 00007f808a1e5fa0 RCX: 00007f8089f8f749 [ 931.274651][T19101] RDX: 0000000000000060 RSI: 0000200000000240 RDI: 0000000000000003 [ 931.274659][T19101] RBP: 00007f80881ee090 R08: 0000000000000000 R09: 0000000000000000 [ 931.274666][T19101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.274673][T19101] R13: 00007f808a1e6038 R14: 00007f808a1e5fa0 R15: 00007f808a30fa28 [ 931.274705][T19101] [ 931.531705][T18831] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 931.566033][ T1044] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 931.575317][ T1044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.585946][ T1044] usb 2-1: Product: syz [ 931.590493][ T1044] usb 2-1: Manufacturer: syz [ 931.597551][ T1044] usb 2-1: SerialNumber: syz [ 931.624764][ T1044] usb 2-1: config 0 descriptor?? [ 931.634102][ T1044] gspca_main: touptek-2.14.0 probing 0547:6801 [ 931.714232][T18831] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 931.742136][T18831] usb 6-1: config 0 has no interface number 0 [ 931.752030][T18831] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 931.792797][T18831] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 931.829207][T18831] usb 6-1: config 0 interface 255 has no altsetting 0 [ 931.837537][T19102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.862526][T19102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.870702][T18831] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 931.901809][T18831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.921322][T19102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.961288][T18831] usb 6-1: config 0 descriptor?? [ 931.972115][T19114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.972430][T19102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.991086][T18831] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 932.015162][T19114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.030734][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.038697][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.118726][T19102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.128820][T19102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.142429][T19102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.196568][T18831] usb 6-1: USB disconnect, device number 63 [ 932.204416][T19102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.245825][ T5922] usb 2-1: USB disconnect, device number 72 [ 932.891706][ T5922] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 933.086504][ T5922] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 933.121701][ T5922] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.152539][ T5922] usb 7-1: config 0 interface 0 has no altsetting 0 [ 933.212042][ T5922] usb 7-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 933.221171][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.284019][ T5922] usb 7-1: config 0 descriptor?? [ 933.522870][T19141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3260'. [ 933.615222][T19146] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3260'. [ 933.672185][T16942] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 933.795998][ T5922] lenovo 0003:17EF:60EE.0049: unknown main item tag 0x0 [ 933.813206][ T5922] lenovo 0003:17EF:60EE.0049: unknown main item tag 0x0 [ 933.840085][ T5922] lenovo 0003:17EF:60EE.0049: unknown main item tag 0x0 [ 933.872103][T16942] usb 3-1: Using ep0 maxpacket: 16 [ 933.951819][T16942] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 933.969719][T16942] usb 3-1: config 0 has no interface number 0 [ 934.009701][ T5922] lenovo 0003:17EF:60EE.0049: unknown main item tag 0x0 [ 934.031531][T16942] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 934.138432][ T5922] lenovo 0003:17EF:60EE.0049: unknown main item tag 0x0 [ 934.165312][T16942] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 934.186843][ T5922] lenovo 0003:17EF:60EE.0049: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.6-1/input0 [ 934.291660][T16942] usb 3-1: config 0 interface 41 has no altsetting 0 [ 934.326499][T16942] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 934.891668][T16942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.979949][ T5922] lenovo 0003:17EF:60EE.0049: Fn-lock setting failed: -71 [ 934.998834][T16942] usb 3-1: Product: syz [ 935.021752][T16942] usb 3-1: Manufacturer: syz [ 935.032312][ T5922] lenovo 0003:17EF:60EE.0049: Sensitivity setting failed: -71 [ 935.060713][T16942] usb 3-1: SerialNumber: syz [ 935.113398][T16942] usb 3-1: config 0 descriptor?? [ 935.119414][T19139] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 935.142267][T19139] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 935.149206][ T5922] usb 7-1: USB disconnect, device number 29 [ 935.209093][T19164] fido_id[19164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 935.362399][T19139] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 935.395183][T19139] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 936.080962][T16942] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 936.591460][T16942] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 936.605830][T19181] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 936.635502][T16942] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 936.657202][T19183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3267'. [ 936.707636][T19183] bridge: RTM_NEWNEIGH with invalid ether address [ 936.932361][T16942] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 936.959750][T19187] pim6reg1: entered promiscuous mode [ 936.965412][T19187] pim6reg1: entered allmulticast mode [ 936.993800][T16942] usb 3-1: USB disconnect, device number 51 [ 937.402168][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 937.612064][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 937.644330][ T24] usb 2-1: config 0 has no interfaces? [ 937.675113][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 937.724127][T19194] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 937.732337][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.783424][ T24] usb 2-1: Product: syz [ 937.794611][ T24] usb 2-1: Manufacturer: syz [ 937.800825][ T24] usb 2-1: SerialNumber: syz [ 937.819589][ T24] usb 2-1: config 0 descriptor?? [ 938.021852][ T5922] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 938.227498][ T5922] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 938.247075][ T5922] usb 3-1: config 0 has no interface number 0 [ 938.290005][ T5922] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 938.309998][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.327286][ T5922] usb 3-1: Product: syz [ 938.340501][ T5922] usb 3-1: Manufacturer: syz [ 938.347447][ T5922] usb 3-1: SerialNumber: syz [ 938.365397][ T5922] usb 3-1: config 0 descriptor?? [ 938.387613][ T5922] yurex 3-1:0.50: Could not find endpoints [ 938.561784][ T8057] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 938.590370][T19191] kvm: kvm [19190]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 938.631506][T19191] kvm: kvm [19190]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 938.731961][ T8057] usb 6-1: Using ep0 maxpacket: 32 [ 938.748378][ T8057] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 938.759770][ T24] usb 3-1: USB disconnect, device number 52 [ 938.797940][ T8057] usb 6-1: config 0 has no interface number 0 [ 938.815207][ T8057] usb 6-1: config 0 interface 255 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.833598][ T8057] usb 6-1: config 0 interface 255 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.849824][ T8057] usb 6-1: config 0 interface 255 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 938.885198][ T8057] usb 6-1: config 0 interface 255 has no altsetting 0 [ 938.900584][ T8057] usb 6-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 938.917501][ T8057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.948835][ T8057] usb 6-1: config 0 descriptor?? [ 939.596681][T19231] Cannot find add_set index 2 as target [ 939.872302][ T5922] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 940.051704][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 940.074342][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.086786][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.109618][ T8057] usbhid 6-1:0.255: can't add hid device: -71 [ 940.126277][ T8057] usbhid 6-1:0.255: probe with driver usbhid failed with error -71 [ 940.144128][T16942] usb 2-1: USB disconnect, device number 73 [ 940.179787][ T5922] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 940.209457][ T8057] usb 6-1: USB disconnect, device number 64 [ 940.245392][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.309234][ T5922] usb 3-1: config 0 descriptor?? [ 940.690611][T19247] netlink: 'syz.5.3283': attribute type 1 has an invalid length. [ 940.744643][T19231] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3279'. [ 940.872680][T19247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 940.955567][ T5922] apple 0003:05AC:024B.004A: unknown global tag 0xe [ 940.973722][ T5922] apple 0003:05AC:024B.004A: item 0 1 1 14 parsing failed [ 941.004433][ T5922] apple 0003:05AC:024B.004A: parse failed [ 941.038155][ T5922] apple 0003:05AC:024B.004A: probe with driver apple failed with error -22 [ 941.059808][T19251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3282'. [ 941.234635][ T5922] usb 3-1: USB disconnect, device number 53 [ 941.333840][T19251] bridge: RTM_NEWNEIGH with invalid ether address [ 942.294853][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3286'. [ 943.291966][ T1044] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 943.492521][ T1044] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.523430][ T1044] usb 2-1: config 0 interface 0 has no altsetting 0 [ 943.551710][ T1044] usb 2-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 943.591914][ T1044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.626126][ T1044] usb 2-1: config 0 descriptor?? [ 944.073178][ T1044] usbhid 2-1:0.0: can't add hid device: -71 [ 944.111325][ T1044] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 944.141046][ T1044] usb 2-1: USB disconnect, device number 74 [ 944.315796][T19294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.326943][T19294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.439763][T19298] loop2: detected capacity change from 0 to 7 [ 944.464978][T19298] Dev loop2: unable to read RDB block 7 [ 944.477429][T19298] loop2: AHDI p1 p2 p3 [ 944.488263][T19298] loop2: partition table partially beyond EOD, truncated [ 944.511974][T19298] loop2: p1 start 1601398130 is beyond EOD, truncated [ 944.530003][T19298] loop2: p2 start 1702059890 is beyond EOD, truncated [ 944.549568][ T5200] Dev loop2: unable to read RDB block 7 [ 944.561011][ T5200] loop2: AHDI p1 p2 p3 [ 944.590108][ T5200] loop2: partition table partially beyond EOD, truncated [ 944.601960][ T5200] loop2: p1 start 1601398130 is beyond EOD, truncated [ 944.608910][ T5200] loop2: p2 start 1702059890 is beyond EOD, truncated [ 945.103224][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3299'. [ 945.142131][T19318] bridge: RTM_NEWNEIGH with invalid ether address [ 946.001764][ T5917] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 946.181840][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 946.191455][ T5917] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 946.212204][ T5917] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 946.233985][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 946.262007][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 946.284984][ T5917] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 946.354577][ T5917] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 946.381974][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.660237][ T5917] usb 3-1: GET_CAPABILITIES returned 0 [ 946.692433][ T5917] usbtmc 3-1:16.0: can't read capabilities [ 946.973641][T19333] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 946.980347][T19342] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 946.980528][ T5917] usb 3-1: USB disconnect, device number 54 [ 947.428272][T19351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3308'. [ 947.450245][T19351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3308'. [ 947.572957][T19354] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3309'. [ 948.351878][ T1044] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 948.384376][T18831] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 948.537651][ T1044] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 948.565185][ T1044] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 948.593051][ T1044] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 948.597706][T18831] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 948.607266][ T1044] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 948.629074][ T1044] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 948.659777][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3315'. [ 948.697504][T19376] bridge: RTM_NEWNEIGH with invalid ether address [ 948.759476][T18831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.101233][T18831] usb 3-1: Product: syz [ 949.120683][T18831] usb 3-1: Manufacturer: syz [ 949.147400][ T1044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.172164][ T1044] usb 6-1: Product: syz [ 949.181986][ T1044] usb 6-1: Manufacturer: syz [ 949.191631][T18831] usb 3-1: SerialNumber: syz [ 949.206761][ T1044] usb 6-1: SerialNumber: syz [ 949.209266][T18831] usb 3-1: config 0 descriptor?? [ 949.327447][T19366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 949.556863][T19366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 949.585204][T19366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 950.054232][T19366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.082988][T19366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.199273][T19382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3317'. [ 950.459702][T18831] usb 3-1: f81604_read: reg: 100e failed: -EPROTO [ 950.499569][T18831] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 950.512486][T19366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 950.519887][T19366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 950.546632][T18831] usb 3-1: USB disconnect, device number 55 [ 950.596897][T18831] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 950.747121][ T5495] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 950.747365][ T1044] cdc_ncm 6-1:1.0: failed to get mac address [ 950.772717][ T1044] cdc_ncm 6-1:1.0: bind() failure [ 950.844426][T18831] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 950.845521][ T1044] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 950.934589][ T1044] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 950.984212][ T1044] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 951.070455][ T1044] usb 6-1: USB disconnect, device number 65 [ 951.724200][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 952.051740][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 952.100212][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.196744][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 952.231113][ T24] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 952.391030][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.424114][ T24] usb 3-1: Product: syz [ 952.432669][ T24] usb 3-1: Manufacturer: syz [ 952.461961][ T24] usb 3-1: SerialNumber: syz [ 952.492272][ T24] usb 3-1: config 0 descriptor?? [ 952.942809][T19401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.984101][T19401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.369359][ T24] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 954.440915][ T24] usb 3-1: USB disconnect, device number 56 [ 954.458749][T19416] lo: entered promiscuous mode [ 954.516977][T19416] lo: entered allmulticast mode [ 954.532676][T19444] loop2: detected capacity change from 0 to 7 [ 954.550204][T10586] Dev loop2: unable to read RDB block 7 [ 954.571184][T10586] loop2: AHDI p1 p2 p3 [ 954.588712][T10586] loop2: partition table partially beyond EOD, truncated [ 954.614442][T10586] loop2: p1 start 1601398130 is beyond EOD, truncated [ 954.623901][T10586] loop2: p2 start 1702059890 is beyond EOD, truncated [ 954.636895][T19444] Dev loop2: unable to read RDB block 7 [ 954.652408][T19444] loop2: AHDI p1 p2 p3 [ 954.682377][T19444] loop2: partition table partially beyond EOD, truncated [ 954.706762][ T5922] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 954.720985][T19444] loop2: p1 start 1601398130 is beyond EOD, truncated [ 954.731515][T19444] loop2: p2 start 1702059890 is beyond EOD, truncated [ 954.855261][ T5922] usb 2-1: device descriptor read/64, error -71 [ 955.131906][ T5922] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 955.221998][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 955.308267][ T5917] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 955.331906][ T5922] usb 2-1: device descriptor read/64, error -71 [ 955.379956][T19465] nfs: Unknown parameter '' [ 955.412660][ T24] usb 5-1: too many configurations: 137, using maximum allowed: 8 [ 955.449265][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 955.452275][ T5922] usb usb2-port1: attempt power cycle [ 955.459016][ T5917] usb 3-1: device descriptor read/64, error -71 [ 955.480930][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.507605][ T24] usb 5-1: Product: syz [ 955.533910][ T24] usb 5-1: Manufacturer: syz [ 955.539775][ T24] usb 5-1: SerialNumber: syz [ 955.612605][T18831] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 955.742850][ T5917] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 955.784443][T18831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.804628][T18831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.834783][T18831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 955.861930][T18831] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 955.882100][T18831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.882281][ T5917] usb 3-1: device descriptor read/64, error -71 [ 955.886705][T18831] usb 6-1: config 0 descriptor?? [ 955.979412][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 955.979705][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 956.002626][ T5917] usb usb3-port1: attempt power cycle [ 956.202384][ T5922] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 956.316621][T18831] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 956.344755][ T5922] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 956.361890][ T5917] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 956.385617][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.425383][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.442192][ T5922] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 956.466997][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.495019][ T5922] usb 2-1: config 0 descriptor?? [ 956.502735][ T5917] usb 3-1: device descriptor read/8, error -71 [ 956.575493][ T1044] usb 6-1: USB disconnect, device number 66 [ 956.764132][ T5917] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 956.802934][ T5917] usb 3-1: device descriptor read/8, error -71 [ 956.917298][T19489] loop2: detected capacity change from 0 to 7 [ 956.927370][T19489] Dev loop2: unable to read RDB block 7 [ 956.935049][T19489] loop2: AHDI p1 p2 p3 [ 956.942983][ T5917] usb usb3-port1: unable to enumerate USB device [ 956.943332][T19489] loop2: partition table partially beyond EOD, [ 956.944745][ T5922] petalynx 0003:18B1:0037.004C: collection stack underflow [ 956.965249][T19489] truncated [ 956.969095][T19489] loop2: p1 start 1601398130 is beyond EOD, truncated [ 956.978483][ T5922] petalynx 0003:18B1:0037.004C: item 0 4 0 12 parsing failed [ 956.987926][T19489] loop2: p2 start 1702059890 is beyond EOD, truncated [ 956.995997][ T5922] petalynx 0003:18B1:0037.004C: parse failed [ 957.002711][ T5922] petalynx 0003:18B1:0037.004C: probe with driver petalynx failed with error -22 [ 957.197695][T19481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.232324][T19481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.254427][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3339'. [ 957.264347][T19481] netlink: 'syz.1.3339': attribute type 1 has an invalid length. [ 957.284499][T19481] input: syz0 as /devices/virtual/input/input89 [ 957.822943][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 957.850920][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 957.876836][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 957.894825][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 957.912943][ T24] usb 5-1: USB disconnect, device number 85 [ 958.832931][T19516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3348'. [ 958.901874][ T5983] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 959.033870][T16942] usb 2-1: USB disconnect, device number 78 [ 959.171745][ T5918] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 959.391594][ T5918] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 959.422100][ T5918] usb 5-1: config 179 has no interface number 0 [ 959.554275][ T5918] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 959.567113][ T5918] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 959.577714][ T5918] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 959.591939][ T5918] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 959.605514][ T5918] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 959.632012][ T5918] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 959.712992][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.739441][T19517] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 959.761154][ T5918] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 959.795753][ T5918] xpad 5-1:179.65: probe with driver xpad failed with error -90 [ 959.843618][T19527] IPv6: NLM_F_REPLACE set, but no existing node found! [ 960.092809][ T5918] usb 5-1: USB disconnect, device number 86 [ 960.862421][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3353'. [ 960.881971][ T5918] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 960.982497][T19537] syzkaller1: entered promiscuous mode [ 960.988257][T19537] syzkaller1: entered allmulticast mode [ 961.069973][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.081838][ T5918] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 961.108887][ T5918] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 961.125496][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 961.134489][ T5918] usb 5-1: SerialNumber: syz [ 961.406138][ T5918] usb 5-1: 0:2 : does not exist [ 961.412994][ T5918] usb 5-1: unit 5: unexpected type 0x09 [ 961.485696][ T5918] usb 5-1: USB disconnect, device number 87 [ 961.554962][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 961.833633][T19553] hub 9-0:1.0: USB hub found [ 961.846019][T19553] hub 9-0:1.0: 1 port detected [ 961.937363][T19557] netlink: 'syz.2.3357': attribute type 4 has an invalid length. [ 962.356263][ T5918] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 962.591902][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 962.606542][ T5918] usb 3-1: config 0 has no interfaces? [ 962.659252][ T5918] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 962.669043][ T5918] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 962.701762][ T5918] usb 3-1: Manufacturer: syz [ 962.739210][ T5918] usb 3-1: config 0 descriptor?? [ 962.787086][T19571] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 962.866234][T19572] hsr0: entered promiscuous mode [ 963.919651][T19590] netlink: 'syz.1.3367': attribute type 10 has an invalid length. [ 963.947291][T19590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.947322][T19590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.998251][ T5918] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 964.005829][T19590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.005852][T19590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.144312][ T5918] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 964.144334][ T5918] usb 6-1: config 0 has no interface number 0 [ 964.144352][ T5918] usb 6-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 964.144379][ T5918] usb 6-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.144395][ T5918] usb 6-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.144409][ T5918] usb 6-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 964.144425][ T5918] usb 6-1: config 0 interface 16 has no altsetting 0 [ 964.144447][ T5918] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 964.144461][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.147823][ T5918] usb 6-1: config 0 descriptor?? [ 964.562271][ T5918] usbhid 6-1:0.16: can't add hid device: -71 [ 964.571059][ T5918] usbhid 6-1:0.16: probe with driver usbhid failed with error -71 [ 964.585934][ T5918] usb 6-1: USB disconnect, device number 67 [ 964.633951][ T5922] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 964.793961][ T5922] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 964.802620][ T5922] usb 2-1: config 1 has no interface number 0 [ 964.810147][ T5922] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 964.822017][ T5922] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 964.833672][ T5922] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.847109][ T5922] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 964.857307][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.865578][ T5922] usb 2-1: Product: syz [ 964.869971][ T5922] usb 2-1: Manufacturer: syz [ 964.877710][ T5922] usb 2-1: SerialNumber: syz [ 964.894749][T19592] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 965.121857][ T30] audit: type=1800 audit(1766225083.891:1170): pid=19592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3368" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=865 res=0 errno=0 [ 965.175020][T19592] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 965.230908][T19599] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 965.237476][T19599] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 965.288089][T19599] vhci_hcd vhci_hcd.0: Device attached [ 965.308655][T19602] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11) [ 965.315611][T19602] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 965.411046][ T5922] usb 2-1: Incompatible driver and firmware versions [ 965.429027][ T5922] usb 2-1: USB disconnect, device number 79 [ 965.453660][T19602] vhci_hcd vhci_hcd.0: Device attached [ 965.469381][ T1044] usb 3-1: USB disconnect, device number 61 [ 965.528149][T19599] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(14) [ 965.534812][T19599] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 965.543270][ T8057] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 965.588544][T19599] vhci_hcd vhci_hcd.0: Device attached [ 965.604485][T19607] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(13) [ 965.611310][T19607] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 965.638194][T19607] vhci_hcd vhci_hcd.0: Device attached [ 965.649769][T19599] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(16) [ 965.656781][T19599] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 965.679216][T19602] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18) [ 965.685965][T19602] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 965.703606][T19607] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 965.709212][T19602] vhci_hcd vhci_hcd.0: Device attached [ 965.742172][T19599] vhci_hcd vhci_hcd.0: Device attached [ 965.884435][T19599] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 965.902740][T19599] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 965.923973][T19610] vhci_hcd: connection closed [ 965.925051][T19613] vhci_hcd: connection closed [ 965.932872][ T5981] vhci_hcd vhci_hcd.5: stop threads [ 965.943789][ T5981] vhci_hcd vhci_hcd.5: release socket [ 966.017826][ T5981] vhci_hcd vhci_hcd.5: disconnect device [ 966.025544][ T5981] vhci_hcd vhci_hcd.5: stop threads [ 966.031117][ T5981] vhci_hcd vhci_hcd.5: release socket [ 966.044287][T19603] vhci_hcd: connection closed [ 966.044539][T19600] vhci_hcd: connection reset by peer [ 966.056926][T19605] vhci_hcd: connection closed [ 966.057160][T19608] vhci_hcd: connection closed [ 966.063309][ T5981] vhci_hcd vhci_hcd.5: disconnect device [ 966.082738][ T5981] vhci_hcd vhci_hcd.5: stop threads [ 966.093865][ T5981] vhci_hcd vhci_hcd.5: release socket [ 966.130925][ T5981] vhci_hcd vhci_hcd.5: disconnect device [ 966.135223][T19602] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(0) [ 966.143154][T19602] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 966.176812][ T5981] vhci_hcd vhci_hcd.5: stop threads [ 966.189157][ T5981] vhci_hcd vhci_hcd.5: release socket [ 966.213048][T19602] vhci_hcd vhci_hcd.0: Device attached [ 966.236963][ T5981] vhci_hcd vhci_hcd.5: disconnect device [ 966.248526][ T5981] vhci_hcd vhci_hcd.5: stop threads [ 966.258877][ T5981] vhci_hcd vhci_hcd.5: release socket [ 966.270418][ T5981] vhci_hcd vhci_hcd.5: disconnect device [ 966.282702][ T5981] vhci_hcd vhci_hcd.5: stop threads [ 966.316484][ T5981] vhci_hcd vhci_hcd.5: release socket [ 966.334566][ T5981] vhci_hcd vhci_hcd.5: disconnect device [ 966.701752][T18831] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 966.749548][T19619] vhci_hcd: connection closed [ 966.749920][ T5981] vhci_hcd vhci_hcd.5: stop threads [ 966.761986][ T5918] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 966.839630][ T5981] vhci_hcd vhci_hcd.5: release socket [ 966.871779][T18831] usb 2-1: Using ep0 maxpacket: 16 [ 966.891491][T18831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.902979][ T5981] vhci_hcd vhci_hcd.5: disconnect device [ 966.916496][T18831] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 966.940616][ T5918] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 966.950580][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.955219][T18831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.968001][ T5918] usb 5-1: Product: syz [ 966.979982][ T5918] usb 5-1: Manufacturer: syz [ 966.998242][T18831] usb 2-1: config 0 descriptor?? [ 967.002083][ T5918] usb 5-1: SerialNumber: syz [ 967.121762][ T5917] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 967.283355][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 967.293142][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 967.306701][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 967.318950][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 967.339376][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 967.350891][ T5917] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 967.370429][ T5917] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 967.432543][T18831] mcp2221 0003:04D8:00DD.004D: unknown main item tag 0x0 [ 967.442068][T18831] mcp2221 0003:04D8:00DD.004D: unknown main item tag 0x0 [ 967.454099][T18831] mcp2221 0003:04D8:00DD.004D: unknown main item tag 0x0 [ 967.469513][T18831] mcp2221 0003:04D8:00DD.004D: item fetching failed at offset 3/5 [ 967.469768][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.478607][T18831] mcp2221 0003:04D8:00DD.004D: can't parse reports [ 967.507707][T18831] mcp2221 0003:04D8:00DD.004D: probe with driver mcp2221 failed with error -22 [ 967.535888][ T5917] usb 6-1: config 0 descriptor?? [ 967.836165][T19631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.853178][T19631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.875420][ T5918] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 967.876261][T19631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.912929][T19631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.927491][ T5917] usb 6-1: USB disconnect, device number 68 [ 967.935293][T18831] usb 2-1: USB disconnect, device number 80 [ 967.959456][ T5918] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 967.993216][ T5918] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 968.011391][ T5918] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 968.036512][ T5918] usb 5-1: USB disconnect, device number 88 [ 968.601822][T16942] IPVS: starting estimator thread 0... [ 968.702283][T19649] IPVS: using max 34 ests per chain, 81600 per kthread [ 968.801843][ T5918] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 968.883683][T19657] netlink: 'syz.5.3385': attribute type 13 has an invalid length. [ 968.893721][T19657] erspan0: refused to change device tx_queue_len [ 968.951696][ T5918] usb 2-1: device descriptor read/64, error -71 [ 968.968152][T19660] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 969.101892][T16942] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 969.191701][ T5918] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 969.266244][T16942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.277104][T16942] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 969.286435][T16942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.312942][T16942] usb 5-1: config 0 descriptor?? [ 969.331143][T16942] pwc: Askey VC010 type 2 USB webcam detected. [ 969.331787][ T5918] usb 2-1: device descriptor read/64, error -71 [ 969.482467][ T5918] usb usb2-port1: attempt power cycle [ 969.733211][T16942] pwc: recv_control_msg error -32 req 02 val 2b00 [ 969.776093][T16942] pwc: recv_control_msg error -32 req 02 val 2700 [ 969.786652][T19655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.833929][T19655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.862019][ T5918] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 969.907508][ T5918] usb 2-1: device descriptor read/8, error -71 [ 970.152541][ T5918] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 970.192945][ T5918] usb 2-1: device descriptor read/8, error -71 [ 970.304772][ T5918] usb usb2-port1: unable to enumerate USB device [ 970.603751][T16942] pwc: recv_control_msg error -71 req 02 val 2c00 [ 970.631018][T16942] pwc: recv_control_msg error -71 req 04 val 1000 [ 970.649082][T16942] pwc: recv_control_msg error -71 req 04 val 1300 [ 970.664952][T19683] netlink: 'syz.6.3391': attribute type 1 has an invalid length. [ 970.668709][T16942] pwc: recv_control_msg error -71 req 04 val 1400 [ 970.682917][ T8057] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 970.703137][T16942] pwc: recv_control_msg error -71 req 02 val 2000 [ 970.729016][T16942] pwc: recv_control_msg error -71 req 02 val 2100 [ 970.737755][T16942] pwc: recv_control_msg error -71 req 04 val 1500 [ 970.749842][T16942] pwc: recv_control_msg error -71 req 02 val 2500 [ 970.766403][T16942] pwc: recv_control_msg error -71 req 02 val 2400 [ 970.774852][T16942] pwc: recv_control_msg error -71 req 02 val 2600 [ 970.785176][T16942] pwc: recv_control_msg error -71 req 02 val 2900 [ 970.795832][T16942] pwc: recv_control_msg error -71 req 02 val 2800 [ 970.805462][T16942] pwc: recv_control_msg error -71 req 04 val 1100 [ 970.814002][T16942] pwc: recv_control_msg error -71 req 04 val 1200 [ 970.832486][T18831] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 970.850905][T16942] pwc: Registered as video103. [ 970.864493][T16942] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input91 [ 970.887436][T16942] usb 5-1: USB disconnect, device number 89 [ 970.904645][T19683] 8021q: adding VLAN 0 to HW filter on device bond3 [ 971.029786][T18831] usb 3-1: Using ep0 maxpacket: 16 [ 971.084444][T18831] usb 3-1: config 0 has no interfaces? [ 971.095047][T18831] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 971.116355][T18831] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 971.140506][T18831] usb 3-1: Manufacturer: syz [ 971.176530][T18831] usb 3-1: config 0 descriptor?? [ 971.332140][T16942] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 971.462068][T16942] usb 5-1: device descriptor read/64, error -71 [ 971.483063][T18831] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 971.641764][T18831] usb 6-1: Using ep0 maxpacket: 32 [ 971.649759][T18831] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 971.659839][T18831] usb 6-1: config 0 has no interface number 0 [ 971.666942][T18831] usb 6-1: config 0 interface 12 has no altsetting 0 [ 971.679098][T18831] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 971.689628][T18831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.702343][T18831] usb 6-1: Product: syz [ 971.706655][T18831] usb 6-1: Manufacturer: syz [ 971.711538][T18831] usb 6-1: SerialNumber: syz [ 971.711732][T16942] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 971.734063][T18831] usb 6-1: config 0 descriptor?? [ 971.881920][T16942] usb 5-1: device descriptor read/64, error -71 [ 971.950784][T19703] loop9: detected capacity change from 0 to 7 [ 971.974105][T19703] Dev loop9: unable to read RDB block 7 [ 971.974141][ T5922] usb usb44-port1: attempt power cycle [ 971.980027][T19703] loop9: unable to read partition table [ 971.980292][T19703] loop9: partition table beyond EOD, truncated [ 972.015899][T16942] usb usb5-port1: attempt power cycle [ 972.039599][T19703] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 972.120534][T18831] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 972.131245][T18831] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 972.160263][T18831] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 972.168529][T18831] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 972.221510][T19709] sctp: [Deprecated]: syz.5.3397 (pid 19709) Use of int in max_burst socket option. [ 972.221510][T19709] Use struct sctp_assoc_value instead [ 972.238498][T18831] usb 6-1: USB disconnect, device number 69 [ 972.362421][T16942] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 972.379104][T19700] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 972.397344][T16942] usb 5-1: device descriptor read/8, error -71 [ 972.406722][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3396'. [ 972.416425][T19700] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3396'. [ 972.571824][T18831] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 972.583706][ T5922] usb usb44-port1: unable to enumerate USB device [ 972.641803][T16942] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 972.703470][T16942] usb 5-1: device descriptor read/8, error -71 [ 972.753506][T18831] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 972.764660][T18831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.786235][T18831] usb 6-1: config 0 descriptor?? [ 972.808665][T18831] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 972.816416][T16942] usb usb5-port1: unable to enumerate USB device [ 972.986859][T19719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3399'. [ 973.009904][T18831] gspca_cpia1: usb_control_msg 05, error -71 [ 973.019067][T16942] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 973.029345][T18831] gspca_cpia1: usb_control_msg 01, error -71 [ 973.038756][T18831] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 973.047939][T16942] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 973.062667][T18831] usb 6-1: USB disconnect, device number 70 [ 973.140443][T19723] fido_id[19723]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 973.245293][T16942] usb 3-1: USB disconnect, device number 62 [ 973.289074][T19727] fuse: Bad value for 'fd' [ 973.952693][T16942] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 974.111842][T16942] usb 6-1: Using ep0 maxpacket: 16 [ 974.123610][T16942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 974.173524][T16942] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 974.202033][T16942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.228248][T16942] usb 6-1: Product: syz [ 974.241706][T16942] usb 6-1: Manufacturer: syz [ 974.257271][T16942] usb 6-1: SerialNumber: syz [ 974.294036][T16942] usb 6-1: config 0 descriptor?? [ 974.309180][T16942] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 974.335647][T16942] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 974.578069][T19733] fuse: Unknown parameter '' [ 974.680980][T19748] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 974.687738][T19748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 974.696653][T19748] vhci_hcd vhci_hcd.0: Device attached [ 974.707323][T19748] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(15) [ 974.714154][T19748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 974.722646][T19748] vhci_hcd vhci_hcd.0: Device attached [ 974.739380][T19748] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(17) [ 974.746276][T19748] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 974.762290][T19748] vhci_hcd vhci_hcd.0: Device attached [ 974.773882][T19748] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(19) [ 974.780575][T19748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 974.815294][T19748] vhci_hcd vhci_hcd.0: Device attached [ 974.874271][T19758] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(22) [ 974.881200][T19758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 974.965938][T19758] vhci_hcd vhci_hcd.0: Device attached [ 974.971940][ T5918] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 975.001927][T19748] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(21) [ 975.008608][T19748] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 975.042340][T19748] vhci_hcd vhci_hcd.0: Device attached [ 975.077672][T19748] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 975.119132][T19748] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 975.192166][T19748] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(29) [ 975.198832][T19748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 975.201284][T19758] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 975.226521][T19748] vhci_hcd vhci_hcd.0: Device attached [ 975.283584][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3408'. [ 975.334537][T19758] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(37) [ 975.341166][T19758] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 975.378607][ T30] audit: type=1326 audit(1766225094.141:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.1.3409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f777ab8f749 code=0x0 [ 975.430392][T19758] vhci_hcd vhci_hcd.0: Device attached [ 975.439764][T19763] vhci_hcd: connection closed [ 975.440024][ T3561] vhci_hcd vhci_hcd.6: stop threads [ 975.441126][T19759] vhci_hcd: connection closed [ 975.444944][T19761] vhci_hcd: connection closed [ 975.445279][ T3561] vhci_hcd vhci_hcd.6: release socket [ 975.473165][T19756] vhci_hcd: connection closed [ 975.475365][T19754] vhci_hcd: connection closed [ 975.480455][T19752] vhci_hcd: connection closed [ 975.485806][T19750] vhci_hcd: connection reset by peer [ 975.501810][ T3561] vhci_hcd vhci_hcd.6: disconnect device [ 975.515430][ T30] audit: type=1800 audit(1766225094.281:1172): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3409" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 975.541282][T19776] loop2: detected capacity change from 0 to 7 [ 975.551214][T19776] Dev loop2: unable to read RDB block 7 [ 975.553601][ T3561] vhci_hcd vhci_hcd.6: stop threads [ 975.557408][T19776] loop2: AHDI p1 p2 p3 [ 975.575644][ T3561] vhci_hcd vhci_hcd.6: release socket [ 975.575648][T19776] loop2: partition table partially beyond EOD, [ 975.578544][ T3561] vhci_hcd vhci_hcd.6: disconnect device [ 975.582642][T19776] truncated [ 975.602239][T19776] loop2: p1 start 1601398130 is beyond EOD, truncated [ 975.612699][ T3561] vhci_hcd vhci_hcd.6: stop threads [ 975.613246][T19776] loop2: p2 start 1702059890 is beyond EOD, truncated [ 975.642700][ T3561] vhci_hcd vhci_hcd.6: release socket [ 975.654726][ T3561] vhci_hcd vhci_hcd.6: disconnect device [ 975.670690][ T3561] vhci_hcd vhci_hcd.6: stop threads [ 975.684731][ T3561] vhci_hcd vhci_hcd.6: release socket [ 975.711315][ T3561] vhci_hcd vhci_hcd.6: disconnect device [ 975.748801][ T3561] vhci_hcd vhci_hcd.6: stop threads [ 975.773538][T16942] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 975.787097][ T3561] vhci_hcd vhci_hcd.6: release socket [ 975.806543][ T3561] vhci_hcd vhci_hcd.6: disconnect device [ 975.827380][ T3561] vhci_hcd vhci_hcd.6: stop threads [ 975.845747][ T3561] vhci_hcd vhci_hcd.6: release socket [ 975.866909][ T3561] vhci_hcd vhci_hcd.6: disconnect device [ 975.882707][ T3561] vhci_hcd vhci_hcd.6: stop threads [ 975.902736][ T3561] vhci_hcd vhci_hcd.6: release socket [ 975.916920][ T3561] vhci_hcd vhci_hcd.6: disconnect device [ 976.035308][T19769] vhci_hcd: connection closed [ 976.035636][ T3654] vhci_hcd vhci_hcd.6: stop threads [ 976.035677][ T3654] vhci_hcd vhci_hcd.6: release socket [ 976.035796][ T3654] vhci_hcd vhci_hcd.6: disconnect device [ 976.169216][T16942] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 976.286741][T16942] em28xx 6-1:0.0: board has no eeprom [ 976.391710][T16942] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 976.421189][T16942] em28xx 6-1:0.0: dvb set to bulk mode. [ 976.437116][ T5922] em28xx 6-1:0.0: Binding DVB extension [ 976.458453][T16942] usb 6-1: USB disconnect, device number 71 [ 976.565011][T16942] em28xx 6-1:0.0: Disconnecting em28xx [ 976.648314][ T5922] em28xx 6-1:0.0: Registering input extension [ 976.668980][T16942] em28xx 6-1:0.0: Closing input extension [ 976.743497][T16942] em28xx 6-1:0.0: Freeing device [ 976.881804][ T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 977.045819][T19801] xt_hashlimit: invalid interval [ 977.063727][ T24] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 977.073643][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.103271][ T24] usb 2-1: config 0 descriptor?? [ 977.121734][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 977.241815][ T5917] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 977.327015][ T24] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 977.402543][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 977.409547][ T5917] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 977.424478][ T5917] usb 5-1: config 0 has no interface number 0 [ 977.440201][ T5917] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 977.475166][ T5917] usb 5-1: config 0 interface 85 has no altsetting 0 [ 977.500034][ T5917] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 977.518340][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.530457][ T24] gspca_cpia1: usb_control_msg 02, error -32 [ 977.536889][ T5917] usb 5-1: Product: syz [ 977.541415][ T5917] usb 5-1: Manufacturer: syz [ 977.546861][ T5917] usb 5-1: SerialNumber: syz [ 977.559036][ T5917] usb 5-1: config 0 descriptor?? [ 977.739730][ T24] gspca_cpia1: usb_control_msg 02, error -71 [ 977.756759][ T24] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 977.779763][ T24] usb 2-1: USB disconnect, device number 85 [ 977.993192][T19827] loop2: detected capacity change from 0 to 7 [ 978.031167][T18626] Dev loop2: unable to read RDB block 7 [ 978.054138][T18626] loop2: AHDI p1 p2 p3 [ 978.058519][T18626] loop2: partition table partially beyond EOD, truncated [ 978.069239][T18626] loop2: p1 start 1601398130 is beyond EOD, truncated [ 978.077298][T18626] loop2: p2 start 1702059890 is beyond EOD, truncated [ 978.089412][T19827] Dev loop2: unable to read RDB block 7 [ 978.096649][T19827] loop2: AHDI p1 p2 p3 [ 978.101095][T19827] loop2: partition table partially beyond EOD, truncated [ 978.114467][T19827] loop2: p1 start 1601398130 is beyond EOD, truncated [ 978.123499][T19827] loop2: p2 start 1702059890 is beyond EOD, truncated [ 978.247495][ T5917] appletouch 5-1:0.85: Geyser mode initialized. [ 978.302457][ T5917] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input93 [ 978.334767][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3423'. [ 978.931935][ T24] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 979.082189][ T24] usb 3-1: Invalid ep0 maxpacket: 64 [ 979.163454][T16942] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 979.231896][ T24] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 979.332004][T16942] usb 2-1: Using ep0 maxpacket: 32 [ 979.365237][T16942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.377381][T16942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.390381][T16942] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 979.391714][ T24] usb 3-1: Invalid ep0 maxpacket: 64 [ 979.402235][T16942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.417235][T19865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.426575][ T24] usb usb3-port1: attempt power cycle [ 979.430772][T16942] usb 2-1: config 0 descriptor?? [ 979.432646][T19865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.651957][ T5917] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 979.791919][ T24] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 979.804141][ T5917] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 979.813242][ T24] usb 3-1: Invalid ep0 maxpacket: 64 [ 979.832432][ T5917] usb 6-1: config 0 has no interface number 0 [ 979.838674][ T5917] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 979.861111][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.863730][T16942] usbhid 2-1:0.0: can't add hid device: -71 [ 979.895745][T16942] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 979.921751][T16942] usb 2-1: USB disconnect, device number 86 [ 979.926075][ T5917] usb 6-1: config 0 descriptor?? [ 979.946594][ T5917] cp210x 6-1:0.32: cp210x converter detected [ 979.967208][ T24] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 979.992463][ T24] usb 3-1: Invalid ep0 maxpacket: 64 [ 980.005052][ T24] usb usb3-port1: unable to enumerate USB device [ 980.015721][ T5922] usb 5-1: USB disconnect, device number 94 [ 980.050318][ T5922] appletouch 5-1:0.85: input: appletouch disconnected [ 980.093554][ T5918] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 980.146618][ T5917] cp210x 6-1:0.32: failed to get vendor val 0x000e size 3: -121 [ 980.159157][ T5917] usb 6-1: cp210x converter now attached to ttyUSB0 [ 980.245195][T19870] IPv6: addrconf: prefix option has invalid lifetime [ 980.349237][T16942] usb 6-1: USB disconnect, device number 72 [ 980.368021][T16942] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 980.386978][T16942] cp210x 6-1:0.32: device disconnected [ 980.531767][T18831] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 980.713527][T19870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.724839][ T5917] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 980.736748][T19870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.751105][T19870] IPv6: addrconf: prefix option has invalid lifetime [ 980.791350][T18831] usb 5-1: unable to get BOS descriptor or descriptor too short [ 980.808410][T18831] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 980.824132][T18831] usb 5-1: can't read configurations, error -71 [ 980.891792][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 980.906371][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.943131][ T5917] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 980.954118][ T30] audit: type=1326 audit(1766225099.721:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19880 comm="syz.5.3439" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53afd8f749 code=0x0 [ 980.955701][ T5917] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 981.005558][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.031221][ T5917] usb 2-1: config 0 descriptor?? [ 981.372782][ T1044] usb usb46-port1: attempt power cycle [ 981.388122][T19874] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 981.502950][T16942] usb 2-1: USB disconnect, device number 87 [ 981.616413][T19890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3440'. [ 981.876561][T19894] sctp: [Deprecated]: syz.5.3443 (pid 19894) Use of int in max_burst socket option. [ 981.876561][T19894] Use struct sctp_assoc_value instead [ 981.962845][ T1044] usb usb46-port1: unable to enumerate USB device [ 982.141764][T18831] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 982.311746][T18831] usb 6-1: Using ep0 maxpacket: 16 [ 982.367225][T19905] netlink: 'syz.1.3445': attribute type 10 has an invalid length. [ 982.387592][T19905] team0: Port device dummy0 added [ 982.395508][T19905] netlink: 'syz.1.3445': attribute type 10 has an invalid length. [ 982.418322][T18831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.482260][T18831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.496210][T19905] team0: Port device dummy0 removed [ 982.555991][T19905] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 982.634885][T18831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 982.651361][T18831] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 982.814398][T18831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.843860][T18831] usb 6-1: config 0 descriptor?? [ 983.902138][T18831] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.004F/input/input95 [ 983.985922][T18831] microsoft 0003:045E:07DA.004F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 984.086196][T18831] usb 6-1: USB disconnect, device number 73 [ 984.152198][T19919] fido_id[19919]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 984.591697][ T5918] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 984.741776][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 984.752124][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.771041][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.793127][T19931] loop2: detected capacity change from 0 to 7 [ 984.804639][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 984.810560][T19931] Dev loop2: unable to read RDB block 7 [ 984.825162][T19931] loop2: AHDI p1 p2 p3 [ 984.829624][T19931] loop2: partition table partially beyond EOD, truncated [ 984.840940][T19931] loop2: p1 start 1601398130 is beyond EOD, truncated [ 984.849981][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.850107][T19931] loop2: p2 start 1702059890 is beyond EOD, truncated [ 984.897679][ T5918] usb 3-1: config 0 descriptor?? [ 985.061774][T16942] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 985.251944][T16942] usb 6-1: Using ep0 maxpacket: 8 [ 985.260431][T16942] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 985.271509][T16942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.325275][T19949] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 19949 comm: syz.1.3454) [ 985.353765][T16942] pvrusb2: Hardware description: Terratec Grabster AV400 [ 985.361311][T16942] pvrusb2: ********** [ 985.373596][ T30] audit: type=1800 audit(1766225104.141:1174): pid=19949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3454" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=100260 res=0 errno=0 [ 985.408688][ T5918] logitech 0003:046D:C29C.0050: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 985.423965][T16942] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 985.443553][T16942] pvrusb2: Important functionality might not be entirely working. [ 985.451892][T16942] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 985.471643][T16942] pvrusb2: ********** [ 985.524961][ T2345] pvrusb2: Invalid write control endpoint [ 985.741241][ T2345] pvrusb2: Invalid write control endpoint [ 985.768384][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 985.793396][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 985.823899][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 985.915588][ T5918] logitech 0003:046D:C29C.0050: no inputs found [ 985.917284][ T2345] pvrusb2: Device being rendered inoperable [ 985.930696][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 985.952859][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 985.971419][ T2345] pvrusb2: Attached sub-driver cx25840 [ 985.982290][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 985.984778][ T5918] usb 3-1: USB disconnect, device number 67 [ 986.005377][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 987.316837][T18831] usb 6-1: USB disconnect, device number 74 [ 987.371769][ T5918] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 987.521807][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 987.532493][ T5918] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 987.542683][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.558265][ T5918] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 987.580316][ T5918] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 987.598552][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.620784][ T5918] usb 5-1: Product: 賃ꃧ福蔝ꗑ杄㑄쬜⛻嗗驹굔砢炢懶㻑䂡ꜟ⠕Ň耥ಟ瞆稅趾擼鑃ﭓ䤆ℹꊚ♆䉕塏⠢ધ粇葒࿊䉷䴡䈘︚蜽ꂧ [ 987.649959][ T5918] usb 5-1: Manufacturer: ⥰Ἣựħᐦ呂ꉊἕ胕鬠龄濁擙ᦆ움妾띧퀒⌛黜依ሺ娋袂ꈗ貦碘〛➤樢蠼ᱩᾟ紾⾠㫫쒾븖᛿劽碐駃㜍딚觯៳睡ㅆ낞Ƹﶓ룓럨緜揅钵畾쎯쏪玒殜㙙莮ช鱾訤 [ 987.680547][ T5918] usb 5-1: SerialNumber: 葕ጷ蠎돦寥䞍厹褜 [ 987.750551][T19996] fuse: Unknown parameter '00000000000000000003' [ 987.793539][T19997] batman_adv: batadv0: Adding interface: dummy0 [ 987.800144][T19997] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.827184][T19997] batman_adv: batadv0: Interface activated: dummy0 [ 987.853178][T19997] batadv0: mtu less than device minimum [ 987.863211][T19997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 987.876093][T19997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 987.888489][T19997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 987.900756][T19997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 987.913377][T19997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 987.925658][T19997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 987.937704][T19997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 987.950631][T19997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 987.963956][T19997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 988.008193][ T5918] usb 5-1: 0:2 : does not exist [ 988.066993][ T5918] usb 5-1: USB disconnect, device number 97 [ 988.405937][T20003] fuse: Unknown parameter 'dont_appraise' [ 988.702085][ T5918] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 988.883876][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 988.894384][ T5918] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 988.904962][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.916055][ T5918] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 988.934261][ T5918] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 988.955281][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.983096][ T5918] usb 5-1: Product: syz [ 988.997982][ T5918] usb 5-1: Manufacturer: syz [ 989.008033][ T5918] usb 5-1: SerialNumber: syz [ 989.091940][T18831] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 989.244473][ T5918] usb 5-1: 0:2 : does not exist [ 989.257190][T18831] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 989.266071][T18831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.278528][T18831] usb 3-1: config 0 has no interface number 0 [ 989.285208][T18831] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 989.300114][T18831] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 989.303378][ T5918] usb 5-1: USB disconnect, device number 98 [ 989.471692][T18831] usb 3-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 989.495502][T18831] usb 3-1: config 0 interface 113 has no altsetting 0 [ 989.517960][T18831] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 989.535279][T18831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.558616][T18831] usb 3-1: Product: syz [ 989.571911][T18831] usb 3-1: Manufacturer: syz [ 989.587537][T18831] usb 3-1: SerialNumber: syz [ 989.624620][T18831] usb 3-1: config 0 descriptor?? [ 989.643873][T18831] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 989.712397][T20009] vlan2: entered allmulticast mode [ 989.725125][T20009] gretap0: entered allmulticast mode [ 989.846332][T18831] usb 3-1: USB disconnect, device number 68 [ 990.281880][T18831] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 990.431747][T18831] usb 5-1: Using ep0 maxpacket: 32 [ 990.444172][T18831] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 990.454085][T18831] usb 5-1: config 0 has no interface number 0 [ 990.462688][T18831] usb 5-1: config 0 interface 209 has no altsetting 0 [ 990.478436][T18831] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 990.491075][T18831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.500422][T18831] usb 5-1: Product: syz [ 990.506106][T18831] usb 5-1: Manufacturer: syz [ 990.511104][T18831] usb 5-1: SerialNumber: syz [ 990.519104][T18831] usb 5-1: config 0 descriptor?? [ 990.912092][ T1089] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 991.055133][T20026] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 991.069158][T20026] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 991.078125][T20026] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 991.085543][T20026] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 991.095263][T20026] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 991.105396][T20026] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 991.114176][T20026] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 991.128204][T20026] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 991.824306][T20048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3485'. [ 991.838823][T20048] ip6gretap0: entered promiscuous mode [ 991.848040][T20048] ip6gretap0: left promiscuous mode [ 992.421716][T17963] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 992.484262][ T5150] Bluetooth: hci0: command 0x0c1a tx timeout [ 992.582422][T17963] usb 3-1: Using ep0 maxpacket: 32 [ 992.590783][T17963] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 992.619556][T17963] usb 3-1: config 0 has no interface number 0 [ 992.640000][T17963] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 992.670582][T17963] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 992.704664][T17963] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 992.725313][T17963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.744377][T17963] usb 3-1: Product: syz [ 992.773709][T17963] usb 3-1: Manufacturer: syz [ 992.786414][T17963] usb 3-1: SerialNumber: syz [ 992.794444][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3482'. [ 992.838399][T17963] usb 3-1: config 0 descriptor?? [ 993.129402][T18831] usb 5-1: USB disconnect, device number 99 [ 993.156728][ T5150] Bluetooth: hci4: command 0x0c1a tx timeout [ 993.157415][T20061] Bluetooth: hci2: command 0x0c1a tx timeout [ 993.170208][T20061] Bluetooth: hci3: command 0x0c1a tx timeout [ 993.263302][T16942] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 993.285026][T20065] netlink: 'syz.4.3489': attribute type 13 has an invalid length. [ 993.342645][T17963] radio-si470x 3-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 993.354328][T17963] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 993.411247][T17963] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 993.448654][T17963] usb 3-1: USB disconnect, device number 69 [ 993.456070][T16942] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 993.484614][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.491285][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.536989][T16942] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 993.549993][T16942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.626902][T16942] usb 2-1: config 0 descriptor?? [ 993.637998][T16942] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 993.924103][T20075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3487'. [ 994.120993][T20082] binder: BINDER_SET_CONTEXT_MGR already set [ 994.127438][T20082] binder: 20080:20082 ioctl 4018620d 2000000002c0 returned -16 [ 994.511866][T16942] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 994.682290][T16942] usb 6-1: Using ep0 maxpacket: 16 [ 994.692497][T16942] usb 6-1: config 0 has no interfaces? [ 994.698600][T16942] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 994.708945][T16942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.736581][T16942] usb 6-1: config 0 descriptor?? [ 994.963397][ T5879] usb 6-1: USB disconnect, device number 75 [ 995.262526][T20062] Bluetooth: hci2: command 0x0c1a tx timeout [ 995.262519][T12888] Bluetooth: hci4: command 0x0c1a tx timeout [ 995.325668][T20097] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 995.720378][T20099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3497'. [ 995.729994][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3497'. [ 995.739921][T20099] netlink: 'syz.4.3497': attribute type 6 has an invalid length. [ 996.233217][ T5879] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 996.268452][T16942] usb 2-1: USB disconnect, device number 88 [ 996.527375][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 996.537278][ T5879] usb 5-1: no configurations [ 996.542595][ T5879] usb 5-1: can't read configurations, error -22 [ 996.842457][T16942] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 997.011725][T16942] usb 2-1: Using ep0 maxpacket: 8 [ 997.024118][T16942] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 997.034939][T16942] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 997.051910][T16942] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 997.086744][T16942] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 997.118310][T16942] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.153793][T16942] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 997.164589][T16942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.334618][T12888] Bluetooth: hci4: command 0x0c1a tx timeout [ 997.344435][T20062] Bluetooth: hci2: command 0x0c1a tx timeout [ 997.427312][T16942] usb 2-1: usb_control_msg returned -32 [ 997.433636][T16942] usbtmc 2-1:16.0: can't read capabilities [ 999.341838][T16942] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 999.407741][T17963] usb 2-1: USB disconnect, device number 89 [ 999.524114][T16942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 999.565528][T16942] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 999.616653][T16942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 999.639046][T16942] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 999.639079][T16942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.639098][T16942] usb 5-1: Product: syz [ 999.639112][T16942] usb 5-1: Manufacturer: syz [ 999.639127][T16942] usb 5-1: SerialNumber: syz [ 999.650212][T16942] usb 5-1: config 0 descriptor?? [ 999.674864][T16942] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1000.516711][T20153] net_ratelimit: 11 callbacks suppressed [ 1000.516745][T20153] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1000.545788][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1000.565243][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1000.575441][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1000.585191][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1000.613917][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1000.624409][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1000.634386][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1000.644537][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1000.654885][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1000.670141][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1000.850438][ T30] audit: type=1326 audit(1766225119.611:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 1000.943333][ T30] audit: type=1326 audit(1766225119.641:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 1001.103557][ T30] audit: type=1326 audit(1766225119.641:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 1001.186741][ T30] audit: type=1326 audit(1766225119.641:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 1001.447704][ T30] audit: type=1326 audit(1766225119.641:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53afd8df90 code=0x7ffc0000 [ 1001.498263][ T30] audit: type=1326 audit(1766225119.641:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53afd8df90 code=0x7ffc0000 [ 1001.557430][ T30] audit: type=1326 audit(1766225119.641:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 1001.749998][ T30] audit: type=1326 audit(1766225119.641:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 1001.793419][ T30] audit: type=1326 audit(1766225119.641:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 1001.830319][ T30] audit: type=1326 audit(1766225119.641:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.5.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53afd8f749 code=0x7ffc0000 [ 1002.430996][ T5918] usb 5-1: USB disconnect, device number 102 [ 1002.765398][T20177] x_tables: duplicate underflow at hook 2 [ 1003.145960][T20187] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1003.158850][T16942] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1003.180086][T20187] bond2: (slave lo): Enslaving as a backup interface with an up link [ 1003.270640][T20187] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1003.341698][T16942] usb 3-1: Using ep0 maxpacket: 16 [ 1003.422727][T16942] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.447638][T16942] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1003.493104][T20173] ip6gre1: entered allmulticast mode [ 1003.514604][T16942] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1003.531833][T16942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.551680][T16942] usb 3-1: Product: syz [ 1003.590549][T16942] usb 3-1: Manufacturer: syz [ 1003.647054][T16942] usb 3-1: SerialNumber: syz [ 1003.942084][ T5879] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1004.106203][ T5879] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1004.130482][ T5879] usb 5-1: config 0 has no interface number 0 [ 1004.141775][ T5879] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1004.176201][ T5879] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1004.189787][T16942] usb 3-1: 0:2 : does not exist [ 1004.225892][ T5879] usb 5-1: config 0 interface 113 has no altsetting 0 [ 1004.253422][ T5879] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1004.263152][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.266883][T16942] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1004.271379][ T5879] usb 5-1: Product: syz [ 1004.271399][ T5879] usb 5-1: Manufacturer: syz [ 1004.271415][ T5879] usb 5-1: SerialNumber: syz [ 1004.463492][ T5879] usb 5-1: config 0 descriptor?? [ 1004.479071][T16942] usb 3-1: USB disconnect, device number 70 [ 1004.481723][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1004.565584][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.709399][ C1] usb 5-1: NFC: Urb failure (status -71) [ 1004.722958][ T5879] usb 5-1: NFC: Unable to get FW version [ 1004.732312][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1004.749017][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1004.763690][ T5879] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 1004.796543][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1004.842785][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1004.886746][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1004.921796][T16942] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1004.925562][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.041708][T20217] trusted_key: encrypted_key: key user:syz not found [ 1005.043421][ C1] sd 0:0:1:0: [sda] tag#1485 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1005.061362][ C1] sd 0:0:1:0: [sda] tag#1485 CDB: Write(6) 0a 00 00 00 00 00 00 00 00 00 00 00 [ 1005.076844][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1005.088662][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.161848][T18831] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1005.181755][T16942] usb 3-1: Using ep0 maxpacket: 32 [ 1005.240172][T16942] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1005.270876][T16942] usb 3-1: config 0 has no interface number 0 [ 1005.293847][T16942] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1005.311351][T16942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.333926][T16942] usb 3-1: Product: syz [ 1005.352833][T18831] usb 6-1: Using ep0 maxpacket: 32 [ 1005.363221][T16942] usb 3-1: Manufacturer: syz [ 1005.370902][T16942] usb 3-1: SerialNumber: syz [ 1005.377895][T18831] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.444783][T18831] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1005.521044][T18831] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1005.537017][T16942] usb 3-1: config 0 descriptor?? [ 1005.553920][T16942] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1005.577937][T18831] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1005.618706][T18831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.628099][T18831] usb 6-1: Product: 媎㯵猊ꉼ슅ᶴꀽ⫾듹찓⊞﹢휊羠桵劮磻䊖ᖀ举♌䠢䡴它業圁膺핋珥░耧벿⑨኱ㆧ㏂刃뜈ᢤ怎퓜꛸㩧㕜ˢ컙๟傒둂沓뎩趥揧磼䩐堇뙊ﷃ瘣 [ 1005.653871][T18831] usb 6-1: Manufacturer: 狻짋腋ᐷ퍢蹬ऴ用䮖ᮁ巅蛛笀긡鵫繀ᗷ罎嵋၈댜ꩈḳ邜쵠렘뤚ᓭΈ溋咺츾⍮壽囌㈙▛扮鬰营䭚걺鏺仲ﳪᦓ묢ﶟ繺꼣 [ 1005.736069][T18831] usb 6-1: SerialNumber: Ⰹ [ 1005.764281][T16942] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1005.813670][T16942] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1005.928610][T20218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.943860][T20218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.966095][T20210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.992336][T20210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.028675][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1006.029256][ T5918] usb 3-1: USB disconnect, device number 71 [ 1006.068303][ T5918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1006.085862][ T5918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1006.101485][ T5918] quatech2 3-1:0.51: device disconnected [ 1006.363010][T18831] cdc_ncm 6-1:1.0: bind() failure [ 1006.400424][T18831] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1006.415859][T18831] cdc_ncm 6-1:1.1: bind() failure [ 1006.448725][T18831] usb 6-1: USB disconnect, device number 76 [ 1006.686445][T20221] netlink: 'syz.2.3527': attribute type 27 has an invalid length. [ 1006.866229][ T5918] usb 5-1: USB disconnect, device number 103 [ 1006.890148][T20221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.897978][T20221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.006135][T20221] batman_adv: batadv0: Interface deactivated: dummy0 [ 1007.119153][T20221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.135666][T20221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.151828][T20226] binder: BINDER_SET_CONTEXT_MGR already set [ 1007.158200][T20226] binder: 20223:20226 ioctl 4018620d 200000000040 returned -16 [ 1007.272020][T17963] usb 2-1: USB disconnect, device number 90 [ 1007.678447][T20235] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 5, id = 0 [ 1007.679520][ T5983] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.718845][ T5983] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.738651][ T5983] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.748156][ T5983] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.861712][T17963] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1008.054671][T17963] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.074382][T17963] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1008.081308][T17963] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1008.123491][T17963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.152660][T17963] usb 2-1: config 0 descriptor?? [ 1008.312054][T16942] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1008.364365][T20234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.392445][T20234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.423753][T20234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.456575][T20234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.481914][T16942] usb 3-1: Using ep0 maxpacket: 32 [ 1008.489841][T16942] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1008.502486][T20234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.513245][T16942] usb 3-1: config 0 has no interface number 0 [ 1008.519530][T16942] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1008.542151][T20234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.567728][T16942] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1008.588911][T20234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.599330][T16942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.607804][T16942] usb 3-1: Product: syz [ 1008.613302][T20234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.625017][T16942] usb 3-1: Manufacturer: syz [ 1008.629902][T16942] usb 3-1: SerialNumber: syz [ 1008.648845][T20234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.665084][T16942] usb 3-1: config 0 descriptor?? [ 1008.687241][T20234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.941304][T17963] usbhid 2-1:0.0: can't add hid device: -32 [ 1008.960957][T17963] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1009.217576][T20252] netlink: 'syz.4.3533': attribute type 13 has an invalid length. [ 1009.318934][T20240] __nla_validate_parse: 30 callbacks suppressed [ 1009.318975][T20240] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.3532'. [ 1009.771509][T20252] bridge0: port 3(netdevsim0) entered disabled state [ 1009.778745][T20252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.786681][T20252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.999961][T20270] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3535'. [ 1011.329135][ T1149] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.345945][T16942] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1011.368049][ T1149] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.368109][T16942] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1011.411908][T16942] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1011.426073][T16942] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1011.473541][ T1149] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.477443][T16942] usb 3-1: USB disconnect, device number 72 [ 1011.486462][ T24] usb 2-1: USB disconnect, device number 91 [ 1011.534561][ T1149] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.562308][ T5918] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1011.742969][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 1011.754467][ T5918] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 1011.768964][ T5918] usb 6-1: config 0 has no interface number 0 [ 1011.785958][ T5918] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1011.809866][ T5918] usb 6-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1011.842314][ T5918] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1011.861133][ T5918] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1011.876078][T16942] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1011.903593][ T5918] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1011.919641][ T5918] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1011.929949][ T5918] usb 6-1: Product: syz [ 1011.935900][ T5918] usb 6-1: Manufacturer: syz [ 1011.940873][ T5918] usb 6-1: SerialNumber: syz [ 1011.964638][ T5918] usb 6-1: config 0 descriptor?? [ 1011.991514][T20275] raw-gadget.7 gadget.5: fail, usb_ep_enable returned -22 [ 1012.053610][T16942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.092093][T16942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.106360][T16942] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1012.128507][T16942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.184118][T16942] usb 3-1: config 0 descriptor?? [ 1012.264010][ T5918] usb 6-1: USB disconnect, device number 77 [ 1012.558348][T20286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3540'. [ 1012.645791][T16942] cm6533_jd 0003:0D8C:0022.0051: unknown main item tag 0x0 [ 1012.671872][T20265] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1012.681811][T16942] cm6533_jd 0003:0D8C:0022.0051: unknown main item tag 0x0 [ 1012.741400][T16942] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0051/input/input96 [ 1012.812434][T16942] cm6533_jd 0003:0D8C:0022.0051: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1012.841639][T20265] usb 2-1: Using ep0 maxpacket: 16 [ 1012.850406][T20265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.882301][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1012.882463][ T30] audit: type=1326 audit(1766225131.641:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20276 comm="syz.2.3537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a9bf8f749 code=0x0 [ 1012.913877][T20265] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1012.942980][T20265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.991880][T20265] usb 2-1: config 0 descriptor?? [ 1012.993099][T20304] netlink: 203888 bytes leftover after parsing attributes in process `syz.2.3537'. [ 1014.030118][T20296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.135806][T20296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.181780][T20258] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 1014.365892][T20296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3544'. [ 1014.549090][T20318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3547'. [ 1014.593463][T20318] bridge: RTM_NEWNEIGH with invalid ether address [ 1014.609441][T20265] usbhid 2-1:0.0: can't add hid device: -71 [ 1014.769787][T20265] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1014.838017][T20265] usb 2-1: USB disconnect, device number 92 [ 1015.315538][T20258] usb 3-1: device descriptor read/64, error -71 [ 1015.581734][T20258] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 1015.752529][T20258] usb 3-1: device firmware changed [ 1015.759449][T20264] usb 3-1: USB disconnect, device number 73 [ 1016.207893][T20264] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1016.215687][ T30] audit: type=1400 audit(1766225134.871:1203): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1016.484734][T20264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.621849][T20264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.892113][T20264] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1016.933501][T20264] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1016.962798][T20264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.056833][T20264] usb 3-1: config 0 descriptor?? [ 1017.323655][T20264] acrux 0003:1A34:0802.0052: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 1017.355272][T20264] acrux 0003:1A34:0802.0052: no inputs found [ 1017.391710][T20264] acrux 0003:1A34:0802.0052: Failed to enable force feedback support, error: -19 [ 1017.504763][T20349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3551'. [ 1017.514487][T20327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.541819][T20349] netlink: 'syz.2.3551': attribute type 13 has an invalid length. [ 1017.575410][T20327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.667536][T20264] usb 3-1: USB disconnect, device number 74 [ 1017.985848][T20361] ------------[ cut here ]------------ [ 1017.991515][T20361] WARNING: drivers/gpu/drm/drm_prime.c:224 at drm_prime_destroy_file_private+0x4b/0x60, CPU#0: syz.1.3559/20361 [ 1018.004215][T20361] Modules linked in: [ 1018.008159][T20361] CPU: 0 UID: 0 PID: 20361 Comm: syz.1.3559 Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.019606][T20361] Tainted: [L]=SOFTLOCKUP [ 1018.024061][T20361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1018.034349][T20361] RIP: 0010:drm_prime_destroy_file_private+0x4b/0x60 [ 1018.041118][T20361] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 4d 18 ed fc 48 83 3b 00 75 0c e8 32 bc 86 fc 5b e9 7c b5 23 06 cc e8 26 bc 86 fc 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 1018.061153][T20361] RSP: 0018:ffffc9000b1efc20 EFLAGS: 00010287 [ 1018.067512][T20361] RAX: ffffffff853af62a RBX: ffff88807bd0b410 RCX: 0000000000080000 [ 1018.077050][T20361] RDX: ffffc9001c651000 RSI: 0000000000000c34 RDI: 0000000000000c35 [ 1018.086272][T20361] RBP: ffff88807bd0b2c8 R08: ffffc9000b1efba7 R09: 1ffff9200163df74 [ 1018.095376][T20361] R10: dffffc0000000000 R11: fffff5200163df75 R12: dffffc0000000000 [ 1018.104181][T20361] R13: dead000000000100 R14: 0000000000000000 R15: ffff88807bd0b2d8 [ 1018.112807][T20361] FS: 00007f777b9656c0(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 1018.122152][T20361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1018.128864][T20361] CR2: 000000110c3b576d CR3: 0000000052c90000 CR4: 00000000003526f0 [ 1018.137169][T20361] Call Trace: [ 1018.140487][T20361] [ 1018.143503][T20361] drm_file_free+0x7f2/0xa00 [ 1018.148143][T20361] drm_release+0x2de/0x3f0 [ 1018.153192][T20361] ? __pfx_drm_release+0x10/0x10 [ 1018.158188][T20361] __fput+0x44c/0xa70 [ 1018.162332][T20361] task_work_run+0x1d4/0x260 [ 1018.167230][T20361] ? __pfx_task_work_run+0x10/0x10 [ 1018.172577][T20361] ? __se_sys_close_range+0x4ed/0x650 [ 1018.178507][T20361] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1018.184744][T20361] exit_to_user_mode_loop+0xff/0x4f0 [ 1018.190127][T20361] ? rcu_is_watching+0x15/0xb0 [ 1018.195048][T20361] do_syscall_64+0x2d0/0xf80 [ 1018.199787][T20361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.206146][T20361] ? clear_bhb_loop+0x60/0xb0 [ 1018.210879][T20361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.216969][T20361] RIP: 0033:0x7f777ab8f749 [ 1018.221450][T20361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.241506][T20361] RSP: 002b:00007f777b965038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1018.250231][T20361] RAX: 0000000000000000 RBX: 00007f777ade5fa0 RCX: 00007f777ab8f749 [ 1018.258433][T20361] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 1018.266624][T20361] RBP: 00007f777ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1018.274808][T20361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.283322][T20361] R13: 00007f777ade6038 R14: 00007f777ade5fa0 R15: 00007f777af0fa28 [ 1018.291490][T20361] [ 1018.296516][T20361] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1018.304221][T20361] CPU: 0 UID: 0 PID: 20361 Comm: syz.1.3559 Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.315605][T20361] Tainted: [L]=SOFTLOCKUP [ 1018.320031][T20361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1018.330393][T20361] Call Trace: [ 1018.333685][T20361] [ 1018.336642][T20361] dump_stack_lvl+0x99/0x250 [ 1018.341371][T20361] ? __asan_memcpy+0x40/0x70 [ 1018.346073][T20361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1018.351375][T20361] ? __pfx__printk+0x10/0x10 [ 1018.356346][T20361] vpanic+0x237/0x6d0 [ 1018.360439][T20361] ? __pfx_vpanic+0x10/0x10 [ 1018.365261][T20361] ? is_bpf_text_address+0x292/0x2b0 [ 1018.370832][T20361] ? is_bpf_text_address+0x26/0x2b0 [ 1018.376308][T20361] panic+0xb9/0xc0 [ 1018.380320][T20361] ? __pfx_panic+0x10/0x10 [ 1018.384776][T20361] __warn+0x317/0x4b0 [ 1018.388859][T20361] ? drm_prime_destroy_file_private+0x4b/0x60 [ 1018.395290][T20361] ? drm_prime_destroy_file_private+0x4b/0x60 [ 1018.401691][T20361] __report_bug+0x288/0x500 [ 1018.406404][T20361] ? drm_prime_destroy_file_private+0x4b/0x60 [ 1018.412658][T20361] ? __pfx___report_bug+0x10/0x10 [ 1018.417786][T20361] ? drm_file_free+0x78b/0xa00 [ 1018.422644][T20361] ? drm_prime_destroy_file_private+0x4b/0x60 [ 1018.429308][T20361] report_bug+0x16a/0x220 [ 1018.433742][T20361] ? drm_prime_destroy_file_private+0x4b/0x60 [ 1018.439836][T20361] ? drm_prime_destroy_file_private+0x4d/0x60 [ 1018.446084][T20361] handle_bug+0x98/0x200 [ 1018.450532][T20361] exc_invalid_op+0x1a/0x50 [ 1018.455182][T20361] asm_exc_invalid_op+0x1a/0x20 [ 1018.460223][T20361] RIP: 0010:drm_prime_destroy_file_private+0x4b/0x60 [ 1018.467017][T20361] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 4d 18 ed fc 48 83 3b 00 75 0c e8 32 bc 86 fc 5b e9 7c b5 23 06 cc e8 26 bc 86 fc 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 1018.487494][T20361] RSP: 0018:ffffc9000b1efc20 EFLAGS: 00010287 [ 1018.493768][T20361] RAX: ffffffff853af62a RBX: ffff88807bd0b410 RCX: 0000000000080000 [ 1018.501853][T20361] RDX: ffffc9001c651000 RSI: 0000000000000c34 RDI: 0000000000000c35 [ 1018.510098][T20361] RBP: ffff88807bd0b2c8 R08: ffffc9000b1efba7 R09: 1ffff9200163df74 [ 1018.518334][T20361] R10: dffffc0000000000 R11: fffff5200163df75 R12: dffffc0000000000 [ 1018.526682][T20361] R13: dead000000000100 R14: 0000000000000000 R15: ffff88807bd0b2d8 [ 1018.534980][T20361] ? drm_prime_destroy_file_private+0x4a/0x60 [ 1018.542148][T20361] drm_file_free+0x7f2/0xa00 [ 1018.546884][T20361] drm_release+0x2de/0x3f0 [ 1018.551550][T20361] ? __pfx_drm_release+0x10/0x10 [ 1018.556675][T20361] __fput+0x44c/0xa70 [ 1018.560692][T20361] task_work_run+0x1d4/0x260 [ 1018.565473][T20361] ? __pfx_task_work_run+0x10/0x10 [ 1018.570684][T20361] ? __se_sys_close_range+0x4ed/0x650 [ 1018.576071][T20361] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1018.581639][T20361] exit_to_user_mode_loop+0xff/0x4f0 [ 1018.587051][T20361] ? rcu_is_watching+0x15/0xb0 [ 1018.591922][T20361] do_syscall_64+0x2d0/0xf80 [ 1018.596698][T20361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.602973][T20361] ? clear_bhb_loop+0x60/0xb0 [ 1018.607835][T20361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.613823][T20361] RIP: 0033:0x7f777ab8f749 [ 1018.618333][T20361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.638227][T20361] RSP: 002b:00007f777b965038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1018.646914][T20361] RAX: 0000000000000000 RBX: 00007f777ade5fa0 RCX: 00007f777ab8f749 [ 1018.655074][T20361] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 1018.663506][T20361] RBP: 00007f777ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1018.671790][T20361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.679963][T20361] R13: 00007f777ade6038 R14: 00007f777ade5fa0 R15: 00007f777af0fa28 [ 1018.688132][T20361] [ 1018.691410][T20361] Kernel Offset: disabled [ 1018.695750][T20361] Rebooting in 86400 seconds..