last executing test programs: 8m3.884366221s ago: executing program 2 (id=444): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x49d1a78cc956fbbb, 0x6, 0x9, 0x8, 0x8, 0x5}}}, 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x8240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0xfd, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0x759}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x6, 0x4e, 0xc6, 0x40, 0x1}, 0x28, &(0x7f0000000600)={0x5, 0xf, 0x28, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x104, 0x3, 0xe, 0x800, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6f, 0x81, 0xffff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x104, 0x5, 0x5c, 0x6, 0x7f}]}, 0x7, [{0x44, &(0x7f0000000640)=@string={0x44, 0x3, "8359a4d0198e4b73f3219168ecc60eb16619e224b47f14089ffac7b7cbb99812f4ca140f75ec31069f22e8053c03e9c536108796696d5489c2ed8af1a999a636ffe5"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2809}}, {0xd, &(0x7f0000000700)=@string={0xd, 0x3, "6a2fae392815f1b88a6bfa"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x446}}, {0xe6, &(0x7f00000007c0)=@string={0xe6, 0x3, "4997dedbb3e2d25c4071c5f9055e251e096ba22a40509415fa184cfd3a7826a936fbda39d20b85bc20fc48fb2b2954a456612aba0c6701ea990b2f4cf485b3d93f199d9229e66314b4e75c0266b8b9dc35c17c9bcce183f55840e7807c73b31888b6f2bd82ffb75323797dc926ef8121d8280daef57e9d789c752f7dc6978cdcb5f4dc5e74ef1ac98828a9cab8e18285fa933c6243c7eeb163228c7ca6d951c29c0a499ad6d10329b131e272d2bfede91ecc9a9905ba0100a36d7a0239ccee90804b6a6ddd3c4f41fe390470d62b75382f2cbb19656cfd8cab8a41c35d47d6c7b7939899"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x13) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0, 0x0, 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xd5000184) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000b80)={0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000c40)=0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001f00)={0x0, 0x24, "541b0504c87acc993379941575db36633d5cad4fd46aba06ab762f60e5a1c82151072e89"}, &(0x7f0000001f40)=0x2c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000022c0)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x9, 0x9, 0x4, 0xfffffffc, 0x200}, &(0x7f0000002380)=0x98) sendmmsg$inet_sctp(r3, &(0x7f00000027c0)=[{&(0x7f0000000980)=@in6={0xa, 0x4e22, 0x3, @private1, 0x708a}, 0x1c, &(0x7f0000000b40)=[{&(0x7f00000009c0)="f62eb9cac6b7586bdc", 0x9}, {&(0x7f0000000a40)="77bd3510249b800ce586dda60f44985efcaf633e02259bb538b89b8d5728fbbfb8068f93252828b18b812efc6950891a7c6d47285edcdeb88d0eb8e5a4e7c53c308baf45d4a309b39d9b0f3e3e33d5f9712a4b0fd33a54eb4b9747c9e095dce51297807b57354f729d347de1f2c5e6f792d1dc6d85ac53a7a7b3284c2eeb4ad211a616df21d2c5cdb86b6f9ae40e36d2a6172ac292dc88512b80651263d155e6a8a3b02a02cd0e42478e2259ce7d93a94ddf8b48cb163528289abaf2a64d", 0xbe}, {&(0x7f0000000b00)="3f4278230fba4a13703c", 0xa}], 0x3, &(0x7f0000000c80)=[@init={0x18, 0x84, 0x0, {0x401, 0x800, 0x24b, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x0, 0xe, 0x7ff, r4}}], 0x38, 0x80000}, {&(0x7f0000000cc0)=@in6={0xa, 0x4e22, 0x3, @mcast2}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000000d00)="6f92861f988779f3f2d8d0d90bf35eca90fb370ac48150595f29afe5973b6892d72b5a9be55777d525edf77ae33c4f936e1bffaf2aaa62bb4a0359fa36e49aaca21bb90f6da94e08a2ace78e33a5bfe103d289036399dfd925e9463634958a662f0efab3c52040305524c75afe2ba9f0ad0bda840124191d97976af158da3b51038e3c8942ce10b9c7994bb51760", 0x8e}, {&(0x7f0000000dc0)="509a53da194a26396c7cf5e20ecb95941eb9d10e015d86064f4b291f261df4b4f4a93a893e9221781e86c2545b69c235eecc50ec97d5ab3f0c7eb9e3569c56646734b71dcf7fa09ccdc12ad69042f8ae4b563d0acee5049fcde0f3c8593d75118efb4bd5b0a6c2fea5b7f5f4f67b2347983abc5bcf6d58e70df80b7d8d220d2402a036288eb532bdb88f2944e8dce98807b96d1ae91cd06644b08c8ca68000f0d4dbbdd9e77d128a5ea693083b644b5226218e424fd28a6dd58487f6a03523c61e890037cb852dc02fbaa073d78c841d335e3848383ce88dc384567573c85f5fa03946c3995b951ca1bc0f24dec185d5bfa35bff595a688f34cbe8d24ba02148966019f6c77b63616e4c7302454b16ca20f7b132fceb10f4f2d7eb90c71c02673a35e494a0dee6d831d0b03b83f773da5c985a648b0ba163bfaca81b23d9fd6c82cd5899b7ad0bd468a738ac89a351e76ea7763040df3aebaf3efd367d3b42e5e5c052e090d492e24eeacc44cd7db1d3e1aa5ba2a6e7c510bb8a3d3341f33ac4dc6b6b260981cf4c5f2ef161fd2ad2ad4486577fd7bbe3d06a33e95e72f01b2fe99b330d5bbdf179881beef49eafab669f706739193c4eba2f36a7eeadd62f90a8bd03d1b84657f39026febb512fa4b54d3d2187b0be78059108c593d2a21c80553e23ba99919c113ca91b92dd05a08bb93c1e9e3a6e8083131ba04b73712fa0d46ecd056215a46be92e02cc6cf7423c01a5cdc245cf1d0f48fd8019c1264fe953245a4a11d611f93b280c801b2d4c1062eefb04d5d0330aa08bcedce573a47fb4e09a7e7da8a239cdb004835674dc8ca80c1026a97175a41f1dbe987981b3a182c282907a6719a667a4210c0212d0619eb7cf533e16dae12e7709f362c131a67c1b339934c760e3967ede999d042828912d5702fcb4c0dcca191148fe548f3ae1fca327ff7858b19294097aa06a9f668526a601f35f5dbe597be3483214c13a62eb4518dfdc3bf472242a9d69d11dc8ca6518d23e112e65ec9ba48cdd5e54a6558365af3de37c3095ba4dad70bb2b2439c3580dd769f8e1c1c935c112ddf674677716061b4df9de2aa624dbb0bec356c163b11dd8ed827aef7125a30290be60c502dd984872904ccae97157a5464483488c6c9287f963d47d919e7f497b8ded4aa8b1955f6aecd4c6afafac9e6a4963230fe0f4d9e538d604b583502477bd73ecc202d7a20dd2e4f0931f03e48f4bd49833f47e7c8a5b0b7d5235e82804790a96824c6f3224ef0bb2dfb38dead69c8d3fd680bea5d62a1f903f9a02729a71abf6e9c70fb00788288302c69bec4f3bfde2582ce407396307ef90cb86b5e24f8527d70736d58542aba826c0b1c5e4e7a3e4be8debffa5ecf77eaf586c90a395fa34368c22540e5e8e93defca1b6b00c982cad023d6b21b4e6637e19bf9e8bea14c06dd0b3cac9e380fdb0bed371bd4496e4ceb12f4369072815d194d1b2e04f6c13c5346a642fe012a0ee2d76d3a7460b9ee6898e57c07822558f7c43fac1c69ac16b460524240b9f7d99237b85e90647296846ec04e0ee00f066fb231dcd0b1dd2f11542097d5122050782f04766b4bf18b98447a7bf1d1be171ace12a34799ff8f37e06548d83973489d351167515dbf892872140652f8f9780bc98008e56516dd955fd67470ff7d095c3f0774f271ab70610708025aca846429b3f1c9ff0bdbf65e8a64b21dfcaac119cce998643ee3df62b464daf677023b2192373f68b64bf1758c2b2608982755d48f571b9cb27278c3889d714ea28a8a426faf646ebee94d0d501b5c3d2467a6df9b92a3ef2703b666ec41327873cfce0f8f0e733f7a68129e7900b7e5d794d3f6efda2cfa819d22c97737c9294ccae447a0ad5274d9c8e0395c771d4f10ddda33decfe25e5005d1a781e6f1c05cd68b35b36597b5e6dbe406f6139fdbf18a71542ace2e124cc81840eed2f8bf741942aab848006c779c1f652cdba380ce70452c851286eb8c12b64860600b8620129d2091dcca3625f84aa27e78c2d3af53f472c5a0349f279614dcd2ee3a01e13ad54e5e76835c213dcbaddb27e53099d3b664580cf677388f1b4e36431a72c5d1de1fac5d31391da7189665d6a3cbb1950d63f03fa1084ca3b3fd6fd98dd7f19c20f5fbb90e264c111ee9be8905f3d6e2b6f40124a3143cd46c0b4dd3a18cac2d746f4af9c7ac31948439d444956d33062bc92bed4cfd7dc640f15e735f775db29a6abffa138c9dd4f5f4eeb81da2127aaabe631bbe1bf7a49904001e825ba558cf662dc78e939a56d2ece43e7529c027e2787ccf39d11433c6f6fb2ca4126d4e93ce6f48c314e3892b5ee721d0f9e982fc1a17e2bc61165604b85aa8e325a62768196c312ef087a2d726aaa2a0c58e09a4d4e8e06d3ea8cc8ca962cc77a2e2b5c3a6a4a280e67c56a7690d7ac34c3231b2f442d4e1cf4dbcc610285729b6eea0ee7476fb549076b7c70bb38f2b43f61e7f032113be8ef8a6df8aaa6c399cc539a0c6e40925061f1a3913c3d44a7d550ae8500d60bb7fc1cc7215f1b0e3d0883b0c7ae5cb13aef03332f6700fe1ae276d474148d35e06800107389eaf4b1c7f6e37be006b55f3396f3bcd1c747be7aeb38729b1cb96c5ff16988e825006c02c9ccd1a6dd77a6cf534b1f91f5c4bb6c35c285af8c1b6b59740cdcf2e26a6f8e98e377176f00eb44936c23007b3027bb7413583a89c4354b206429286a05b1dc4dddaacb76a579629f69f512f67e7f403705b46e95e8f8ef6695a690dac72fd9c193f583a7096541a9cc372cd0298792d5409fe64d2c4cdbe8497864bf62a476574ec6b3c4331696b5d21e2ebcbd7f82733dd7396fde6e0b33d00276bbf155b56833f00dffb59d48733495e036d4fe8f0b9ac666718984c9c23f71c020de63bb82a4946d680bcecad8d6a5d4dd6f17da43e9f6487ec425c3e1b8169498a82b770058ce3ae7a1c6bada8976d1f327b0cb17cc237fda16392a6fd5c9ba6aa5c6d83cfa972d2cfe1e2e70e0047179853eda2e380ce3f00fbb74161400fccc0e8f7d447bb6344c06de85a2b7a9213c383da0f1557635ec3ed7c7a9a2810a3673a603e41abf57dbc28e129b7fb315a94426d987f8c3dc875865f4ac30aaf7fa1c38d4cd2e6791e67e219d5d9463e9772d643257e81ac276451ba87e193ceaf611505b7b112794737e7a846d9d38eb81cf013ca618f045df8b447cf60057c9bcee18e1f9f5d49a4c5ee7e838a53baca1c7493550b5827e14d29f2a113dcac1a7b10229ec4605118e80f04a3438d0486c55a187d6b2e9c1bc8500aa973ad82b4778de02e82b3166fdc8cb913f51734f864de78c5ef08bdf75d0905027d3341d958df30365233b63112a772bcd001207fe117a1786c2fb6e38e4fb3af69240207fb68dc18bf6e769952bfebfa7467c00fae6f10652b890446a2c6fdf9516409415ed0033836d367cea4b726ebb65744951f5ee913b56b6dc1148217f7c2468d8151647efa5599ea1532d28b93fcbc2a0bcb6896e9652ddf4ac51d896aa3a864553e7bbfd15ceff89c36289ae15a11ab81b1eccc46fd34cb059a8ca9ae996c5a3f032ac4e1950e467eb58eee4e5ec134e473c2f4fe6ad636982444e4d7dde361574d0a10ac9453829887a1349f7496a9aea2e43d86a8c2d523dda5bd993ac9c8fab10cbf8d59d65adf5d21bb67cb66894e9c6fb513fbf64a0446cd3fe6142c82f40db034fc04efe8a9413190384bcb36bf1941dff9d2c89aded95f4396b3ec032e662cdfdbc1a30637a06afd4109b671d8f9790d1ab813e662dbbeee077beda14a8265ef15e20f378e530e749690be734bbc6b81700a7ec10932476e143851fdeef18cd2b8cd384e2db2f7692608095e15e53f07627b23d8fb00fa23fce3fc88eae4c34cde94c872afb8ad67a4e535bc37e9187ad528b04ebc89a29325197ac502cc122b1df2f2b2773e7bb651a9cac6fe8160c3447dd2c6bbf504d9a148fe30e6a7f10fc7d4e3f49e8a4e2abe1e1c7ae42d803f9f2e307ae6fa3229163333360ac3b8abfe99120a0d1b75fc876cc981e5fac4d7111c6e245393a4f11b7d47f258301a7f4461359b0ff2c540ca49dee69f78a11530442cd135c343d2b414f7e5b1df4be0946a23d182ddedf28723b872c8787e9a3afa5dcece97bb0460ee9c7ae966d9979fcdce73c2ef94c2e31ea0e616190b2bce2e900684875810f1c9d297dc2afc91e3b3c0afd3a0a4f43e2558c1ef0693054ed8742bcc6d6696c25a0a11597eb157c6c0e1bd3baaece49854a40c3759f5286867a90f2566b6a6c908ee871b17ec50a1a8808ef373a08e598c5e1fe451a535d07950b3c6f946737898275c1863006b28de67e8098e8098c66d72fa0c4f3eda74f5b43eb9bc03a8ce668271b95fed518c7f16dca11f95237337dec4e7f7800f992364279499b52495f3c7088510cfb66c2f52dcd9e271e34feca22c661b2508ea1a97cdcf54d79d2eadab3623a9894da983d6c558d707e3474abea688a60cc289574f57bf389b773d50fcb323d5280bf411552d1bf04312dfd777eb07591bfd838617d2ca802f8ae70f91a4e3d65e0720be073957c627906ccd0091a11dfaf674ac5eaf8932e44ba82a2887281bd67ec6f1debbcc375ab7a088cbd31ad28bdc1fdaa75498ea98e45085f5fe9e9d390b0a679f276233eb5d37778c3a3376a96c6b206999b13ad1c4c6ab8a4d0171346df318b78e66be627c7b81f63d31577a62d64ca752e8f3a27d8cc2e66deecf8c1d7f3d6853f76723b88e0412ca5ad1cac28a4cbdd36653a2ca4cfe0ce1810a12adf28be5db56105016de60bac589f5d404244ef60ed1eebc233c4e1d88d4672aecedde0f36580d7f95bb3b289f53b3d9186bea0ebdbf9af02e268a80c97a4141fb6bab615c73353522d406d2d2ade8ac49185245a8c0b0e16e8017c9c02b11d8506ec92127c58fd0e9c4b5f6211d84eb8e4b5d8f3d0caba8dbb554a2b260fcfe8f60987dd18d67257b7f509cf0ffa6a6116914c0ad43774bcb964cf3b549e46a1ba9ee5e7a342dad8c03016c1c1799b90729aa7e13beca44dd171a1f685530188d102bd03d3a662f1fea2f7d7953a4767336773483fbdd5524c675935fbbf2bf3123c809e2fdd5e84ad220cf1db7d3e7e475284c9dcaae0decc17c8b3dd237227c6b0acba15716e20c46ab0de143364ff317434facd4ac83d8bef5bcd3288a50fce29c26ff9d52877280af4829d813419fd2a20cc8f25ba64dfc4dbce1ef4105559782b6bfdd44be7366054f78c0fa40eb2ecfd305e63859cb16ab0f67e37daf18686b3f1f8b42a4314b22443feb402ab27b0696e07cad2cff977fec29daa6d295121222d814149ef026740b3b587dbf87e6aff03d0a18de62cc6c03b0c627a2aa22be41dc9d969a2b930e280b0e65e1fda1b1b128fa53a8948ba4b65fe26590e9b530e3d5e9d66aa19a17abb08640368d296ecb59602ea1d74a02a6a5852a133d75152300cb568505bd9258be2247cecf1bdb1c92cd96ca38c0d81f5dbaf0eef25c044fbec1a5fb35645da6ceb47b938d9cd4a47cec38dbb8a7d0e80f628794330bded1a66b4728ff5ab532ee3a92fd374999ef1ff34fd00445671d26e95420c0dd4b05f420161434421f0807b3ba038f9255662d13801efb6172e6d082d3a8337704ab3926464f382bd160896dc781d3575e7a010e3765e07f68bb28a7163d08808a3ceeedfc32e83ab01f4fdda3bf3e7f20dfd2631442b57ab74d757c9a791b2357fc63623f3bb2699", 0x1000}, {&(0x7f0000001dc0)="97260cafc6857029d7f051a336cde431cd6c640c6c2e986b8cb4", 0x1a}, {&(0x7f0000001e00)="1c5c3e4dde3ec37347df08182b210064cca1cbd84df9725a74058b095aa2127e703965c3b4b8c4235b2767807121b42b14792a29c5368ad6a4550c07b12dd4a2ce426f763f8189cda280e790683124f73c60c0ecd08b3b96d01eed30b48c5d8255a3bb3d90adaba3052cd73c06bef64fe04fed0e9c4210f437cecf5db8aa2250484c50ac14895e929d8d0923df2e5a0cd4cea4ee6367e9a6e06bd33f58c55966f643a06c2c6bf86b", 0xa8}], 0x4, &(0x7f0000001f80)=[@sndrcv={0x30, 0x84, 0x1, {0x80, 0x43, 0x8201, 0x9529, 0x2b53, 0x4, 0x9, 0x8, r5}}], 0x30, 0x10}, {&(0x7f0000001fc0)=@in6={0xa, 0x4e24, 0xd8, @private1, 0x9}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000002000)="52a6e934fb4790f9e71f07cd68c985dbd4980a001d4d3a82d39fb344c5c355a221284c6720d84d282d87edadf65c7067fffed312e2408c62981bdac3736afb8dffc2be63a73b0145b8a34623fc5e9c394aa38d89a869d635733579c0165e273d3433edae2e60fae34368e7ec6b1ab05d29e686d2cb70e9979b360c6ef2c00f5fe0e4e9e41474389ff5dacee7be76cb9736ab08173456ec88c4e3dff55b894729", 0xa0}, {&(0x7f00000020c0)="2f42d361cf92ba1aab2e217f0fcac863f8428eae43623ddf264f9b12be227903c8619ab222fc8f7a043dfd04029cb944ca15276ce05950c86894429f5d226ee3c7f9667d5fdafd186f4bd0388301e23893699ad516205dbfd414c1ec9d1d69196afcf122c662207bdc92cced550c803f54c1af1f66", 0x75}], 0x2, &(0x7f0000002180)=[@authinfo={0x18, 0x84, 0x6, {0x8}}, @init={0x18, 0x84, 0x0, {0x7, 0x76, 0x2, 0x9ac3}}, @authinfo={0x18}], 0x48, 0x4090}, {&(0x7f0000002200)=@in={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002280)=[{&(0x7f0000002240)="06ec23741a109bfb2cb09539ace6e962d40451dadee3ec5865980ca229fbc85b012f125e0ed2", 0x26}], 0x1, &(0x7f00000023c0)=[@authinfo={0x18, 0x84, 0x6, {0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8002, 0xb, 0x0, r6}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @init={0x18, 0x84, 0x0, {0x697b, 0x0, 0xaf, 0x7}}], 0xe0, 0x90}, {&(0x7f00000024c0)=@in6={0xa, 0x4e23, 0x9, @loopback}, 0x1c, &(0x7f0000002700)=[{&(0x7f0000002500)="70f58d36d9f32c4ed91313fc524ff6ef534e7e1f17b3be11ed41c255926e9be0f45bfc02890b8b206c72b32c0b1adf534603ff9a62c75ad4", 0x38}, {&(0x7f0000002540)="9b35c7fcc13ff964791d02e1137b5af44412d7fe3662237d2f0c4acdb75de07b1149f87c0e59c9e10afc2464bd485ca86a7edd231d7469d5c8b8b65e0108abd13c7a19c82d5c7931719ac13ea0ec6eee395d2ff6ee5b76248f6094abb389208f60e18f421ec8cc3bbeee91cee6afbc8a9be174c326292c21ea32f47e966003effe6ca238ccd6207edd5b90f8049f4ad8713bf3b609e02a12150dfdbc0fb2", 0x9e}, {&(0x7f0000002600)="feb6bf037652c590ee99d612b7deffe18052f6946c6e3a5c71e00371ed446ec6772141f4362f1f1efd1f62f7367d182f7ce1d4541502c17a8be6746ba29ac23262f45372356e95866966cf3624068b3190780edc5e116eb9c986a1b8f8deed2d8db3b7a1a5b8ad13cfed227f10d44900dcc27391c52d3305ff82a6f9dfe6b35d1af95de4ecfc5f5c561237f02c78f1170d76a8124706afca6dd029b698273f95c2e47530bf9e649e24b9e5715f177e001d61954e27da083391efd9f1592f3b0d944d6d1d0def4924b98a68e4c6c43413a77628f5a1ac8b2cefbe2cfc2e1e57245717fcc1e14187ae63ad2a5ef7b3e66e8f8d90bf3c395b60361298537ea0", 0xfe}], 0x3, &(0x7f0000002740)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @authinfo={0x18, 0x84, 0x6, {0xfffd}}], 0x70, 0x20004100}], 0x5, 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000240)='./file0\x00') syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x4, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000040)="c6", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x0, 0xf, 0xe6, {0xe6, 0xc, "e261fae32278b7160fd84fd0cf07373afe8d4bd40ce8f10cf3f39e8743ecc3b064ab9ecaf349e6d26423ad676bf1deb06fae80a9302dac96c001452df1b590dabeb230d1f9f52093ec3d764f2d43ea096f86517bf4b40ecf24cd49127cdbbd8f75d502505d8b6579d183464246cdb31fc8beda5edb9ea4ff83133b1d8e42131cdedd4f3ad7847b64fc4528efe22055b99e886017d47ab5f7b6fb9238059409d2e289e60f6c30dbf2a4ddc21818b0988bb41a8b84c466a5c214a45502b93a046cfdcbe14abee6708ab4583eba7eda913402b3be1069691af6ed6fd999197ca554406a117d"}}, &(0x7f0000000280)={0x0, 0x3, 0x30, @string={0x30, 0x3, "4ca5a80a4d3530f9c271b38ec852a90de6cd5f46478315ee0b93d83a512830b9376ed38bff143cec3e5dff244f2c"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x0, 0x10, 0xaf, "e3b447c27a023ee472c235d9b86e9b1700fe839568df9871e9da68e965dca5c2bd5c5022ea5009fac067b09c476a53548f8957118091cf314d70c482b0608bcc87f13076b302d31735a3b2756a30562eafee10e9370fe4614451b59656a4a1cd2504a1cdff2b442cfcc43b0f2f86dab635a33bcf8d24df925f27b2e33a3c009af7f08d77286ed22f4f061127f179312dd73ea1b930a1762baa083018f3f24e3d5398dd844dda88e151a3b61282b72e"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x81, 0x3, "14c774"}, &(0x7f0000000480)={0x20, 0x82, 0x2, "da82"}, &(0x7f00000004c0)={0x20, 0x83, 0x3, "a86e9d"}, &(0x7f0000000500)={0x20, 0x84, 0x2, "9ba7"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "b7543a"}}) 8m1.570467209s ago: executing program 2 (id=450): socket$nl_netfilter(0x10, 0x3, 0xc) 8m1.341733466s ago: executing program 2 (id=452): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x98f, 0xfffffe0000000001, 0xfa11, 0x7ffffffc}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(r3, &(0x7f00000001c0)) getsockopt(r0, 0x7, 0x8, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x2, 0x2, 0x201, 0x0, 0x0, {0xd, 0x0, 0x4}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4009000}, 0xc014) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) fanotify_init(0x200, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x40020, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfa9f}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@seclabel}, {@uid_gt}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) file_setattr(r5, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) r6 = openat$ttyS3(0xffffff9c, &(0x7f0000000b00), 0x1, 0x0) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f0000000c00)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, 0x0) 7m58.288229853s ago: executing program 2 (id=460): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x20b8a0, 0x0, 0x3c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) cachestat(r2, &(0x7f0000000fc0)={0x7, 0x294b9e89}, &(0x7f0000001000), 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 7m57.912204686s ago: executing program 2 (id=463): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r1, &(0x7f0000000600)=""/4099, 0x1003, 0x110) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000e80)=ANY=[@ANYBLOB="1201010200000040410e504640000102030109026e0003017f6006080b0002012030260904010000010130"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) 7m57.674670627s ago: executing program 2 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(r4, &(0x7f0000005b40)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/3, 0x3}], 0x1}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/170, 0xaa}, {&(0x7f00000006c0)=""/27, 0x1b}, {&(0x7f0000000700)=""/152, 0x98}, {&(0x7f00000007c0)=""/84, 0x54}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/205, 0xcd}, {&(0x7f0000000980)=""/130, 0x82}], 0xa, &(0x7f0000000b00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000000c00), 0x6e, &(0x7f0000002080)=[{&(0x7f0000000c80)=""/64, 0x40}, {&(0x7f0000000cc0)=""/135, 0x87}, {&(0x7f0000000d80)=""/182, 0xb6}, {&(0x7f0000000e40)=""/18, 0x12}, {&(0x7f0000000e80)=""/117, 0x75}, {&(0x7f0000000f00)=""/208, 0xd0}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/126, 0x7e}], 0x8, &(0x7f0000002100)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f0000004580)=[{&(0x7f00000021c0)=""/3, 0x3}, {&(0x7f0000002200)=""/209, 0xd1}, {&(0x7f0000002300)=""/48, 0x30}, {&(0x7f0000002340)=""/143, 0x8f}, {&(0x7f0000002400)=""/238, 0xee}, {&(0x7f0000002500)=""/94, 0x5e}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x8, &(0x7f0000004600)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004640)=@abs, 0x6e, &(0x7f0000005a00)=[{&(0x7f00000046c0)=""/20, 0x14}, {&(0x7f0000004700)=""/221, 0xdd}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/47, 0x2f}, {&(0x7f0000005840)=""/59, 0x3b}, {&(0x7f0000005880)=""/104, 0x68}, {&(0x7f0000005900)=""/34, 0x22}, {&(0x7f0000005940)=""/45, 0x2d}, {&(0x7f0000005980)=""/115, 0x73}], 0x9, &(0x7f0000005ac0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}], 0x5, 0x10000, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8008001, 0x0, 0x9, 0x401, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x480) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r8 = syz_open_dev$mouse(&(0x7f0000000040), 0x2c04, 0x10000) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) r9 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0x40405515, &(0x7f0000000080)={0x9, 0x3, 0x1000, 0x0, 'syz0\x00', 0x5}) r10 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x7fffffffffffffff, 0x5, 0x949, 0x9, 0x9, 0x1ff, 0x10, 0x4, 0x8000000000000000, 0x2, 0xffffffffffff986b, 0x80000001, 0x5, 0xc0000000000, 0x1], 0x0, 0x190986}) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)={@rand_addr=0x64010101, @loopback, 0x0, 0x3, [@multicast1, @local, @multicast2]}, 0x1c) ioctl$KVM_RUN(r10, 0xae80, 0x0) 7m57.393407803s ago: executing program 32 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(r4, &(0x7f0000005b40)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/3, 0x3}], 0x1}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/170, 0xaa}, {&(0x7f00000006c0)=""/27, 0x1b}, {&(0x7f0000000700)=""/152, 0x98}, {&(0x7f00000007c0)=""/84, 0x54}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/205, 0xcd}, {&(0x7f0000000980)=""/130, 0x82}], 0xa, &(0x7f0000000b00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000000c00), 0x6e, &(0x7f0000002080)=[{&(0x7f0000000c80)=""/64, 0x40}, {&(0x7f0000000cc0)=""/135, 0x87}, {&(0x7f0000000d80)=""/182, 0xb6}, {&(0x7f0000000e40)=""/18, 0x12}, {&(0x7f0000000e80)=""/117, 0x75}, {&(0x7f0000000f00)=""/208, 0xd0}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/126, 0x7e}], 0x8, &(0x7f0000002100)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f0000004580)=[{&(0x7f00000021c0)=""/3, 0x3}, {&(0x7f0000002200)=""/209, 0xd1}, {&(0x7f0000002300)=""/48, 0x30}, {&(0x7f0000002340)=""/143, 0x8f}, {&(0x7f0000002400)=""/238, 0xee}, {&(0x7f0000002500)=""/94, 0x5e}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x8, &(0x7f0000004600)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004640)=@abs, 0x6e, &(0x7f0000005a00)=[{&(0x7f00000046c0)=""/20, 0x14}, {&(0x7f0000004700)=""/221, 0xdd}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/47, 0x2f}, {&(0x7f0000005840)=""/59, 0x3b}, {&(0x7f0000005880)=""/104, 0x68}, {&(0x7f0000005900)=""/34, 0x22}, {&(0x7f0000005940)=""/45, 0x2d}, {&(0x7f0000005980)=""/115, 0x73}], 0x9, &(0x7f0000005ac0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}], 0x5, 0x10000, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8008001, 0x0, 0x9, 0x401, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x480) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r8 = syz_open_dev$mouse(&(0x7f0000000040), 0x2c04, 0x10000) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) r9 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0x40405515, &(0x7f0000000080)={0x9, 0x3, 0x1000, 0x0, 'syz0\x00', 0x5}) r10 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x7fffffffffffffff, 0x5, 0x949, 0x9, 0x9, 0x1ff, 0x10, 0x4, 0x8000000000000000, 0x2, 0xffffffffffff986b, 0x80000001, 0x5, 0xc0000000000, 0x1], 0x0, 0x190986}) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)={@rand_addr=0x64010101, @loopback, 0x0, 0x3, [@multicast1, @local, @multicast2]}, 0x1c) ioctl$KVM_RUN(r10, 0xae80, 0x0) 4m0.928330157s ago: executing program 4 (id=1526): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc010000190001000000000001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc0000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000006c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000044010500ff020000000000000000000000000001000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000feffffff00000000000000000000000000000000fe8000000000000000000000000000bb0000000033"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m0.800302842s ago: executing program 4 (id=1527): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180006ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) mknodat(r6, &(0x7f0000000000)='./file0\x00', 0x200, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(0x0, 0x4, &(0x7f0000003a80)=[&(0x7f0000001880)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000880)="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", 0x1000, 0xfffffffffffffff9, 0x0, 0x2, r6}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f00000018c0)="e73ec08c2fb05f031f4b2d8f34a7868d009c35de08d6f3f3c14ab75f515c026ccd7e9ee8a34ae4391b08abf9ac9a8aec4e6552c719178f2a8aec52adf68bf4c6b3b854ce7fedefdf1178105e1c00005b95fe6f1b46d40b29f968d8ebb26f6e4cac964962ba4719c9ea5debd8eb9ce015d3bbbf669cb4e7f15708950c1673af28aa22b3000e4a6c54dacb20d7dbe379c3331ed2a2eb5af5e2348c2249cdff889e0fbadb398ead77dcee6966284520979efe15ce1fbea0e3d15be759a1bb872d0618dadb703c159579ca58", 0xca, 0x0, 0x0, 0x0, r6}, 0x0, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0xfffa, r2, &(0x7f0000002a40)="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", 0x1000, 0x7, 0x0, 0x2, r6}]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000000)={'bond_slave_0\x00', @random="013701300108"}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) mlock(&(0x7f00005a5000/0x2000)=nil, 0x2000) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r9, 0x8140aecc, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000", 0x1, 0x349, 0x0, 0x4, 0x85}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x290, 0x230, 0x258, 0x290, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x128, 0x170, 0x12, {0x959f1400}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x28000, 0x10, 0x3, {0x2df7}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0x0, 0xff000000, 0xffffff00], 0x6, 0xc, 0x3, 0x4e24, 0x2, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0xc4, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 3m57.852379801s ago: executing program 4 (id=1536): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0xffff, 0x0, @loopback, 0x20000000}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}}}, 0x48) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000400)={"78a16c0c", 0xa6, 0x4, 0x0, 0xe, 0x4, "cac6107738f660f37d936ff27185fe", "9377ad2e", "ee7628cc", "56041c45", ["fcd678d365f59591fc727013", "9f0b8e968518678b8a124fd7", "061a85a5e9ef8b9ba5c50606", "a45812748f798ffd62596f54"]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f00000da000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000003c0)=0x1, 0xd, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x81}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', 0x0, 0x0, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') read$dsp(r6, 0x0, 0x0) pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 3m56.123389212s ago: executing program 4 (id=1548): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x1, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x2000, 0x9, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x40000, 0x1f, 0xfe, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x0, 0x31}, {0xeeee0000, 0xeeee1000, 0x9, 0x0, 0x6, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0xa000, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x0, 0x74, 0x0, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x0, 0x5}, {0x0, 0xdddd0000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0xeeef0000, 0x5}, {0xdddd1000, 0x400}, 0x0, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x90b7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m55.835146677s ago: executing program 4 (id=1550): io_setup(0x3f, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x800) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0x3) 3m55.726063903s ago: executing program 4 (id=1551): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) r0 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) link(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @bt={0x6, 0x2000, 0x9, 0x7f, 0x1, 0xccd7, 0x0, 0x5}}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}}, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000b80)=[{&(0x7f00000003c0)="bc", 0x1}, {0x0}], 0x2) close(0x3) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000006000/0x3000)=nil], 0x0, 0xfffffffffffffffc, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x2, 0x2800, 0x2802, 0x2, 0xe4, 0x9, 0x0, {0x10000008, 0xffffffff}, 0xd0, 0x9}}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xe02c0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) (async) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) (async) link(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)='./file0\x00') (async) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) (async) syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @bt={0x6, 0x2000, 0x9, 0x7f, 0x1, 0xccd7, 0x0, 0x5}}) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}}, 0x0) (async) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) writev(r3, &(0x7f0000000b80)=[{&(0x7f00000003c0)="bc", 0x1}, {0x0}], 0x2) (async) close(0x3) (async) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000006000/0x3000)=nil], 0x0, 0xfffffffffffffffc, 0x2) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x2, 0x2800, 0x2802, 0x2, 0xe4, 0x9, 0x0, {0x10000008, 0xffffffff}, 0xd0, 0x9}}) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xe02c0, 0x0) (async) 3m40.128193292s ago: executing program 33 (id=1551): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) r0 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) link(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @bt={0x6, 0x2000, 0x9, 0x7f, 0x1, 0xccd7, 0x0, 0x5}}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}}, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000b80)=[{&(0x7f00000003c0)="bc", 0x1}, {0x0}], 0x2) close(0x3) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000006000/0x3000)=nil], 0x0, 0xfffffffffffffffc, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x2, 0x2800, 0x2802, 0x2, 0xe4, 0x9, 0x0, {0x10000008, 0xffffffff}, 0xd0, 0x9}}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xe02c0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) (async) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) (async) link(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)='./file0\x00') (async) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) (async) syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @bt={0x6, 0x2000, 0x9, 0x7f, 0x1, 0xccd7, 0x0, 0x5}}) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}}, 0x0) (async) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) writev(r3, &(0x7f0000000b80)=[{&(0x7f00000003c0)="bc", 0x1}, {0x0}], 0x2) (async) close(0x3) (async) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000006000/0x3000)=nil], 0x0, 0xfffffffffffffffc, 0x2) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x2, 0x2800, 0x2802, 0x2, 0xe4, 0x9, 0x0, {0x10000008, 0xffffffff}, 0xd0, 0x9}}) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xe02c0, 0x0) (async) 7.294274487s ago: executing program 0 (id=2379): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000004000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 7.20504167s ago: executing program 3 (id=2381): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014024000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace80ffcbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000004d40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004c00)=[{{&(0x7f0000000380)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000440)=""/27, 0x1b}], 0x1, &(0x7f0000000580)=""/166, 0xa6}, 0xfffffff8}, {{&(0x7f0000000700)=@generic, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000980)=""/130, 0x82}, {&(0x7f0000000a40)=""/220, 0xdc}, {&(0x7f0000000b40)=""/86, 0x56}, {&(0x7f0000000bc0)=""/90, 0x5a}, {&(0x7f0000000c40)=""/170, 0xaa}, {&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f0000000d40)=""/183, 0xb7}], 0x7, &(0x7f0000000e80)}, 0x7}, {{&(0x7f0000000ec0)=@rc, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000f40)=""/69, 0x45}, {&(0x7f0000000fc0)=""/132, 0x84}, {&(0x7f0000001080)=""/152, 0x98}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/43, 0x2b}, {&(0x7f0000002e40)=""/32, 0x20}, {&(0x7f0000002e80)=""/21, 0x15}], 0x7, &(0x7f0000002f40)=""/160, 0xa0}, 0x3}, {{&(0x7f0000003000)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000003080)=""/2, 0x2}, {&(0x7f00000030c0)=""/159, 0x9f}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/123, 0x7b}, {&(0x7f0000004200)=""/38, 0x26}, {&(0x7f0000004240)=""/176, 0xb0}, {&(0x7f0000004300)=""/124, 0x7c}], 0x7, &(0x7f0000004400)=""/164, 0xa4}, 0x7}, {{&(0x7f00000044c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004540)}, {&(0x7f0000004580)=""/247, 0xf7}, {&(0x7f0000004680)=""/151, 0x97}, {&(0x7f0000004740)=""/101, 0x65}, {&(0x7f00000047c0)=""/110, 0x6e}, {&(0x7f0000004840)=""/78, 0x4e}, {&(0x7f00000048c0)=""/240, 0xf0}, {&(0x7f00000049c0)=""/157, 0x9d}], 0x8, &(0x7f0000004b00)=""/229, 0xe5}, 0xedb0}], 0x5, 0x40001001, &(0x7f0000004d80)={r1, r2+60000000}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000000340)='?', 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x10, 0x1, 0xfffffffe, 0xfffffffd, {{0x2b, 0x4, 0x3, 0x4, 0xac, 0x65, 0x0, 0xa, 0x2f, 0x0, @remote, @broadcast, {[@end, @generic={0x86, 0xe, "8ffe4fa2147119294e04a8ef"}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x1, 0x4, "9a4b"}, {0x1, 0xa, "e31a0a87ff06879a"}, {0x1, 0x4, "7d82"}, {0x9, 0x5, "4efc56"}, {0x2, 0x7, "1adacb5b3b"}, {0x1, 0x4, "4ab0"}]}, @timestamp_prespec={0x44, 0x14, 0x6, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0xffff}]}, @end, @lsrr={0x83, 0xb, 0x4, [@empty, @broadcast]}, @cipso={0x86, 0x3f, 0x0, [{0x5, 0x9, "4da75b9fd866ff"}, {0x0, 0xd, "9d2e5e5752c16c5bc37d25"}, {0x1, 0x6, "a094446b"}, {0x6, 0xf, "fd9ed8431c4db1fe8c1c106774"}, {0x0, 0x7, "b7bdb1d97c"}, {0x1, 0x7, "1408ca9933"}]}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x8932, &(0x7f0000001dc0)={'netdevsim0\x00', @ifru_settings={0x10000, 0x7, @cisco=0x0}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x33eb4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(r10, 0x0, 0x0, 0xa, 0x203) getsockname(r9, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000680)="66b83d018ed8c4637d19270066baf80cb880d8f580ef66bafc0cec66ba4000b806000000ef47ff61004a0fc76e0eb9cc080000b802000000ba000000000f30b9800000c00f3235000100000f303e0f001f460f01c9", 0x55}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xb, '\x00', r4, r5, 0x3, 0x3, 0x4}, 0x50) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r12, 0x65, 0x5, &(0x7f00000002c0), 0x4) syz_usb_connect(0x1, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) 6.862538262s ago: executing program 0 (id=2382): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000ffffff800000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff00000000000000000200"], 0xd8}}, 0x0) 6.497810935s ago: executing program 0 (id=2383): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x224, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x338}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x135}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x3}}}}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "afd2be3c66d2512e4ea00a1a7f23548c3f4c65f663c0179bafd0ff"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80000000, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfa, @private2, 0xc}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @private0, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @local, 0x8000}}}}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000040)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x4000, 0x2000}, {0xffffffffffffffff, 0x0, 0x1000000, 0x1004000}]}) 6.201021183s ago: executing program 0 (id=2384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a030400000000000000000200000038000480340001800c0001007061796c6f616400240002800800034000ff07f50800024000000000080001400000001508000440000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x1, 0x1cc) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)='9', 0x1}], 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = getpgid(0x0) r5 = getpid() kcmp(r5, r5, 0x19a778fad9df666b, 0xffffffffffffffff, 0xffffffffffffffff) rt_tgsigqueueinfo(r4, r5, 0x33, &(0x7f0000000440)={0x38, 0x6}) close(r3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040012"], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.693755348s ago: executing program 5 (id=2385): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000ac0)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',euid', @ANYRESDEC=0x0, @ANYBLOB=',fowne', @ANYBLOB]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a320000fff5080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000020a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0xc4) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.928834315s ago: executing program 0 (id=2387): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x800, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32], 0x3c}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r6, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) fgetxattr(r6, &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0xde) wait4(r5, &(0x7f0000000180), 0x20000000, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_int(r7, 0x29, 0x6, &(0x7f0000000080)=0x45, 0x4) sendmmsg$inet6(r7, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 3.756650571s ago: executing program 1 (id=2389): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 3.334242689s ago: executing program 3 (id=2390): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x17, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x44, 0x6d, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x628c, 0x18192}, [@IFLA_MAP={0x24, 0xe, {0xf, 0x7, 0x804, 0x4, 0x9, 0xa}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080c4) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf250a00000000000099d7000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) r5 = fsopen(&(0x7f0000000340)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0xb2) fchdir(r6) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r6, 0xc0106440, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000080)}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000280)=""/70, 0x46) getdents64(r7, 0xfffffffffffffffe, 0xff80) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r8, 0x200002) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x1}, r4, 0x6}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42040, 0x0) lseek(r9, 0xfffffffffffffff9, 0x2) close(0x3) 3.244213523s ago: executing program 1 (id=2391): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r3 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000, &(0x7f0000000500)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xf}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}], [{@uid_lt}, {@dont_hash}, {@flag='async'}]}}, 0x0, 0x0, &(0x7f0000000680)="174a8006f017ad6fb6b8b036b90aa1a0634731ec299959d7aa5a92fbf21ff764245c205d019710d0c128a8e33d8c812256498ec70d907c3f6b6910e723af74541099b8bfcbc29d0b10e0cb3351973f96103cf5ff09c5eea9823b4b85dbf902807ca28dbf3ef38fabf2998a3cc679f74919d4f9a3f9e0d9c74e3b0ab2c1c6198c76958a548e4faec85ee91ff7f28c14c52012834da2047eca7d077847ad2c84f05942d839d5b0c66e90130627bed78bb0df00b675bfd38dfccced320d5fd4e8de1b245c4d4968c47b8eb738d3054eee630db3e610cd2b7da3fd5d07ef74cd1209227e18d049") r4 = openat(r3, &(0x7f0000000780)='./file0\x00', 0x0, 0x1e3) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x0, 0xfe, 0xfffffff9, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="07000000000000000000050000000c0003800800020020000000180001801400020073797a5f74756e000000000000000000"], 0x38}}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000600)={0xa2, 0x8, r2, 0x0, 0x2, 0xfcd9, &(0x7f0000000400)="697ab143aeb2e35669aca2aea0cef279b0644270906e1af1e733c243ca19145cf450553fb5952288eb9ad7fd825fec0168fe4fdda9f8da7ad6fcadf42722e5a61a4f82714ce9cda6d39c7a50f9e7be936c4c3211cf6d882b7d8b32759169cd5daf7daeafb7a0d3250d3e3fdb97b5cfc6041d48ffac2f489dacbf28aad3c14fb87bf8a9af78aef1f1aefe8622e9605c7bef173b96e2ba8731c5f92ed95de177724d8a802ac59e63353ad2fd8890463e96d8241965b9d56c0c2cf7ec19d7006800"/206, 0x4}) fcntl$setstatus(r2, 0x4, 0x6c00) r7 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)={0x2, 0x0, @auto=[0x37, 0x15]}, 0xa, 0xfffffffffffffff9) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f00000002c0)={@id, 0x7, r7, '\x00', @auto=[0x29, 0x2f, 0x1c, 0x3a, 0x26, 0x1c, 0x33]}) 2.826028801s ago: executing program 1 (id=2392): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) 2.749983624s ago: executing program 3 (id=2393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, 0x0}], 0x1, 0x40, &(0x7f00000003c0)=[@cr4={0x1, 0x240068}], 0x1) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000080)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0xf, 0x0, 0x6}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x1, 0x1e, 0x64, 0x0, 0x4, 0x3c, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast}, "fd30bcb711f6bf745342"}}, 0x2c) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x8, 0x0, 0x1, 0xfffffffc, 0x6, 0xffffaa01}]}) 2.553751836s ago: executing program 6 (id=2394): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xf95, 0x12) write$char_usb(r0, 0x0, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\xe2\x00\x00\x00\x00\x98\xfc~\xef\x00\x00\x00\xdb\xae\x8e\xbd+\xc2\a\xae\xb69\x06n\xad\xfa\xa2\xd1@R\x97\xa4\x00mp\xd9r\x85;pzx\xd7\xa8\xe7\xef:\x8c,\xd6\"c\x1c$\x85\xf0\x89\xfb\x9b\x8e\x15Kd\xe4\xcc`\xa3.b\x17\x04Y\xeaYk\xd7\xe3cf\x1fnU\x11\x91v\xde\aT\xed[\x89\xb6\xbfc'}], 0xa, "000278414808f90249a8974898280f3c430a34b2de9a57967d49c269449fc906eef97ae17638a3eb9a5df5a02a484a4fff00000000000000000000baca280647784b0d09cc77e6000000441a69f2c53e292fe01d5e4ac62ebda3c67fa384c66b1e4df6c98b7bb988d6c4eeb229e8dbc772a8d19f87373ef479fce7eb6c1f6184a61789180d45f40c1372f09b84427b367b50c6c1741b4a231f5c97efdd30625d8567c6b2ff913d1c18964cf94fda4bcbc02038c373254ef50a919f1fe752265b92e0a1c0aede6fc9481b917e7b5cabe654909e2d92a5b11334acbca630f7a77c6214655f2452ed3e085bd2967001f78527b56e53b9f5923a4c9bbefbc259db89b1d5569c65672925a26f8485f287b3836beb3919800bd278cca2010ee80b823935d6f0ec586bc270ea1e28149db84bbbbe73dfa50fbf3ebfcae0f8aab7934f6ce478b6e67373a9410bab6b0000"}, 0x1c0) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76632cb010852f426072a", 0x2a}, {&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3f9bc6cd3f362387a706fcab2b62c9cf701191e6f1843142a512f5fb5e28c4537c755c5390b2c44b36ea9500acf4f2a535f1f9372e797", 0x58}], 0x2) (async) bind$packet(r3, &(0x7f0000000000)={0x11, 0x6, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) (async) write$UHID_INPUT(r3, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 2.253793602s ago: executing program 5 (id=2395): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x60}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.997293735s ago: executing program 1 (id=2396): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000000, 0x5d031, 0xffffffffffffffff, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0x7fff, 0x2, &(0x7f0000001140)='|0', 0x4}) (async) r3 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x100000, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000)=0x0, &(0x7f0000ffe000)=0x0, &(0x7f0000000000)) syz_io_uring_complete(r4, r5) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0x18, 0xfffffffffffffffe, &(0x7f00000003c0)=0x1a) (async) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2, 0x38) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000100)={0x5000, 0x8000}) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f0000000200)={'mangle\x00', 0x75, "40f8a4c22d45712ab3ef05fa028200b6b0c3069230863203fe63b47c578569f8aadf5447cc3a74241235bbd77c3593e8da8759fb80ca64867848db243108656e85916e428879fdd3e1df3a519b6bbb674de05e8ec3d564ef778798b46d77b3a22a6fa042b4abc1668cbb405e9c1de4129b7600dfd3"}, &(0x7f00000002c0)=0x99) (async) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000001c0)=0x8, 0x4) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) fsetxattr$security_capability(r9, &(0x7f0000000040), &(0x7f00000000c0)=@v1={0x1000000, [{0x7, 0x1}]}, 0xc, 0x3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000080)=0x2) 1.97361906s ago: executing program 5 (id=2397): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.87572116s ago: executing program 3 (id=2398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x4, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x6, 0x0, 0x101, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x2000000000000000, 0x100000001, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x1d, 0x700000000000000, 0x9, 0xfffe, 0x3, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x2, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x5, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x1, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xe96, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0xffffff7ffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10002, 0xe, 0x3, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x80, 0x3, 0xd, 0x1, 0x9, 0xfffd, 0x1, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x101102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES32=r0]) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="f8b9fa2e210da3e9d48e7ab1f2ca", 0xe, 0x4044800, &(0x7f0000000240)={0x11, 0x5, r6, 0x1, 0x40, 0x6, @local}, 0x14) socket$packet(0x11, 0x2, 0x300) 1.656859485s ago: executing program 6 (id=2399): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x200) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x3ff0000000000, 0x20000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x600000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x9, 0x41d, 0x12000, 0x20000000fffffffe, 0xda, 0xfffffffffc000000, 0x0, 0xfffffffffffffffa, 0x0, 0x3, 0x4}) r6 = socket(0x40000000015, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) getsockopt(r6, 0x200000000114, 0x2717, 0x0, &(0x7f00000001c0)) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) 1.441683563s ago: executing program 5 (id=2400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) syz_usb_connect(0x4, 0xa6c, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0xd3, 0x93, 0xdf, 0x40, 0x12d1, 0x9d19, 0x6281, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5a, 0x3, 0x64, 0x5, 0x80, 0xfc, "", [{{0x9, 0x4, 0xf8, 0x2, 0x5, 0xff, 0x3, 0x2, 0x0, [@hid_hid={0x9, 0x21, 0x5425, 0x9, 0x1, {0x22, 0x86b}}, @generic={0xed, 0x21, "36503debaf2827c781b74183d23641ed782b60cba8f8d3429c6a912544903d2eba6003588ce74897e07f3956ed867224deb58f167f2a5520b52c41b95ff1bf5d2e0fd56ef9351d8137b08944c6ea8cf7504a6654e199d741bdf1bad847b88d153169444385070d67847178c3ec309a733c9bf71648685a039dd44e3c9c5e2d255678cf6b734acbfb921c1e88f9b2277c46e40b6379bdb2a2a8fe8bcc455cd1bc34313cc75d97abf1fa6047ec6f518ad430dfb6c32f28f88ab3d2d7e92b22ca3824c5080bda8fd6418df9cc067f0c3cd402ce9d88e1f20ef232aa020daea4f9b7272a40765687aa3b04888b"}], [{{0x9, 0x5, 0xf, 0x10, 0xa0, 0x0, 0xc5, 0x7, [@generic={0xd9, 0xc, "61ff7331e35091981fea7ffcc9043ef9776024a143e3fffaca8493379752d7f84a82c9b69721601730a9f60496d323d285bf337167b7bacd6ef232e05a3321ac3173d793a99cc7d6833d4c9e8a078c8738ae436b600be65b070ef3670389d19146729211849eb471dea808927ca6ae5063008d8f187aadb6f0a222c9556a48fcb8c8818207e72d8869d2f1054ca31f3aa5ecab7d16e7a97676354f19e621548cc712596ba3dd1a35dc98a68c761db3d9c78deea8b502b03f9a5df23d0cad7882da367acd3d22abf0b2be4fda2d3765dab5ef95512321c1"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xf8, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0xd, 0x9, [@generic={0xac, 0x4, "1becbe1a00e422607ac15e1dd4a06b14b1230105c669c1a4a26af696bab3989cb7f4e2736150be09676fcf5680e8091b2dd11876ddfecb6463734250a5d3e63de0be17b99670c613b5339b34c8bebebe5f0d41225dbb9fede8a6ec0e24597adeaf0fe744c0d2cc6e3b0f224013aef7067b67f33201dce75a2b2f7e849cd38b5fe440bd628696069af3639d369b4360c55a5038f5b34421856e2489655984592a36713502b3c0b2498524"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7f, 0x5a, 0x4}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x80, 0x50, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x3}]}}]}}, {{0x9, 0x4, 0xde, 0x2, 0x8, 0xc9, 0x36, 0xd6, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0xf0, 0x66, 0x3, [@generic={0x6f, 0x23, "ec4715a4313d1721e1ca5f2df7d5883d25be362a41e06f2e92272ae5dd92395f91e190e5cd7594c4735abb57991eee7f8d9c8ae182bed7696e9445bf4d6edf9eb6848eb416369d62e7ceb6333e71eba05d5df02bb34f730a35ba0cd10ba6c818e90e15bd50c685cbbfce3c5fc6"}, @generic={0x83, 0x21, "b784bba8e0d2eff79f6bad9cf8f3a996e204c2b12cd65f540306e60ee3b63cb2b421a8aa029acff340b6ece116d4e785d474766e6dcc61ea36889a342eaaed0dc289ea5d5751fd59e5f62f29103d9d164add415164d53ca246db666181fd098ba8f9dd98026879d847bf3c64fdfc504f33543d7e3bdbb21bcbc2186d06f1bc83fd"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x2, 0x1, 0x5}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x40, 0x2, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x420, 0x9, 0xd, 0xa}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x13, 0x1b, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x5, 0xa, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x7}]}}, {{0x9, 0x5, 0xa, 0xb6e0e0ff7dd8556d, 0x200, 0xfc, 0xa, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd8, 0x1000}, @generic={0x7f, 0xe, "fea852784080dd38772f3705f39083544844b768c50eb6a8ff9d2c72d4c5716f51520867b1671ac94b7a541f2748dc4e6770748ae071089552fd044eb8ccdcba8fc011e25bb1eeca0eba160f728848cb6defa0ea68fc5d84c3f928afe5135d5e6269164330cf8887e341141633257938ce0c216b9013685de754785261"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x4, 0x1, 0x2, [@generic={0x78, 0x21, "a33c620fa904e742cb761c78faa6bad3119ac6cf9135ef351ed7c213447fe14f6f71decfa76d24c6f9b6d36204d963373c5702f5f2ab85ec59da97747c2b1b06d2739ecd687ac6dbd651562984c68c779ad88e2f88424e4614d40ce0381fe4dd5b5042593aec370c6b7ab790870e7e96a6b356864286"}, @generic={0x26, 0x6, "5c458edc3a3e73e07803acccf3dddf7ed7aa0214b62db86ae8ae71a5714557ec218fc2b5"}]}}]}}, {{0x9, 0x4, 0xe6, 0xd4, 0x10, 0xd7, 0x47, 0xa7, 0x8, [@hid_hid={0x9, 0x21, 0x8001, 0x0, 0x1, {0x22, 0x900}}, @uac_as], [{{0x9, 0x5, 0x7, 0x10, 0x7b2832c846c9252, 0x6, 0x4, 0x1, [@generic={0xbf, 0xe, "08aea0ace6065f4ad3d37c6ce4a7386efa197daccbdc0b4425ed6218e286d8d585d518dca1d6cee983b90ab9f763e83de9f66951e1c1f2fbcc957e0ba16e720b3c0321834d636ad0f7754642567eb6401dda645686bd81d860aa42089f7f4a37fb8cd521c5a6100bfa027eec301c9226c1b2ea1515a1a3e8cc7eca65c1cd3572bab30d56077bbd4a1561dfc570eb289e1948b3d12582eb10ed6df7116908f146cb5dac7e3c4d78d844f097180d5b0e3377d18f073d80b85b342bb6e998"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0xf8}]}}, {{0x9, 0x5, 0x19, 0x0, 0x400, 0x5, 0x7, 0x40}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x5, 0x9, 0xe5}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x9, 0x6, 0x40, [@generic={0xbd, 0x21, "21fc273371c5cc377e6715e76b349aa1a0773182db69245899d5afac399b31b57937bfe6e52aea4fd74b053280e7a606ad9ce497cb6cc9973919aa15b4485d1128f0185f5e9cde2be4bbcf75b583934d5b9ab003544a7dc652d6e9ca2dbcf330873295b12154edabb8aa89ba2868ef62e9bdeff44a2162d228aa58534a4be3be0093d437e585cdfa14cecaf85334c25b3e2be68e55dd12116d070b77d3cfd4bf3d8e80efc8f7776ff076369b6e060904e35e70056db180e6bb93c9"}, @generic={0x91, 0x4, "1a82fef74d582bdb95bb1327373600c88579c328bba5b46c2a209830ecedcc3b70770d9900e626843352338bb36c0d388bc599ff7221eeb26f18df9fbd2eca7da5f212dadbe4341989a259d55e48c1ff155d4539f8ab946e60453cb4c355e3236b8b8909d03ea035f97f0d189e9920702de1ffa7961bb35649576e4abee83374ba1da084a63910e894986d5216098b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x7, 0x83, 0x50}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x1, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x30, 0x9}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0xc0, 0x7, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xf8e6}, @uac_iso={0x7, 0x25, 0x1, 0xbda9f37e8aa39131, 0x5, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x4, 0x7, 0x59}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x6, 0x1, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0xf5, 0xc, "676fc532c0fa14db7e91731231bf4a1b158c8498218c19ffdbeba215204de82564af05d6c3627a55f3587c6d46edcf00ba4b908f37a8ac49c1d85895e601d393ba6e309d42e36eabab5ef2c0087c8397d8c2539ede2b2636581f5ac3cd0fb5a3c6cf3e3f03b3f113806536ccc5dad973f6bc62f41e2d8aaf783ee7d85ee09ad8339d85a87a5c56eeae29ef6c1ed71cc35f4da2cd55d1376b8c42083db60d98af9ebb6616eeb700bb9046d961b5bff1afa9c66777ef865cddf0d5b8c2ed8c7ab09190f692a9e85485b650f3105b6122ada0afe5b3bc63a82b23e50e6c06a543dff38f38b6b07013e92bf76a75b25910e7d5e61c"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x7, 0xf7, 0x6f}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xd0, 0xd2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x80}]}}, {{0x9, 0x5, 0x5, 0x18, 0x3ff, 0x8, 0x7, 0x8}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x6c, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfb}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x2}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x2, 0x4, 0xdc, [@generic={0x75, 0x8, "3abe98f32d8ff535b58caed732eed8027278e39c2d9a85fd2c3a9e6a8b675ed79f07c326f89779ee1393c12475e86b643c560432be4538e0f8c0b8ee810b49762321e664454b451c1afa002e11f02256517d0b577cddd35d172a1f12c8bda7dc00cd1a7bbcc327157eca1675dab8a1e2a2c05c"}, @generic={0xb0, 0xd, "b4b486e2dd92683c9ab2fa6d71d4983de47ada6522a0f18666a9485dda0c2e71b9aeb5bd149da655f91368ed9223332a859b6421bdc92580ccca0935b2062652b3188be000547837d1895601ab3f218816b0a87585e03b84653eee28c4782c2454b21c71d946d803cc58c59aa1f73cdcf247bfc0bce67a0764e68775c1e4a185ac7d90e494392d5bf43963e864fcb86a635c52c3de6c8f90d05ebad2fd726b994787d0aa3f196130e357bde15e5f"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x2d, 0x0, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x4}]}}, {{0x9, 0x5, 0x80, 0x8, 0x8, 0x6, 0x30, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x300, 0x7, 0x10, 0x2, 0x8, 0xa6}, 0x33, &(0x7f0000001080)={0x5, 0xf, 0x33, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x0, 0x9, 0xa, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2ce4f0d776e536e849b57461c1e354cc"}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x81, 0x0, 0x0, 0xf, 0x7f}]}, 0x2, [{0x9, &(0x7f00000010c0)=@string={0x9, 0x3, "9c0c0697f2e101"}}, {0x72, &(0x7f0000001100)=@string={0x72, 0x3, "8f942036ab9826d9c8703112117af0e822d87f8ff4a77518c1e8586078b5c3947326899f29c59e57def4b0d6c2a57c82e2982c609431f4172d0430bf38ec1451d7c1f5ecc3d2b31f859de5e037f8d132e707f3d3f09d1bbac6a5017971340f97587543cb7576d7799a356cc88bc8a53e"}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xe1, 0x0, 'queue1\x00', 0x10000080}) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) syz_usb_connect(0x4, 0xa6c, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0xd3, 0x93, 0xdf, 0x40, 0x12d1, 0x9d19, 0x6281, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5a, 0x3, 0x64, 0x5, 0x80, 0xfc, "", [{{0x9, 0x4, 0xf8, 0x2, 0x5, 0xff, 0x3, 0x2, 0x0, [@hid_hid={0x9, 0x21, 0x5425, 0x9, 0x1, {0x22, 0x86b}}, @generic={0xed, 0x21, "36503debaf2827c781b74183d23641ed782b60cba8f8d3429c6a912544903d2eba6003588ce74897e07f3956ed867224deb58f167f2a5520b52c41b95ff1bf5d2e0fd56ef9351d8137b08944c6ea8cf7504a6654e199d741bdf1bad847b88d153169444385070d67847178c3ec309a733c9bf71648685a039dd44e3c9c5e2d255678cf6b734acbfb921c1e88f9b2277c46e40b6379bdb2a2a8fe8bcc455cd1bc34313cc75d97abf1fa6047ec6f518ad430dfb6c32f28f88ab3d2d7e92b22ca3824c5080bda8fd6418df9cc067f0c3cd402ce9d88e1f20ef232aa020daea4f9b7272a40765687aa3b04888b"}], [{{0x9, 0x5, 0xf, 0x10, 0xa0, 0x0, 0xc5, 0x7, [@generic={0xd9, 0xc, "61ff7331e35091981fea7ffcc9043ef9776024a143e3fffaca8493379752d7f84a82c9b69721601730a9f60496d323d285bf337167b7bacd6ef232e05a3321ac3173d793a99cc7d6833d4c9e8a078c8738ae436b600be65b070ef3670389d19146729211849eb471dea808927ca6ae5063008d8f187aadb6f0a222c9556a48fcb8c8818207e72d8869d2f1054ca31f3aa5ecab7d16e7a97676354f19e621548cc712596ba3dd1a35dc98a68c761db3d9c78deea8b502b03f9a5df23d0cad7882da367acd3d22abf0b2be4fda2d3765dab5ef95512321c1"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xf8, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0xd, 0x9, [@generic={0xac, 0x4, "1becbe1a00e422607ac15e1dd4a06b14b1230105c669c1a4a26af696bab3989cb7f4e2736150be09676fcf5680e8091b2dd11876ddfecb6463734250a5d3e63de0be17b99670c613b5339b34c8bebebe5f0d41225dbb9fede8a6ec0e24597adeaf0fe744c0d2cc6e3b0f224013aef7067b67f33201dce75a2b2f7e849cd38b5fe440bd628696069af3639d369b4360c55a5038f5b34421856e2489655984592a36713502b3c0b2498524"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7f, 0x5a, 0x4}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x80, 0x50, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x3}]}}]}}, {{0x9, 0x4, 0xde, 0x2, 0x8, 0xc9, 0x36, 0xd6, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0xf0, 0x66, 0x3, [@generic={0x6f, 0x23, "ec4715a4313d1721e1ca5f2df7d5883d25be362a41e06f2e92272ae5dd92395f91e190e5cd7594c4735abb57991eee7f8d9c8ae182bed7696e9445bf4d6edf9eb6848eb416369d62e7ceb6333e71eba05d5df02bb34f730a35ba0cd10ba6c818e90e15bd50c685cbbfce3c5fc6"}, @generic={0x83, 0x21, "b784bba8e0d2eff79f6bad9cf8f3a996e204c2b12cd65f540306e60ee3b63cb2b421a8aa029acff340b6ece116d4e785d474766e6dcc61ea36889a342eaaed0dc289ea5d5751fd59e5f62f29103d9d164add415164d53ca246db666181fd098ba8f9dd98026879d847bf3c64fdfc504f33543d7e3bdbb21bcbc2186d06f1bc83fd"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x2, 0x1, 0x5}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x40, 0x2, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x420, 0x9, 0xd, 0xa}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x13, 0x1b, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x5, 0xa, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x7}]}}, {{0x9, 0x5, 0xa, 0xb6e0e0ff7dd8556d, 0x200, 0xfc, 0xa, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd8, 0x1000}, @generic={0x7f, 0xe, "fea852784080dd38772f3705f39083544844b768c50eb6a8ff9d2c72d4c5716f51520867b1671ac94b7a541f2748dc4e6770748ae071089552fd044eb8ccdcba8fc011e25bb1eeca0eba160f728848cb6defa0ea68fc5d84c3f928afe5135d5e6269164330cf8887e341141633257938ce0c216b9013685de754785261"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x4, 0x1, 0x2, [@generic={0x78, 0x21, "a33c620fa904e742cb761c78faa6bad3119ac6cf9135ef351ed7c213447fe14f6f71decfa76d24c6f9b6d36204d963373c5702f5f2ab85ec59da97747c2b1b06d2739ecd687ac6dbd651562984c68c779ad88e2f88424e4614d40ce0381fe4dd5b5042593aec370c6b7ab790870e7e96a6b356864286"}, @generic={0x26, 0x6, "5c458edc3a3e73e07803acccf3dddf7ed7aa0214b62db86ae8ae71a5714557ec218fc2b5"}]}}]}}, {{0x9, 0x4, 0xe6, 0xd4, 0x10, 0xd7, 0x47, 0xa7, 0x8, [@hid_hid={0x9, 0x21, 0x8001, 0x0, 0x1, {0x22, 0x900}}, @uac_as], [{{0x9, 0x5, 0x7, 0x10, 0x7b2832c846c9252, 0x6, 0x4, 0x1, [@generic={0xbf, 0xe, "08aea0ace6065f4ad3d37c6ce4a7386efa197daccbdc0b4425ed6218e286d8d585d518dca1d6cee983b90ab9f763e83de9f66951e1c1f2fbcc957e0ba16e720b3c0321834d636ad0f7754642567eb6401dda645686bd81d860aa42089f7f4a37fb8cd521c5a6100bfa027eec301c9226c1b2ea1515a1a3e8cc7eca65c1cd3572bab30d56077bbd4a1561dfc570eb289e1948b3d12582eb10ed6df7116908f146cb5dac7e3c4d78d844f097180d5b0e3377d18f073d80b85b342bb6e998"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0xf8}]}}, {{0x9, 0x5, 0x19, 0x0, 0x400, 0x5, 0x7, 0x40}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x5, 0x9, 0xe5}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x9, 0x6, 0x40, [@generic={0xbd, 0x21, "21fc273371c5cc377e6715e76b349aa1a0773182db69245899d5afac399b31b57937bfe6e52aea4fd74b053280e7a606ad9ce497cb6cc9973919aa15b4485d1128f0185f5e9cde2be4bbcf75b583934d5b9ab003544a7dc652d6e9ca2dbcf330873295b12154edabb8aa89ba2868ef62e9bdeff44a2162d228aa58534a4be3be0093d437e585cdfa14cecaf85334c25b3e2be68e55dd12116d070b77d3cfd4bf3d8e80efc8f7776ff076369b6e060904e35e70056db180e6bb93c9"}, @generic={0x91, 0x4, "1a82fef74d582bdb95bb1327373600c88579c328bba5b46c2a209830ecedcc3b70770d9900e626843352338bb36c0d388bc599ff7221eeb26f18df9fbd2eca7da5f212dadbe4341989a259d55e48c1ff155d4539f8ab946e60453cb4c355e3236b8b8909d03ea035f97f0d189e9920702de1ffa7961bb35649576e4abee83374ba1da084a63910e894986d5216098b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x7, 0x83, 0x50}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x1, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x30, 0x9}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0xc0, 0x7, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xf8e6}, @uac_iso={0x7, 0x25, 0x1, 0xbda9f37e8aa39131, 0x5, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x4, 0x7, 0x59}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x6, 0x1, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0xf5, 0xc, "676fc532c0fa14db7e91731231bf4a1b158c8498218c19ffdbeba215204de82564af05d6c3627a55f3587c6d46edcf00ba4b908f37a8ac49c1d85895e601d393ba6e309d42e36eabab5ef2c0087c8397d8c2539ede2b2636581f5ac3cd0fb5a3c6cf3e3f03b3f113806536ccc5dad973f6bc62f41e2d8aaf783ee7d85ee09ad8339d85a87a5c56eeae29ef6c1ed71cc35f4da2cd55d1376b8c42083db60d98af9ebb6616eeb700bb9046d961b5bff1afa9c66777ef865cddf0d5b8c2ed8c7ab09190f692a9e85485b650f3105b6122ada0afe5b3bc63a82b23e50e6c06a543dff38f38b6b07013e92bf76a75b25910e7d5e61c"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x7, 0xf7, 0x6f}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xd0, 0xd2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x80}]}}, {{0x9, 0x5, 0x5, 0x18, 0x3ff, 0x8, 0x7, 0x8}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x6c, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfb}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x2}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x2, 0x4, 0xdc, [@generic={0x75, 0x8, "3abe98f32d8ff535b58caed732eed8027278e39c2d9a85fd2c3a9e6a8b675ed79f07c326f89779ee1393c12475e86b643c560432be4538e0f8c0b8ee810b49762321e664454b451c1afa002e11f02256517d0b577cddd35d172a1f12c8bda7dc00cd1a7bbcc327157eca1675dab8a1e2a2c05c"}, @generic={0xb0, 0xd, "b4b486e2dd92683c9ab2fa6d71d4983de47ada6522a0f18666a9485dda0c2e71b9aeb5bd149da655f91368ed9223332a859b6421bdc92580ccca0935b2062652b3188be000547837d1895601ab3f218816b0a87585e03b84653eee28c4782c2454b21c71d946d803cc58c59aa1f73cdcf247bfc0bce67a0764e68775c1e4a185ac7d90e494392d5bf43963e864fcb86a635c52c3de6c8f90d05ebad2fd726b994787d0aa3f196130e357bde15e5f"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x2d, 0x0, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x4}]}}, {{0x9, 0x5, 0x80, 0x8, 0x8, 0x6, 0x30, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x300, 0x7, 0x10, 0x2, 0x8, 0xa6}, 0x33, &(0x7f0000001080)={0x5, 0xf, 0x33, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x0, 0x9, 0xa, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2ce4f0d776e536e849b57461c1e354cc"}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x81, 0x0, 0x0, 0xf, 0x7f}]}, 0x2, [{0x9, &(0x7f00000010c0)=@string={0x9, 0x3, "9c0c0697f2e101"}}, {0x72, &(0x7f0000001100)=@string={0x72, 0x3, "8f942036ab9826d9c8703112117af0e822d87f8ff4a77518c1e8586078b5c3947326899f29c59e57def4b0d6c2a57c82e2982c609431f4172d0430bf38ec1451d7c1f5ecc3d2b31f859de5e037f8d132e707f3d3f09d1bbac6a5017971340f97587543cb7576d7799a356cc88bc8a53e"}}]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x3, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xe1, 0x0, 'queue1\x00', 0x10000080}) (async) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) (async) 1.27577749s ago: executing program 6 (id=2401): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 1.031227213s ago: executing program 1 (id=2402): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x17, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x44, 0x6d, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x628c, 0x18192}, [@IFLA_MAP={0x24, 0xe, {0xf, 0x7, 0x804, 0x4, 0x9, 0xa}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080c4) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf250a00000000000099d7000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) r5 = fsopen(&(0x7f0000000340)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0xb2) fchdir(r6) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r6, 0xc0106440, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000080)}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000280)=""/70, 0x46) getdents64(r7, 0xfffffffffffffffe, 0xff80) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r8, 0x200002) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x1}, r4, 0x6}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42040, 0x0) read(r9, &(0x7f00000002c0)=""/22, 0x16) close(0x3) 914.239054ms ago: executing program 3 (id=2403): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff000000000000ffffffffffffab5600", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 759.804294ms ago: executing program 6 (id=2404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x200000000000000}, 0x0) 726.92736ms ago: executing program 5 (id=2405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000040)='./file0/../file0/file0\x00', r4, r5) (async) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f0000006200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x100000001, {0x1, 0x3, 0x200000000031, 0x8, 0x8, 0xffff672b, {0x2, 0xa1e3, 0x181, 0xffff, 0xfffffffffdffffff, 0x200000000000008, 0x7, 0xce90cbb, 0xffffff4a, 0x4000, 0x3, r4, 0xee01, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r9, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) listen(r9, 0x10001) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @private2, 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r11, 0x0, 0x32600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "16a8bc", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x40}]}}}}}}}}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x7a11f) 687.873821ms ago: executing program 0 (id=2406): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000900)={0x0, &(0x7f00000003c0)=[@nested_vmlaunch={0x12f, 0x18}, @uexit={0x0, 0x18, 0xffffffffeac5c5f3}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0xa1f, 0x8}}, @cpuid={0x64, 0x18, {0x5, 0x3}}, @rdmsr={0x66, 0x18, {0x8ea}}, @in_dx={0x69, 0x20, {0xce91}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x3f, 0xffffffffffff367f, 0x2, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x6c0, 0x7}}, @wrmsr={0x65, 0x20, {0x20a, 0x4}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xc2, 0x4, 0x1}}, @cpuid={0x64, 0x18, {0x3, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x101, 0x7ff, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x6404, 0x3, 0x1, 0x700000}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xef56}}, @wr_crn={0x67, 0x20, {0x8, 0xa7}}, @nested_amd_invlpga={0x17d, 0x20, {0xd000, 0x43d9}}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x1ba, {0x1, 0x10001, [@set_irq_handler={0xc8, 0x20, {0xe8, 0x1}}, @code={0xa, 0x52, {"2e0f01c566b828008ed866b8f0008ec866420f632b2667400f5ee70f229326d9e5c74424000e010000c74424020a000000ff1c242e0fc79903000000430fc2e700"}}, @in_dx={0x69, 0x20, {0x233a}}, @uexit={0x0, 0x18, 0x419}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x67, 0x2, 0xb2, 0x1}}, @nested_load_syzos={0x136, 0x20, {0x2, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xe9, 0xb9}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x0, 0x8}}, @out_dx={0x6a, 0x28, {0x4202, 0x3, 0x1c0000000}}, @nested_amd_stgi={0x17e, 0x10}]}}, @wrmsr={0x65, 0x20, {0x998, 0x5}}, @cpuid={0x64, 0x18, {0x7f, 0x9}}, @nested_amd_vmload={0x182, 0x18}, @nested_load_code={0x12e, 0x61, {0x1, "66440f678d005800000f2293460f08c4c259916c4acd470f2042c421f851545c4166ba4000ed0f2004420f23fdc74424001d725073c744240291000000c7442406000000000f011424"}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_vmresume={0x130, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0xc946}}], 0x53b}) (async) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000900)={0x0, &(0x7f00000003c0)=[@nested_vmlaunch={0x12f, 0x18}, @uexit={0x0, 0x18, 0xffffffffeac5c5f3}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0xa1f, 0x8}}, @cpuid={0x64, 0x18, {0x5, 0x3}}, @rdmsr={0x66, 0x18, {0x8ea}}, @in_dx={0x69, 0x20, {0xce91}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x3f, 0xffffffffffff367f, 0x2, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x6c0, 0x7}}, @wrmsr={0x65, 0x20, {0x20a, 0x4}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xc2, 0x4, 0x1}}, @cpuid={0x64, 0x18, {0x3, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x101, 0x7ff, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x6404, 0x3, 0x1, 0x700000}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xef56}}, @wr_crn={0x67, 0x20, {0x8, 0xa7}}, @nested_amd_invlpga={0x17d, 0x20, {0xd000, 0x43d9}}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x1ba, {0x1, 0x10001, [@set_irq_handler={0xc8, 0x20, {0xe8, 0x1}}, @code={0xa, 0x52, {"2e0f01c566b828008ed866b8f0008ec866420f632b2667400f5ee70f229326d9e5c74424000e010000c74424020a000000ff1c242e0fc79903000000430fc2e700"}}, @in_dx={0x69, 0x20, {0x233a}}, @uexit={0x0, 0x18, 0x419}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x67, 0x2, 0xb2, 0x1}}, @nested_load_syzos={0x136, 0x20, {0x2, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xe9, 0xb9}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x0, 0x8}}, @out_dx={0x6a, 0x28, {0x4202, 0x3, 0x1c0000000}}, @nested_amd_stgi={0x17e, 0x10}]}}, @wrmsr={0x65, 0x20, {0x998, 0x5}}, @cpuid={0x64, 0x18, {0x7f, 0x9}}, @nested_amd_vmload={0x182, 0x18}, @nested_load_code={0x12e, 0x61, {0x1, "66440f678d005800000f2293460f08c4c259916c4acd470f2042c421f851545c4166ba4000ed0f2004420f23fdc74424001d725073c744240291000000c7442406000000000f011424"}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_vmresume={0x130, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0xc946}}], 0x53b}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000940)={0x2, 0x0, [{0xa95, 0x0, 0x3}, {0x9cb, 0x0, 0x2}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x7, 0x88, 0xcc, 0x8, 0x9fb, 0x602e, 0x5363, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x9, 0x0, 0xc, "", [{{0x9, 0x4, 0x3, 0x1, 0x0, 0x85, 0x15, 0xd}}]}}]}}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0}) 376.957888ms ago: executing program 6 (id=2407): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 319.7173ms ago: executing program 1 (id=2408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ftruncate(r3, 0x2007ffa) sendfile(r4, r3, 0x0, 0x80000000a) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRES32=r3, @ANYBLOB="42a00200231c040008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9d}]}], @echo_reply}}}}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000001c0)) setsockopt$sock_timeval(r2, 0x1, 0x1, &(0x7f0000000340), 0x10) socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 319.181441ms ago: executing program 5 (id=2409): mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0x4, "e20a008d8000"}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e80), 0xf04c0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000ac0)=0x7fff0000) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x22) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1}, {0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000740)={0x0, 0xffffffffffffff08}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'veth0_to_hsr\x00', {}, {0xff}}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x158, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit1={{0x58}, {'wg2\x00', {0x10, 0x3ff, 0x1, 0x6, 0x5, 0xe, 0x5, 0x8, 0x20}, {0x6}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x3c, "604f88f1ee83205458834342fd25bc4d4549b59a405614c54926919c4c22"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x438) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0xa) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a000000000000000000", 0x28}], 0x1) socket$netlink(0x10, 0x3, 0x7) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0x2, 0xfff2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10010, 0xffffffffffffffff, 0x40894000) 317.013687ms ago: executing program 3 (id=2410): r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x1c002) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) connect$can_bcm(r1, &(0x7f0000001cc0)={0x1d, r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00), 0x0, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = dup2(r1, r1) recvmsg$can_j1939(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x1) close(r1) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) 0s ago: executing program 6 (id=2411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180006ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) mknodat(r6, &(0x7f0000000000)='./file0\x00', 0x200, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(0x0, 0x4, &(0x7f0000003a80)=[&(0x7f0000001880)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000880)="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", 0x1000, 0xfffffffffffffff9, 0x0, 0x2, r6}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f00000018c0)="e73ec08c2fb05f031f4b2d8f34a7868d009c35de08d6f3f3c14ab75f515c026ccd7e9ee8a34ae4391b08abf9ac9a8aec4e6552c719178f2a8aec52adf68bf4c6b3b854ce7fedefdf1178105e1c00005b95fe6f1b46d40b29f968d8ebb26f6e4cac964962ba4719c9ea5debd8eb9ce015d3bbbf669cb4e7f15708950c1673af28aa22b3000e4a6c54dacb20d7dbe379c3331ed2a2eb5af5e2348c2249cdff889e0fbadb398ead77dcee6966284520979efe15ce1fbea0e3d15be759a1bb872d0618dadb703c159579ca58", 0xca, 0x0, 0x0, 0x0, r6}, 0x0, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0xfffa, r2, &(0x7f0000002a40)="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", 0x1000, 0x7, 0x0, 0x1, r6}]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000240)=0x1d) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'bond_slave_0\x00', @random="013701300108"}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x4, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x4}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) mlock(&(0x7f00005a5000/0x2000)=nil, 0x2000) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r7, 0x8140aecc, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000", 0x1, 0x349, 0x0, 0x4, 0x85}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x290, 0x230, 0x258, 0x290, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x128, 0x170, 0x12, {0x959f1400}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x28000, 0x10, 0x3, {0x2df7}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0x0, 0xff000000, 0xffffff00], 0x6, 0xc, 0x3, 0x4e24, 0x2, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0xc4, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) kernel console output (not intermixed with test programs): ice strings: Mfr=1, Product=2, SerialNumber=3 [ 550.203370][ T10] usb 6-1: Product: syz [ 550.208508][ T10] usb 6-1: Manufacturer: syz [ 550.214931][ T10] usb 6-1: SerialNumber: syz [ 550.227167][ T10] usb 6-1: config 0 descriptor?? [ 550.779198][ T5990] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 550.810657][ T5898] usb 1-1: USB disconnect, device number 100 [ 550.930930][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1995'. [ 550.951537][ T5990] usb 7-1: Using ep0 maxpacket: 32 [ 550.983774][ T5990] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 551.005783][ T5990] usb 7-1: config 0 has no interface number 0 [ 551.031051][ T5990] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 551.057134][ T5990] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 551.085442][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 551.086949][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.127452][ T5990] usb 7-1: Product: syz [ 551.132729][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 551.145442][ T5990] usb 7-1: Manufacturer: syz [ 551.145564][ T5990] usb 7-1: SerialNumber: syz [ 551.149381][ T5990] usb 7-1: config 0 descriptor?? [ 551.192658][T13518] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 551.418122][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 551.437888][T13518] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 551.477295][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 551.564468][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 551.618537][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 551.656360][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 551.704912][ T10] usb 6-1: USB disconnect, device number 71 [ 551.893302][T13518] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1997'. [ 551.930549][ T5990] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 551.960318][ T5990] asix 7-1:0.188: probe with driver asix failed with error -71 [ 552.031412][ T5990] usb 7-1: USB disconnect, device number 19 [ 552.153814][T13533] : renamed from bond_slave_0 [ 552.155477][ T5209] Dev loop5: unable to read RDB block 7 [ 552.198121][ T5209] loop5: unable to read partition table [ 552.229828][ T5209] loop5: partition table beyond EOD, truncated [ 552.303645][T13535] trusted_key: encrypted_key: master key parameter 'defed:syz' is invalid [ 552.563950][ T5209] Dev loop5: unable to read RDB block 7 [ 552.601501][ T5209] loop5: unable to read partition table [ 552.641511][ T5209] loop5: partition table beyond EOD, truncated [ 553.276471][ T5209] Dev loop5: unable to read RDB block 7 [ 553.312376][ T5209] loop5: unable to read partition table [ 553.338034][ T5209] loop5: partition table beyond EOD, truncated [ 553.838598][T13553] syzkaller1: entered promiscuous mode [ 553.849025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 553.859881][T13553] syzkaller1: entered allmulticast mode [ 554.402953][ T5209] Dev loop5: unable to read RDB block 7 [ 554.429175][ T5209] loop5: unable to read partition table [ 554.469401][ T5209] loop5: partition table beyond EOD, truncated [ 554.891129][T13570] fuse: Unknown parameter 'fjd&0x0000000000000003' [ 554.936350][T13567] batman_adv: batadv0: Adding interface: dummy0 [ 554.963496][T13567] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.013363][ T5209] Dev loop5: unable to read RDB block 7 [ 555.029591][T13567] batman_adv: batadv0: Interface activated: dummy0 [ 555.031001][ T5209] loop5: unable to read partition table [ 555.054426][ T5209] loop5: partition table beyond EOD, truncated [ 555.356670][T13567] netlink: 'syz.1.2013': attribute type 10 has an invalid length. [ 555.426358][ T5209] Dev loop5: unable to read RDB block 7 [ 555.460908][ T5209] loop5: unable to read partition table [ 555.482658][ T5209] loop5: partition table beyond EOD, truncated [ 555.714166][T13580] batadv0: mtu less than device minimum [ 555.753971][T13580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 555.770095][T13580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 555.782872][T13580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 555.795226][T13580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 555.807743][T13580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 555.820991][T13580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 555.833469][T13580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 555.847821][T13580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 555.861031][T13580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 555.998524][ T5209] Dev loop5: unable to read RDB block 7 [ 555.998575][ T5209] loop5: unable to read partition table [ 555.998795][ T5209] loop5: partition table beyond EOD, truncated [ 556.096539][T13567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.182935][T13567] batadv0: entered promiscuous mode [ 556.185614][T13567] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 556.441374][ T5209] Dev loop5: unable to read RDB block 7 [ 556.458505][ T5209] loop5: unable to read partition table [ 556.475968][ T5209] loop5: partition table beyond EOD, truncated [ 556.541303][ T5898] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 556.720140][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 556.730497][ T5898] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 556.752907][ T5898] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 556.773307][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.798922][ T5898] usb 1-1: Product: syz [ 556.805271][ T5928] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 556.824215][ T5898] usb 1-1: Manufacturer: syz [ 556.839251][ T5898] usb 1-1: SerialNumber: syz [ 557.005229][ T5928] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 557.051662][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 557.073833][T13601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.088560][ T5928] usb 4-1: Product: syz [ 557.097718][T13616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2028'. [ 557.105508][ T5928] usb 4-1: SerialNumber: syz [ 557.122421][T13601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.168613][ T5928] usb 4-1: config 0 descriptor?? [ 557.170081][T13601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.220089][T13601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.276690][ T5898] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 557.312602][ T5898] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 557.341897][ T5898] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 557.368417][ T5898] usb 1-1: USB disconnect, device number 101 [ 557.434008][ T5928] usb 4-1: USB disconnect, device number 82 [ 557.463776][T13620] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2027'. [ 557.519701][T13620] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2027'. [ 557.711052][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2027'. [ 558.019755][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 558.275581][ T5209] Dev loop5: unable to read RDB block 7 [ 558.310882][ T5209] loop5: unable to read partition table [ 558.337056][ T5209] loop5: partition table beyond EOD, truncated [ 558.382632][T13623] : renamed from bond_slave_0 [ 558.400345][T13636] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2032'. [ 558.429158][ T5898] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 558.439915][T13636] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2032'. [ 558.498484][T13626] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 558.611535][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 558.640800][ T5898] usb 4-1: config 0 has no interfaces? [ 558.677038][ T5898] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 558.724566][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.775671][ T5898] usb 4-1: Product: syz [ 558.777510][ T5209] Dev loop5: unable to read RDB block 7 [ 558.805098][ T5898] usb 4-1: Manufacturer: syz [ 558.809291][ T5209] loop5: unable to read partition table [ 558.841351][ T5898] usb 4-1: SerialNumber: syz [ 558.853759][ T5209] loop5: partition table beyond EOD, truncated [ 558.890182][ T5898] usb 4-1: config 0 descriptor?? [ 559.349037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 559.389013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 559.449742][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 559.540798][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 559.580923][T13656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.646672][T13656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.708103][T13656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.754003][T13656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.799272][ T5990] usb 4-1: USB disconnect, device number 83 [ 560.353620][T13659] sit1: entered promiscuous mode [ 560.639027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 560.999716][ T7815] net_ratelimit: 22 callbacks suppressed [ 560.999762][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 561.620080][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 561.779021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 562.016715][ T5209] Dev loop5: unable to read RDB block 7 [ 562.041200][ T5209] loop5: unable to read partition table [ 562.073274][ T5209] loop5: partition table beyond EOD, truncated [ 562.156057][T13674] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2039'. [ 562.180595][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 562.183185][T13677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.289546][T13677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.704640][ T5209] Dev loop5: unable to read RDB block 7 [ 562.726716][ T5209] loop5: unable to read partition table [ 562.747151][ T5209] loop5: partition table beyond EOD, truncated [ 562.769416][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 563.159930][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.169312][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.265485][ T5209] Dev loop5: unable to read RDB block 7 [ 563.306394][ T5209] loop5: unable to read partition table [ 563.316712][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 563.352636][ T5209] loop5: partition table beyond EOD, truncated [ 563.809781][ T5928] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 563.889203][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 563.928621][T13694] netlink: 'syz.3.2046': attribute type 10 has an invalid length. [ 563.990205][ T5928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.006555][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 564.021384][T13678] syz_tun: entered promiscuous mode [ 564.033813][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 564.058855][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 564.089887][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 564.128836][ T5928] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 564.143892][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 564.164658][ T5928] usb 6-1: Product: syz [ 564.173010][ T5928] usb 6-1: Manufacturer: syz [ 564.200934][ T5928] usb 6-1: SerialNumber: syz [ 564.232434][ T5928] usb 6-1: config 0 descriptor?? [ 564.428161][T13694] team0 (unregistering): Port device team_slave_0 removed [ 564.449289][ T7813] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 564.467415][T13696] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2047'. [ 564.486689][ T5928] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 564.497633][ T5928] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 564.626599][T13694] team0 (unregistering): Port device team_slave_1 removed [ 564.699421][ T5928] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 564.715569][T13694] team0 (unregistering): Port device bond1 removed [ 564.728383][ T5928] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 564.757727][ T5928] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 564.900068][ T5928] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 565.022780][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 565.040746][T13696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.063408][T13696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.299909][ T5928] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 565.395360][ T5979] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 565.425770][ T5928] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 565.514658][ T5928] usb 6-1: USB disconnect, device number 72 [ 565.563521][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 565.613436][ T5979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 565.636353][ T5979] usb 4-1: config 114 has an invalid interface number: 240 but max is 0 [ 565.661289][ T5979] usb 4-1: config 114 has no interface number 0 [ 565.682299][ T5979] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 565.716272][ T5979] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 565.767988][ T5979] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 565.795875][ T5979] usb 4-1: config 114 interface 240 has no altsetting 0 [ 565.897483][ T5979] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 565.942250][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.978064][ T5979] usb 4-1: Product: syz [ 566.005165][ T5979] usb 4-1: Manufacturer: syz [ 566.014854][ T5209] Dev loop5: unable to read RDB block 7 [ 566.031873][ T5979] usb 4-1: SerialNumber: syz [ 566.037906][ T5209] loop5: unable to read partition table [ 566.058427][ T5209] loop5: partition table beyond EOD, truncated [ 566.119195][T13703] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 566.177380][T13703] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 566.261039][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 566.349010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #304!!! [ 566.508113][T13717] syzkaller0: entered promiscuous mode [ 566.524024][T13717] syzkaller0: entered allmulticast mode [ 566.669949][T13718] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 566.852992][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 567.452829][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 567.454698][ T5979] ir_usb 4-1:114.240: IR Dongle converter detected [ 567.553246][ T5979] usb 4-1: IRDA class descriptor not found, device not bound [ 567.692766][ T5979] usb 4-1: USB disconnect, device number 84 [ 567.865313][ T5898] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 568.049327][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 568.090518][ T5898] usb 6-1: unable to get BOS descriptor or descriptor too short [ 568.127248][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 568.189083][ T5898] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 568.235300][ T5898] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 568.333325][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2054'. [ 568.360203][ T5898] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 568.405532][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.431391][T13737] loop2: detected capacity change from 0 to 7 [ 568.456509][ T5898] usb 6-1: Product: syz [ 568.472684][T13737] Dev loop2: unable to read RDB block 7 [ 568.482579][ T5898] usb 6-1: Manufacturer: syz [ 568.514794][ T5898] usb 6-1: SerialNumber: syz [ 568.520360][T13737] loop2: AHDI p1 p3 [ 568.543028][T13737] loop2: partition table partially beyond EOD, truncated [ 568.589802][T13737] loop2: p1 start 2349049979 is beyond EOD, truncated [ 568.710848][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 569.299584][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 569.417077][T13739] syzkaller0: entered promiscuous mode [ 569.427840][T13739] syzkaller0: entered allmulticast mode [ 569.689251][ T24] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 569.849288][ T24] usb 4-1: device descriptor read/64, error -71 [ 569.869217][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 570.119239][ T24] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 570.289826][ T24] usb 4-1: device descriptor read/64, error -71 [ 570.432366][ T7813] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 570.450117][ T24] usb usb4-port1: attempt power cycle [ 570.499071][T13751] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2061'. [ 570.809204][ T24] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 570.872467][ T24] usb 4-1: device descriptor read/8, error -71 [ 571.026524][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 571.139579][ T24] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 571.202099][ T24] usb 4-1: device descriptor read/8, error -71 [ 571.349480][ T24] usb usb4-port1: unable to enumerate USB device [ 571.631155][ T7813] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 572.039934][T13768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.149669][ T5898] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 572.175531][ T5898] usb 6-1: found format II with max.bitrate = 7, frame size=29911 [ 572.200111][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 572.229956][ T5209] Dev loop5: unable to read RDB block 7 [ 572.240995][ T5898] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 572.241924][ T5209] loop5: unable to read partition table [ 572.264891][ T5209] loop5: partition table beyond EOD, truncated [ 572.489393][ T5898] usb 6-1: USB disconnect, device number 73 [ 572.641073][T12463] udevd[12463]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.769190][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 573.070952][ T5898] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 573.249172][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 573.256997][ T5898] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 573.300564][ T5898] usb 6-1: config 0 has no interface number 0 [ 573.307032][ T5898] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 573.329336][ T5898] usb 6-1: config 0 interface 1 has no altsetting 0 [ 573.355384][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 573.385492][ T5979] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 573.402840][ T5898] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 573.428863][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.464207][ T5898] usb 6-1: Product: syz [ 573.472749][ T5898] usb 6-1: Manufacturer: syz [ 573.482905][ T5898] usb 6-1: SerialNumber: syz [ 573.519685][ T5898] usb 6-1: config 0 descriptor?? [ 573.581549][ T5979] usb 4-1: config 1 interface 0 has no altsetting 0 [ 573.643126][ T5979] usb 4-1: string descriptor 0 read error: -22 [ 573.652235][ T5979] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40 [ 573.669106][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.791250][ T5898] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 573.854405][ T5898] cx231xx 6-1:0.1: Failed to read PCB config [ 573.872253][ T5898] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 573.914881][ T5898] usb 6-1: USB disconnect, device number 74 [ 573.941831][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 574.218420][ T5979] razer 0003:1532:010D.0026: unknown main item tag 0x0 [ 574.230833][ T5979] razer 0003:1532:010D.0026: unknown main item tag 0x0 [ 574.256960][ T5979] razer 0003:1532:010D.0026: unknown main item tag 0x0 [ 574.284673][ T5979] razer 0003:1532:010D.0026: unknown main item tag 0x0 [ 574.294144][ T5979] razer 0003:1532:010D.0026: unknown main item tag 0x0 [ 574.319510][ T5979] razer 0003:1532:010D.0026: unknown main item tag 0x0 [ 574.328453][ T5979] razer 0003:1532:010D.0026: unknown main item tag 0x0 [ 574.338053][ T5979] razer 0003:1532:010D.0026: unknown main item tag 0x0 [ 574.391567][ T5979] razer 0003:1532:010D.0026: unknown main item tag 0x0 [ 574.399596][ T5898] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 574.431702][ T5979] razer 0003:1532:010D.0026: unknown main item tag 0x0 [ 574.520226][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 574.621480][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 574.649947][ T5898] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 574.694495][ T5898] usb 6-1: config 0 has no interface number 0 [ 574.716015][ T5898] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 574.757079][ T5898] usb 6-1: config 0 interface 1 has no altsetting 0 [ 574.772118][ T5898] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 574.794714][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.818822][ T5898] usb 6-1: Product: syz [ 574.828878][ T5898] usb 6-1: Manufacturer: syz [ 574.837489][ T5979] razer 0003:1532:010D.0026: failed to enable macro keys: -71 [ 574.847287][ T5898] usb 6-1: SerialNumber: syz [ 574.861648][T13779] loop2: detected capacity change from 0 to 7 [ 574.871999][T13779] Dev loop2: unable to read RDB block 7 [ 574.878712][ T5898] usb 6-1: config 0 descriptor?? [ 574.887048][T13779] loop2: AHDI p1 p3 [ 574.893695][T13779] loop2: partition table partially beyond EOD, truncated [ 574.910940][T13779] loop2: p1 start 2349049979 is beyond EOD, truncated [ 574.911483][ T5979] razer 0003:1532:010D.0026: hidraw0: USB HID vff.7f Device [HID 1532:010d] on usb-dummy_hcd.3-1/input0 [ 575.023328][ T5979] usb 4-1: USB disconnect, device number 89 [ 575.153186][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 575.323167][ T5898] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 575.361820][ T5898] cx231xx 6-1:0.1: Failed to read PCB config [ 575.368428][ T5898] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 575.383815][ T5898] usb 6-1: USB disconnect, device number 75 [ 575.460394][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 575.495878][T13782] fido_id[13782]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 575.739593][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 575.822390][ T5898] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 575.871974][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2074'. [ 575.909276][ T5906] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 575.989182][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 576.022084][ T5898] usb 6-1: config 4 has an invalid interface number: 203 but max is 3 [ 576.032446][ T5898] usb 6-1: config 4 has an invalid interface number: 201 but max is 3 [ 576.044845][ T5898] usb 6-1: config 4 has an invalid interface number: 144 but max is 3 [ 576.053663][ T5898] usb 6-1: config 4 has an invalid interface number: 93 but max is 3 [ 576.084120][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 576.089630][ T5898] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 576.100542][ T5898] usb 6-1: config 4 has an invalid interface number: 53 but max is 3 [ 576.130199][ T5898] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 576.141763][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 576.151249][ T5898] usb 6-1: config 4 has 5 interfaces, different from the descriptor's value: 4 [ 576.170700][ T5906] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 124, changing to 7 [ 576.207524][ T5898] usb 6-1: config 4 has no interface number 0 [ 576.224685][ T5898] usb 6-1: config 4 has no interface number 1 [ 576.234080][ T5906] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 576.244654][ T5898] usb 6-1: config 4 has no interface number 2 [ 576.251152][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.283694][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 576.283991][ T5898] usb 6-1: config 4 has no interface number 3 [ 576.305511][ T5906] usb 4-1: Product: syz [ 576.310020][ T5906] usb 4-1: Manufacturer: syz [ 576.314808][ T5906] usb 4-1: SerialNumber: syz [ 576.321588][ T5898] usb 6-1: config 4 has no interface number 4 [ 576.358186][ T5898] usb 6-1: config 4 interface 203 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 576.385261][ T5898] usb 6-1: too many endpoints for config 4 interface 201 altsetting 110: 55, using maximum allowed: 30 [ 576.417904][ T5898] usb 6-1: config 4 interface 201 altsetting 110 has an invalid descriptor for endpoint zero, skipping [ 576.438271][ T5898] usb 6-1: config 4 interface 201 altsetting 110 has an invalid descriptor for endpoint zero, skipping [ 576.473827][ T5898] usb 6-1: config 4 interface 201 altsetting 110 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 576.518296][ T5898] usb 6-1: config 4 interface 201 altsetting 110 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 576.533949][ T5209] Dev loop5: unable to read RDB block 7 [ 576.560703][ T5209] loop5: unable to read partition table [ 576.566869][ T5209] loop5: partition table beyond EOD, truncated [ 576.607944][ T5898] usb 6-1: config 4 interface 201 altsetting 110 has 5 endpoint descriptors, different from the interface descriptor's value: 55 [ 576.680916][ T5898] usb 6-1: config 4 interface 144 altsetting 119 has a duplicate endpoint with address 0xA, skipping [ 576.713904][ T5898] usb 6-1: config 4 interface 144 altsetting 119 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 576.726253][ T5898] usb 6-1: config 4 interface 144 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 576.740347][T13799] netlink: 'syz.5.2076': attribute type 1 has an invalid length. [ 576.780194][ T5898] usb 6-1: config 4 interface 144 altsetting 119 has a duplicate endpoint with address 0x8, skipping [ 576.795270][ T5898] usb 6-1: config 4 interface 144 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 576.809306][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 576.844071][ T5898] usb 6-1: config 4 interface 144 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 576.856266][ T5898] usb 6-1: config 4 interface 144 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 576.880838][ T5898] usb 6-1: config 4 interface 144 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 576.892931][ T5898] usb 6-1: config 4 interface 93 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 576.911773][ T5898] usb 6-1: config 4 interface 93 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 576.925929][ T5898] usb 6-1: config 4 interface 93 altsetting 8 endpoint 0x7 has an invalid bInterval 74, changing to 7 [ 576.939673][ T5898] usb 6-1: config 4 interface 93 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 576.952050][ T5898] usb 6-1: config 4 interface 93 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 576.965098][ T5898] usb 6-1: config 4 interface 93 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 576.987604][ T5898] usb 6-1: config 4 interface 93 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 576.999267][ T5898] usb 6-1: config 4 interface 93 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 577.010466][ T5898] usb 6-1: config 4 interface 93 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 577.025643][ T5898] usb 6-1: config 4 interface 93 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 577.044032][ T5898] usb 6-1: config 4 interface 93 altsetting 8 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 577.055538][ T5898] usb 6-1: config 4 interface 93 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 577.073471][ T5898] usb 6-1: config 4 interface 93 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 577.095584][ T5898] usb 6-1: config 4 interface 93 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 577.107653][ T5898] usb 6-1: config 4 interface 53 altsetting 0 endpoint 0x4 has an invalid bInterval 64, changing to 10 [ 577.119523][ T5898] usb 6-1: config 4 interface 53 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 577.137681][ T5898] usb 6-1: config 4 interface 53 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 577.149633][ T5898] usb 6-1: config 4 interface 53 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 577.162158][ T5898] usb 6-1: config 4 interface 53 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 577.174433][ T5898] usb 6-1: config 4 interface 53 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 577.192795][ T5898] usb 6-1: config 4 interface 53 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 577.204767][ T5898] usb 6-1: config 4 interface 53 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 577.221019][ T5898] usb 6-1: config 4 interface 53 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 577.232890][ T5898] usb 6-1: config 4 interface 53 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 577.243994][ T5898] usb 6-1: config 4 interface 203 has no altsetting 0 [ 577.250953][ T5898] usb 6-1: config 4 interface 201 has no altsetting 0 [ 577.258190][ T5898] usb 6-1: config 4 interface 144 has no altsetting 0 [ 577.278534][ T5898] usb 6-1: config 4 interface 93 has no altsetting 0 [ 577.286382][ T5898] usb 6-1: string descriptor 0 read error: -71 [ 577.295179][ T5898] usb 6-1: New USB device found, idVendor=12d1, idProduct=2aa2, bcdDevice=9b.f8 [ 577.308844][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.323901][ T5898] usb 6-1: Interface #144 referenced by multiple IADs [ 577.355631][ T5898] usb 6-1: can't set config #4, error -71 [ 577.361670][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 577.393615][ T5898] usb 6-1: USB disconnect, device number 76 [ 577.916136][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 578.442470][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 578.977370][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 579.531745][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 580.059619][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 580.584052][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 581.109510][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 581.425542][ T5906] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 581.452603][ T5906] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 581.461720][ T5906] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 581.639726][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 582.149232][T13797] netlink: 1039 bytes leftover after parsing attributes in process `syz.6.2075'. [ 582.165955][ T5899] usb 4-1: USB disconnect, device number 90 [ 582.166405][T13799] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 582.216273][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 582.538792][ T5209] Dev loop5: unable to read RDB block 7 [ 582.565050][ T5209] loop5: unable to read partition table [ 582.604390][ T5209] loop5: partition table beyond EOD, truncated [ 582.764212][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 583.052705][ T5979] usb 6-1: new low-speed USB device number 77 using dummy_hcd [ 583.141473][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.167601][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.321577][ T5979] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 583.339833][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 583.366738][ T5979] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 583.394058][ T5979] usb 6-1: config 0 interface 0 has no altsetting 0 [ 583.408055][ T5979] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 583.422073][ T5979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.442551][ T5979] usb 6-1: config 0 descriptor?? [ 583.480221][T13838] delete_channel: no stack [ 583.787076][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 583.787095][ T29] audit: type=1326 audit(1777062388.048:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe23a39cdd9 code=0x7ffc0000 [ 583.882472][T13822] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 583.889087][T13822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 583.890083][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 583.939514][ T29] audit: type=1326 audit(1777062388.048:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a39cdd9 code=0x7ffc0000 [ 583.961556][T13822] vhci_hcd vhci_hcd.0: Device attached [ 584.050819][ T29] audit: type=1326 audit(1777062388.048:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a39cdd9 code=0x7ffc0000 [ 584.061929][T13822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.191898][ T29] audit: type=1326 audit(1777062388.048:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a39cdd9 code=0x7ffc0000 [ 584.203738][T13822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.258108][ T5928] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 584.359124][ T29] audit: type=1326 audit(1777062388.078:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a39cdd9 code=0x7ffc0000 [ 584.439917][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 584.459946][ T29] audit: type=1326 audit(1777062388.078:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a39cdd9 code=0x7ffc0000 [ 584.551960][ T29] audit: type=1326 audit(1777062388.078:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a39cdd9 code=0x7ffc0000 [ 584.648142][ T29] audit: type=1326 audit(1777062388.078:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe23a39cdd9 code=0x7ffc0000 [ 584.667148][ T5979] hid_parser_main: 3989 callbacks suppressed [ 584.667205][ T5979] thrustmaster 0003:044F:B323.0027: unknown main item tag 0x6 [ 584.676745][ T5906] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 584.681810][ T5979] thrustmaster 0003:044F:B323.0027: invalid report_size 26545 [ 584.738577][ T5979] thrustmaster 0003:044F:B323.0027: item 0 2 1 7 parsing failed [ 584.749609][ T5979] thrustmaster 0003:044F:B323.0027: parse failed [ 584.757749][ T5979] thrustmaster 0003:044F:B323.0027: probe with driver thrustmaster failed with error -22 [ 584.809522][ T5928] usb 43-1: device descriptor read/64, error -71 [ 584.811223][ T29] audit: type=1326 audit(1777062388.078:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a39cdd9 code=0x7ffc0000 [ 584.874669][ T29] audit: type=1326 audit(1777062388.088:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a39cdd9 code=0x7ffc0000 [ 584.908824][ T5906] usb 1-1: not running at top speed; connect to a high speed hub [ 584.939567][ T5906] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 584.956683][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.981669][ T5906] usb 1-1: Product: syz [ 584.992856][ T5906] usb 1-1: Manufacturer: syz [ 584.999564][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 585.019343][ T5906] usb 1-1: SerialNumber: syz [ 585.028018][T13845] vhci_hcd: connection closed [ 585.030723][ T5899] usb 6-1: USB disconnect, device number 77 [ 585.042150][ T35] vhci_hcd vhci_hcd.5: stop threads [ 585.091304][ T35] vhci_hcd vhci_hcd.5: release socket [ 585.109545][ T35] vhci_hcd vhci_hcd.5: disconnect device [ 585.122796][ T5928] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 585.140076][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2096'. [ 585.156653][T13865] veth1_macvtap: left promiscuous mode [ 585.183132][ T5928] usb 43-1: enqueue for inactive port 0 [ 585.289497][ T5928] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 585.520350][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 585.549628][T13870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.565355][ T5906] usb 1-1: USB disconnect, device number 102 [ 585.573439][T13870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.713627][ T5209] Dev loop5: unable to read RDB block 7 [ 585.733978][ T5209] loop5: unable to read partition table [ 585.749374][ T5209] loop5: partition table beyond EOD, truncated [ 585.866421][T12722] udevd[12722]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.080299][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 586.127398][ T5209] Dev loop5: unable to read RDB block 7 [ 586.151721][ T5209] loop5: unable to read partition table [ 586.174666][ T5209] loop5: partition table beyond EOD, truncated [ 586.327986][T13881] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2104'. [ 586.349206][ T5899] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 586.382834][T13881] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 586.446465][ T5209] Dev loop5: unable to read RDB block 7 [ 586.469259][ T5209] loop5: unable to read partition table [ 586.492778][ T5209] loop5: partition table beyond EOD, truncated [ 586.541564][ T5899] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 586.592557][ T5899] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 586.631588][ T5899] usb 1-1: config 1 interface 0 has no altsetting 0 [ 586.653735][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 586.654278][ T5899] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 586.732859][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.765256][ T5899] usb 1-1: Product: syz [ 586.774843][ T5899] usb 1-1: Manufacturer: syz [ 586.784718][ T5899] usb 1-1: SerialNumber: syz [ 586.799482][ T5906] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 586.819389][ C1] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 586.842083][T13876] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 586.872606][T13876] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 586.939177][ T5906] usb 6-1: device descriptor read/64, error -71 [ 587.199854][ T5906] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 587.369553][ T5906] usb 6-1: device descriptor read/64, error -71 [ 587.414723][ T5899] rtl8150 1-1:1.0: couldn't reset the device [ 587.440201][ T5899] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 587.505794][ T5906] usb usb6-port1: attempt power cycle [ 587.534949][ T5899] usb 1-1: USB disconnect, device number 103 [ 587.719484][ T7815] net_ratelimit: 1 callbacks suppressed [ 587.719532][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 587.889122][ T5906] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 587.944544][ T5906] usb 6-1: device descriptor read/8, error -71 [ 587.974579][T13913] fuse: Unknown parameter 'group_i00000000000000000000' [ 588.219110][ T5906] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 588.259960][ T5906] usb 6-1: device descriptor read/8, error -71 [ 588.321241][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 588.389739][ T5906] usb usb6-port1: unable to enumerate USB device [ 588.549739][T13926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.879194][ T5928] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 588.889210][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 589.069157][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 589.083055][ T5928] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 589.101861][ T5928] usb 1-1: config 0 has no interface number 0 [ 589.117976][ T5928] usb 1-1: config 0 interface 184 has no altsetting 0 [ 589.139282][ T5928] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 589.159833][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.176830][ T5928] usb 1-1: Product: syz [ 589.185224][ T5928] usb 1-1: Manufacturer: syz [ 589.190861][ T5928] usb 1-1: SerialNumber: syz [ 589.210751][ T5928] usb 1-1: config 0 descriptor?? [ 589.454198][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 589.619700][T13933] syz_tun: entered allmulticast mode [ 589.636989][ T5209] Dev loop5: unable to read RDB block 7 [ 589.668235][ T5209] loop5: unable to read partition table [ 589.688737][ T5209] loop5: partition table beyond EOD, truncated [ 589.868648][ T5928] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 589.895761][ T5928] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 589.949259][ T5209] Dev loop5: unable to read RDB block 7 [ 589.965166][ T5209] loop5: unable to read partition table [ 589.980932][ T5209] loop5: partition table beyond EOD, truncated [ 590.072879][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 590.124904][ T5928] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 590.151161][ T5928] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 590.164198][ T5928] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 590.178651][ T5928] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 590.191470][ T5928] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 590.215874][ T5928] usb 1-1: USB disconnect, device number 104 [ 590.315531][T13942] netlink: 'syz.5.2124': attribute type 1 has an invalid length. [ 590.427832][T13942] 8021q: adding VLAN 0 to HW filter on device bond2 [ 590.487950][T13943] bond2: (slave gretap1): making interface the new active one [ 590.501259][T13942] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2124'. [ 590.518439][T13943] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 590.611035][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 590.786809][ T5209] Dev loop5: unable to read RDB block 7 [ 590.840890][ T5209] loop5: unable to read partition table [ 590.870859][ T5209] loop5: partition table beyond EOD, truncated [ 591.104597][T13952] fuse: Unknown parameter 'group_i00000000000000000000' [ 591.150437][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 591.236013][T13954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2129'. [ 591.275950][T13954] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2129'. [ 591.436026][T13958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.459374][ T5899] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 591.629330][ T5899] usb 6-1: device descriptor read/64, error -71 [ 591.752253][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 591.831875][T13962] syzkaller0: entered promiscuous mode [ 591.871540][T13962] syzkaller0: entered allmulticast mode [ 591.909152][ T5899] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 592.059385][ T5899] usb 6-1: device descriptor read/64, error -71 [ 592.189734][ T5899] usb usb6-port1: attempt power cycle [ 592.319420][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 592.454259][T13967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.481570][T13967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.538220][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 592.538242][ T29] audit: type=1326 audit(1777062396.798:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.3.2135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfff59cdd9 code=0x0 [ 592.546540][T13970] tipc: Enabling of bearer rejected, failed to enable media [ 592.578229][ T5899] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 592.609899][ T5899] usb 6-1: device descriptor read/8, error -71 [ 592.859308][ T5899] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 592.870078][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 592.899152][ T5899] usb 6-1: device descriptor read/8, error -71 [ 593.019738][ T5899] usb usb6-port1: unable to enumerate USB device [ 593.420722][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 593.990674][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 594.239323][ T5928] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 594.296208][T13988] fuse: Bad value for 'fd' [ 594.339527][T13988] fuse: Bad value for 'fd' [ 594.347502][ T5209] Dev loop5: unable to read RDB block 7 [ 594.367009][ T5209] loop5: unable to read partition table [ 594.385761][ T5209] loop5: partition table beyond EOD, truncated [ 594.450066][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 594.477784][ T5928] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 594.509270][ T5928] usb 4-1: config 0 has no interface number 0 [ 594.527362][ T5928] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 594.555339][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 594.569308][ T5928] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 594.592502][ T5928] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 594.616567][ T5928] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 594.656467][ T5928] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 594.675637][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.724789][ T5928] usb 4-1: config 0 descriptor?? [ 594.774988][ T5209] Dev loop5: unable to read RDB block 7 [ 594.811862][ T5209] loop5: unable to read partition table [ 594.842887][ T5209] loop5: partition table beyond EOD, truncated [ 594.853668][ T5928] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 595.119889][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 595.160470][T13985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2139'. [ 595.572722][T14010] netlink: 'syz.6.2147': attribute type 4 has an invalid length. [ 595.591824][ T5928] usb 4-1: USB disconnect, device number 91 [ 595.603333][T14010] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2147'. [ 595.685942][ T5928] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 595.710093][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 596.028240][T14014] netlink: 'syz.6.2148': attribute type 3 has an invalid length. [ 596.197623][T14016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.274025][T14016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.301771][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 596.813360][T14024] fuse: Unknown parameter 'group_id00000000000000000000' [ 596.872822][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 597.391071][T14031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.436750][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 597.486638][T14031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.904546][ T5209] Dev loop5: unable to read RDB block 7 [ 597.945487][ T5209] loop5: unable to read partition table [ 597.975240][ T5209] loop5: partition table beyond EOD, truncated [ 598.067682][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 598.264950][ T5209] Dev loop5: unable to read RDB block 7 [ 598.298536][ T5209] loop5: unable to read partition table [ 598.325244][ T5209] loop5: partition table beyond EOD, truncated [ 598.659497][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 599.120610][ T5209] Dev loop5: unable to read RDB block 7 [ 599.143063][ T5209] loop5: unable to read partition table [ 599.168044][ T5209] loop5: partition table beyond EOD, truncated [ 599.220302][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 599.686579][ T5209] Dev loop5: unable to read RDB block 7 [ 599.716611][ T5209] loop5: unable to read partition table [ 599.749904][ T5209] loop5: partition table beyond EOD, truncated [ 599.792812][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 599.816074][T14045] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2158'. [ 599.973986][T14065] fuse: Bad value for 'fd' [ 600.012701][T14065] fuse: Bad value for 'fd' [ 600.167117][ T5209] Dev loop5: unable to read RDB block 7 [ 600.197725][ T5209] loop5: unable to read partition table [ 600.225149][ T5209] loop5: partition table beyond EOD, truncated [ 600.379669][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 600.950411][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 601.520181][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 601.597793][ T29] audit: type=1326 audit(1777062405.858:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.5.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128f59cdd9 code=0x7ffc0000 [ 601.679312][ T29] audit: type=1326 audit(1777062405.858:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.5.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128f59cdd9 code=0x7ffc0000 [ 601.777925][ T5928] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 601.778268][ T29] audit: type=1326 audit(1777062405.918:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.5.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f128f59cdd9 code=0x7ffc0000 [ 601.884229][ T29] audit: type=1326 audit(1777062405.938:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.5.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128f59cdd9 code=0x7ffc0000 [ 601.911658][ T29] audit: type=1326 audit(1777062405.938:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.5.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128f59cdd9 code=0x7ffc0000 [ 601.988763][ T29] audit: type=1326 audit(1777062405.938:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.5.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f128f59cdd9 code=0x7ffc0000 [ 602.016830][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 602.026145][ T29] audit: type=1326 audit(1777062405.938:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.5.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128f59cdd9 code=0x7ffc0000 [ 602.056710][ T29] audit: type=1326 audit(1777062405.968:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.5.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f128f59cdd9 code=0x7ffc0000 [ 602.097518][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 602.116302][ T5209] Dev loop5: unable to read RDB block 7 [ 602.118360][ T29] audit: type=1326 audit(1777062405.988:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.5.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128f59cdd9 code=0x7ffc0000 [ 602.142773][ T5209] loop5: unable to read partition table [ 602.161185][ T5928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.187356][ T5209] loop5: partition table beyond EOD, truncated [ 602.187669][ T5928] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 602.222529][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.233154][ T29] audit: type=1326 audit(1777062405.988:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14068 comm="syz.5.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128f59cdd9 code=0x7ffc0000 [ 602.268871][ T5928] usb 1-1: config 0 descriptor?? [ 602.303245][ T5928] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 602.619780][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 602.701264][ T5979] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 602.864408][ T5979] usb 4-1: device descriptor read/64, error -71 [ 602.872213][ T5209] Dev loop5: unable to read RDB block 7 [ 602.884593][ T5209] loop5: unable to read partition table [ 602.905311][ T5209] loop5: partition table beyond EOD, truncated [ 603.090323][ T5209] Dev loop5: unable to read RDB block 7 [ 603.109828][ T5209] loop5: unable to read partition table [ 603.128722][ T5209] loop5: partition table beyond EOD, truncated [ 603.137663][ T5979] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 603.150379][T14107] fuse: Bad value for 'user_id' [ 603.164565][T14107] fuse: Bad value for 'user_id' [ 603.175698][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 603.289356][ T5979] usb 4-1: device descriptor read/64, error -71 [ 603.324280][T14087] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 603.422797][ T5979] usb usb4-port1: attempt power cycle [ 603.571097][T14114] syzkaller0: entered promiscuous mode [ 603.579200][T14114] syzkaller0: entered allmulticast mode [ 603.730333][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 603.779522][ T5979] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 603.801147][ T5979] usb 4-1: device descriptor read/8, error -71 [ 603.812504][ T5899] usb 1-1: USB disconnect, device number 105 [ 604.069422][ T5979] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 604.110283][ T5979] usb 4-1: device descriptor read/8, error -71 [ 604.230351][ T5979] usb usb4-port1: unable to enumerate USB device [ 604.279474][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 604.454224][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2182'. [ 604.859493][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 605.420789][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 605.784114][T14142] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2188'. [ 605.871187][T14142] syz_tun: entered allmulticast mode [ 605.940132][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 606.372652][ T5899] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 606.455612][ T5899] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz0] on syz0 [ 606.490244][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 606.631376][T14152] syzkaller0: entered promiscuous mode [ 606.661152][T14152] syzkaller0: entered allmulticast mode [ 606.866982][ T5209] Dev loop5: unable to read RDB block 7 [ 606.890929][ T5209] loop5: unable to read partition table [ 606.977603][ T5209] loop5: partition table beyond EOD, truncated [ 607.069121][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 607.486183][T14162] qrtr: Invalid version 6 [ 607.516858][T14162] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20003 [ 607.593347][T14162] Cannot find add_set index 0 as target [ 607.673954][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 608.275740][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 608.419399][ T5898] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 608.611694][ T5898] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 608.668278][ T5898] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 608.718251][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 608.763073][ T5898] usb 4-1: Product: syz [ 608.780347][ T5898] usb 4-1: Manufacturer: syz [ 608.795267][ T5898] usb 4-1: SerialNumber: syz [ 608.832245][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 609.100706][ T5898] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 96 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 609.399407][ T5898] usb 4-1: USB disconnect, device number 96 [ 609.408132][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 609.440053][ T5898] usblp0: removed [ 610.016037][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 610.609494][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 610.709563][ T5209] Dev loop5: unable to read RDB block 7 [ 610.731528][ T5209] loop5: unable to read partition table [ 610.759643][ T5209] loop5: partition table beyond EOD, truncated [ 610.775556][T14181] Cannot find add_set index 0 as target [ 611.018148][ T5209] Dev loop5: unable to read RDB block 7 [ 611.047090][ T5209] loop5: unable to read partition table [ 611.084533][ T5209] loop5: partition table beyond EOD, truncated [ 611.257496][T14200] syzkaller0: entered promiscuous mode [ 611.271033][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 611.293960][T14200] syzkaller0: entered allmulticast mode [ 611.387292][ T5209] Dev loop5: unable to read RDB block 7 [ 611.406765][ T5209] loop5: unable to read partition table [ 611.436710][ T5209] loop5: partition table beyond EOD, truncated [ 611.451950][T14204] loop2: detected capacity change from 0 to 7 [ 611.477015][T14204] Dev loop2: unable to read RDB block 7 [ 611.485072][T14204] loop2: AHDI p1 p3 [ 611.491803][T14204] loop2: partition table partially beyond EOD, truncated [ 611.504483][T14204] loop2: p1 start 2349049979 is beyond EOD, truncated [ 611.784485][T14206] netlink: 'syz.6.2205': attribute type 3 has an invalid length. [ 611.817322][T14206] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2205'. [ 611.845300][T14210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2204'. [ 611.902361][T14210] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2204'. [ 611.923937][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 612.482435][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 612.647917][ T5209] Dev loop5: unable to read RDB block 7 [ 612.657249][ T5209] loop5: unable to read partition table [ 612.667538][ T5209] loop5: partition table beyond EOD, truncated [ 613.026139][ T5209] Dev loop5: unable to read RDB block 7 [ 613.072365][ T5209] loop5: unable to read partition table [ 613.087512][ T5209] loop5: partition table beyond EOD, truncated [ 613.110260][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 613.129052][T14238] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 613.296914][T14239] : renamed from bond_slave_0 (while UP) [ 613.511339][ T5209] Dev loop5: unable to read RDB block 7 [ 613.530025][ T5209] loop5: unable to read partition table [ 613.569188][ T5898] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 613.579627][ T5209] loop5: partition table beyond EOD, truncated [ 613.713259][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 613.749907][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 613.803943][ T5898] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 613.867633][ T5898] usb 4-1: config 6 has no interface number 0 [ 613.927913][ T5898] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 613.966798][T14249] trusted_key: encrypted_key: insufficient parameters specified [ 613.984487][ T5898] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 614.040759][ T5898] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 614.103124][ T5898] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 614.143535][ T5898] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 614.176648][ T5898] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 614.208522][ T5898] usb 4-1: Product: syz [ 614.233090][ T5898] usb 4-1: Manufacturer: syz [ 614.252651][ T5898] usb 4-1: SerialNumber: syz [ 614.322067][ T5898] hso 4-1:6.2: Failed to find BULK eps [ 614.351920][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 614.534580][T14242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.581429][T14242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.628837][T14242] cifs: Unknown parameter 'g' [ 614.870628][ T5898] usb 4-1: USB disconnect, device number 97 [ 614.979643][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 615.584951][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 615.719721][ T29] audit: type=1800 audit(1777062419.978:553): pid=14254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2216" name="bus" dev="tmpfs" ino=1383 res=0 errno=0 [ 615.992424][T14258] syzkaller0: entered promiscuous mode [ 616.033970][T14258] syzkaller0: entered allmulticast mode [ 616.140448][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 616.729216][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 616.809122][ T5898] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 616.987327][ T5898] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 617.026676][ T5898] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 617.069385][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 617.125749][ T5898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 617.182051][ T5898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 617.251790][ T5898] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 617.276783][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 617.309817][ T5898] usb 4-1: Product: syz [ 617.320236][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 617.348651][ T5898] usb 4-1: Manufacturer: syz [ 617.385223][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 617.406466][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 617.435578][ T5898] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 617.461926][ T5898] cdc_wdm 4-1:1.0: Unknown control protocol [ 617.548786][ T5209] Dev loop5: unable to read RDB block 7 [ 617.570352][ T5209] loop5: unable to read partition table [ 617.587226][ T5209] loop5: partition table beyond EOD, truncated [ 617.783073][ T5209] Dev loop5: unable to read RDB block 7 [ 617.811959][ T5209] loop5: unable to read partition table [ 617.828372][ T5209] loop5: partition table beyond EOD, truncated [ 617.900504][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 617.966138][ T5209] Dev loop5: unable to read RDB block 7 [ 617.973385][ T5209] loop5: unable to read partition table [ 617.985004][ T5209] loop5: partition table beyond EOD, truncated [ 618.052707][T14284] netlink: 320 bytes leftover after parsing attributes in process `syz.6.2226'. [ 618.079343][T14284] openvswitch: netlink: Flow key attr not present in new flow. [ 618.096298][T14287] syzkaller0: entered promiscuous mode [ 618.103036][T14284] fuse: Bad value for 'fd' [ 618.114297][T14287] syzkaller0: entered allmulticast mode [ 618.204154][ T5209] Dev loop5: unable to read RDB block 7 [ 618.231464][ T5209] loop5: unable to read partition table [ 618.258205][ T5209] loop5: partition table beyond EOD, truncated [ 618.429650][T14297] fuse: Unknown parameter '' [ 618.460915][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 618.829426][ T5928] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 619.012934][ T5928] usb 6-1: not running at top speed; connect to a high speed hub [ 619.032316][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 619.050391][ T5928] usb 6-1: config 1 interface 0 altsetting 55 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 619.064121][ T5928] usb 6-1: config 1 interface 0 altsetting 55 endpoint 0x2 has invalid wMaxPacketSize 0 [ 619.083029][ T5928] usb 6-1: config 1 interface 0 has no altsetting 0 [ 619.127170][ T5928] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.40 [ 619.161444][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.187659][ T5928] usb 6-1: Product: 덟㞹㽇黄艎蝌⎟㟳䳕ﵻ퇶ጷ푔俹ᆌ铖⭂憳ꌭᦀ酳ᓁ࠲䡬꒷쁩⋥३빎鑜वᵏꋬধꕠ㚜ⶄꚺ摬ߊ휏셠馃遟涋萴엤跖ⁱ‰爅鉖ឩ뼾囁훊뮣꽬籤ꉷ엜㷬通褫䀍傞쵅⯄짛 [ 619.262022][ T5928] usb 6-1: Manufacturer: ծ㗬蚓⁄⭥胚솷䙊ꉥ濍ꌹ嶊ࡹ൘险梅ꢢࣃ본ビ䆵넢귉ˡ趕无镕绬ڵ獰挮聅菡벷螤鬭㩝꛳∶䵑엛㊫耘⟧ᦹ혍꾔ꠖꚑﾷ㫂刁걁㤚꣭즑⣰幛牄鏼껐᯺뉈w [ 619.388276][ T5928] usb 6-1: SerialNumber: 胍 [ 619.440071][T14307] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 619.473003][ T5898] usb 4-1: USB disconnect, device number 98 [ 619.626751][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 619.770297][T14307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.832247][T14297] ipip0: entered promiscuous mode [ 619.834010][T14307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.936052][T14297] ipip0: entered allmulticast mode [ 620.051778][ T5928] usbhid 6-1:1.0: can't add hid device: -71 [ 620.062620][ T5928] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 620.102962][ T5928] usb 6-1: USB disconnect, device number 86 [ 620.221194][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 620.814078][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 620.855668][ T5209] Dev loop5: unable to read RDB block 7 [ 620.881816][ T5209] loop5: unable to read partition table [ 620.906391][ T5209] loop5: partition table beyond EOD, truncated [ 621.041300][T14326] loop2: detected capacity change from 0 to 7 [ 621.066937][T14326] Dev loop2: unable to read RDB block 7 [ 621.074395][T14326] loop2: AHDI p1 p3 [ 621.089545][T14326] loop2: partition table partially beyond EOD, truncated [ 621.134177][T14326] loop2: p1 start 2349049979 is beyond EOD, truncated [ 621.364493][ T5209] Dev loop5: unable to read RDB block 7 [ 621.379654][ C1] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 621.421680][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 621.438315][ T5209] loop5: unable to read partition table [ 621.438589][ T5209] loop5: partition table beyond EOD, truncated [ 621.599098][ T5898] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 621.650940][T14313] syz.6.2234 (14313): drop_caches: 2 [ 621.794253][ T5898] usb 4-1: config 0 has no interfaces? [ 621.814765][ T5898] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 621.847596][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.879294][ T5898] usb 4-1: Product: syz [ 621.890114][ T5898] usb 4-1: Manufacturer: syz [ 621.906996][ T5898] usb 4-1: SerialNumber: syz [ 621.955094][ T5898] usb 4-1: config 0 descriptor?? [ 621.979382][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 622.110260][ T5209] Dev loop5: unable to read RDB block 7 [ 622.117563][ T5209] loop5: unable to read partition table [ 622.127321][ T5209] loop5: partition table beyond EOD, truncated [ 622.226606][ T5898] usb 4-1: USB disconnect, device number 99 [ 622.577062][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 622.623468][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2246'. [ 623.120546][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 623.366215][T14365] loop2: detected capacity change from 0 to 7 [ 623.386871][T14365] Dev loop2: unable to read RDB block 7 [ 623.397865][T14365] loop2: AHDI p1 p3 [ 623.408748][T14365] loop2: partition table partially beyond EOD, truncated [ 623.433338][T14365] loop2: p1 start 2349049979 is beyond EOD, truncated [ 623.481845][T14367] fuse: Invalid rootmode [ 623.690704][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 624.086727][T14374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.240667][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 624.330688][T14379] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 624.582875][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.590912][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.784739][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 625.089815][ T5209] Dev loop5: unable to read RDB block 7 [ 625.111354][ T5209] loop5: unable to read partition table [ 625.141146][ T5209] loop5: partition table beyond EOD, truncated [ 625.391705][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 625.476881][T14388] 0: reclassify loop, rule prio 0, protocol 800 [ 625.784048][ T5209] Dev loop5: unable to read RDB block 7 [ 625.818288][ T5209] loop5: unable to read partition table [ 625.849392][ T5209] loop5: partition table beyond EOD, truncated [ 625.959133][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 626.141504][ T5209] Dev loop5: unable to read RDB block 7 [ 626.153030][ T5209] loop5: unable to read partition table [ 626.189927][ T5209] loop5: partition table beyond EOD, truncated [ 626.201276][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2259'. [ 626.552679][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 626.616260][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2261'. [ 626.769099][ T5906] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 626.941093][ T5906] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 626.965498][ T5906] usb 6-1: config 0 has no interface number 0 [ 626.987902][ T5906] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 627.036745][ T5906] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 627.079077][ T5906] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 627.102947][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 627.159381][ T5906] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 627.187112][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 627.217313][ T5906] usb 6-1: Product: syz [ 627.231603][ T5906] usb 6-1: SerialNumber: syz [ 627.278013][ T5906] usb 6-1: config 0 descriptor?? [ 627.311946][ T5906] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 627.354894][ T5906] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input39 [ 627.507791][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 627.656538][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 627.727754][ T5898] usb 6-1: USB disconnect, device number 87 [ 627.796370][ T5898] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 627.973943][T14412] fuse: Invalid rootmode [ 628.269308][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 628.329589][ T5928] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 628.362125][ T5209] Dev loop5: unable to read RDB block 7 [ 628.372804][ T5209] loop5: unable to read partition table [ 628.383210][ T5209] loop5: partition table beyond EOD, truncated [ 628.530554][ T5928] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 628.540972][ T5928] usb 4-1: config 0 has no interface number 0 [ 628.555784][ T5928] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 628.586656][ T5928] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 628.600580][ T5928] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 628.614068][ T5928] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 628.628334][ T5928] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 628.644023][ T5928] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 628.664158][ T5928] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 628.674675][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.730312][ T5928] usb 4-1: config 0 descriptor?? [ 628.751527][T14411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 628.770499][T14411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 628.802668][ T5928] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 629.341521][ T47] net_ratelimit: 1 callbacks suppressed [ 629.341584][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 629.471286][ T5928] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 629.662615][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 629.704765][ T5928] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 629.725116][ T5928] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 629.735681][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.745856][ T5928] usb 1-1: Product: syz [ 629.750993][ T5928] usb 1-1: Manufacturer: syz [ 629.755671][ T5928] usb 1-1: SerialNumber: syz [ 629.770758][ T5928] usb 1-1: config 0 descriptor?? [ 629.798809][ T5899] usb 4-1: USB disconnect, device number 100 [ 629.856065][ T5899] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 629.909491][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 630.086229][ T5928] usb 1-1: USB disconnect, device number 107 [ 630.480518][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 630.570146][T14439] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 630.576821][T14439] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 630.589071][T14439] vhci_hcd vhci_hcd.0: Device attached [ 630.598763][T14444] vhci_hcd: connection closed [ 630.605775][ T7815] vhci_hcd vhci_hcd.1: stop threads [ 630.645496][ T7815] vhci_hcd vhci_hcd.1: release socket [ 630.663882][ T7815] vhci_hcd vhci_hcd.1: disconnect device [ 630.805375][ T5209] Dev loop5: unable to read RDB block 7 [ 630.832576][ T5209] loop5: unable to read partition table [ 630.863469][ T5209] loop5: partition table beyond EOD, truncated [ 631.039612][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 631.180423][ T5979] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 631.358638][ T5979] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.372913][ T5979] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.394996][ T5979] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 631.408654][ T5979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 631.421531][ T5979] usb 6-1: SerialNumber: syz [ 631.503884][ T5979] cdc_ether 6-1:1.0: skipping garbage [ 631.533935][ T5979] usb 6-1: No union descriptors [ 631.552156][ T5979] usb-storage 6-1:1.0: USB Mass Storage device detected [ 631.561683][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 631.630408][ T5979] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 631.890257][ T5906] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 632.067307][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.101307][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.130298][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 632.154433][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 632.194433][ T5906] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 632.222237][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.251704][ T5906] usb 4-1: config 0 descriptor?? [ 632.690492][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 632.769869][ T5906] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 633.249685][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 633.487552][ T5899] usb 4-1: USB disconnect, device number 101 [ 633.502236][T14465] usb 4-1: string descriptor 0 read error: -19 [ 633.666762][T14474] fido_id[14474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 633.795541][T14478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2285'. [ 633.806423][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 634.260795][ T5928] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 634.284558][ T5899] usb 6-1: USB disconnect, device number 88 [ 634.384247][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 634.459740][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 634.496381][ T5928] usb 1-1: config 164 has an invalid interface number: 7 but max is 0 [ 634.497328][ T5209] Dev loop5: unable to read RDB block 7 [ 634.559726][ T5928] usb 1-1: config 164 has no interface number 0 [ 634.587990][ T5209] loop5: unable to read partition table [ 634.588062][ T5928] usb 1-1: config 164 interface 7 has no altsetting 0 [ 634.614156][T14482] loop2: detected capacity change from 0 to 7 [ 634.643441][T14482] Dev loop2: unable to read RDB block 7 [ 634.672510][ T5928] usb 1-1: New USB device found, idVendor=045e, idProduct=0c5e, bcdDevice=98.d1 [ 634.687719][T14482] loop2: AHDI p1 p3 [ 634.701403][T14482] loop2: partition table partially beyond EOD, truncated [ 634.715102][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.728382][T14482] loop2: p1 start 2349049979 is beyond EOD, truncated [ 634.743741][ T5928] usb 1-1: Product: syz [ 634.755389][ T5928] usb 1-1: Manufacturer: syz [ 634.769523][ T5209] loop5: partition table beyond EOD, truncated [ 634.786581][ T5928] usb 1-1: SerialNumber: syz [ 634.907594][ T5928] r8152-cfgselector 1-1: Unknown version 0x0000 [ 634.961133][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 635.247017][T14478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.410867][T14478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.517825][ T5928] r8152 1-1:164.7: Expected endpoints are not found [ 635.543729][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 635.632180][ T5928] r8152-cfgselector 1-1: USB disconnect, device number 108 [ 635.854918][ T5209] Dev loop5: unable to read RDB block 7 [ 635.875725][ T5209] loop5: unable to read partition table [ 635.898593][ T5209] loop5: partition table beyond EOD, truncated [ 636.122531][T14501] netlink: 51 bytes leftover after parsing attributes in process `syz.5.2290'. [ 636.159609][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 636.211807][T14505] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 636.741282][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 636.840240][T14517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.889778][T14517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.911746][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2289'. [ 636.972008][ T5209] Dev loop5: unable to read RDB block 7 [ 636.981837][ T5209] loop5: unable to read partition table [ 637.004281][ T5209] loop5: partition table beyond EOD, truncated [ 637.042002][T14517] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2294'. [ 637.153085][T14507] ip6gretap0: entered promiscuous mode [ 637.172520][T14507] macvtap1: entered promiscuous mode [ 637.283364][T14507] ip6gretap0: left promiscuous mode [ 637.371909][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 637.422790][ T5209] Dev loop5: unable to read RDB block 7 [ 637.452568][ T5209] loop5: unable to read partition table [ 637.477927][ T5209] loop5: partition table beyond EOD, truncated [ 637.701120][ T5979] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 637.926339][ T5979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.953171][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 637.998036][ T5209] Dev loop5: unable to read RDB block 7 [ 638.006757][ T5209] loop5: unable to read partition table [ 638.029030][ T5209] loop5: partition table beyond EOD, truncated [ 638.053746][ T5979] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 638.084481][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.105557][ T5979] usb 1-1: Product: syz [ 638.139605][ T5979] usb 1-1: Manufacturer: syz [ 638.163979][ T5979] usb 1-1: SerialNumber: syz [ 638.230375][ T5979] usb 1-1: config 0 descriptor?? [ 638.295576][ T5979] usb 1-1: No union descriptors [ 638.453984][ T5979] usb 1-1: unsupported MDLM descriptors [ 638.499760][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 638.902435][T14523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.943995][T14523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.070063][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 639.630326][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.280771][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.899321][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 641.492832][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 641.835401][ T5209] Dev loop5: unable to read RDB block 7 [ 641.882283][ T5209] loop5: unable to read partition table [ 641.928833][ T5209] loop5: partition table beyond EOD, truncated [ 642.044450][ T5899] usb 1-1: USB disconnect, device number 109 [ 642.135201][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 642.219431][ T5906] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 642.468580][ T5906] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 642.521302][ T5906] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 642.546480][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.568262][ T5906] usb 6-1: Product: syz [ 642.578808][ T5906] usb 6-1: Manufacturer: syz [ 642.592233][ T5906] usb 6-1: SerialNumber: syz [ 642.790759][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 642.825773][ T5906] usb 6-1: selecting invalid altsetting 1 [ 642.850655][ T5906] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 642.850789][ T5906] dvb_usb_lmedm04 6-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 642.917014][ T5979] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 643.027190][ T5906] usb 6-1: USB disconnect, device number 89 [ 643.119333][ T5979] usb 4-1: device descriptor read/64, error -71 [ 643.382675][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 643.435301][ T5979] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 643.612810][ T5979] usb 4-1: device descriptor read/64, error -71 [ 643.645383][ T5209] Dev loop5: unable to read RDB block 7 [ 643.688601][ T5209] loop5: unable to read partition table [ 643.721036][ T5209] loop5: partition table beyond EOD, truncated [ 643.779601][ T5979] usb usb4-port1: attempt power cycle [ 643.805687][T14587] netlink: 484 bytes leftover after parsing attributes in process `syz.5.2313'. [ 643.951077][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 643.995970][ T5209] Dev loop5: unable to read RDB block 7 [ 644.012722][ T5209] loop5: unable to read partition table [ 644.035206][ T5209] loop5: partition table beyond EOD, truncated [ 644.170116][ T5979] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 644.273522][ T5979] usb 4-1: device descriptor read/8, error -71 [ 644.530626][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 644.563330][ T5979] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 644.631530][ T5979] usb 4-1: device descriptor read/8, error -71 [ 644.750714][ T5979] usb usb4-port1: unable to enumerate USB device [ 644.883382][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'. [ 645.026364][T14599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.091193][T14599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.092322][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.193390][T14599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.244279][T14599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.676590][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.953066][T14607] vlan3: entered promiscuous mode [ 646.029559][ T5979] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 646.216694][ T5979] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 646.245086][ T5979] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 646.262425][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 646.277588][ T5979] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.320967][ T5979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 646.356230][ T5979] usb 4-1: config 1 has no interface number 0 [ 646.382153][ T5979] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 646.410875][ T5979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.520534][ T5979] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 646.889320][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 647.057542][ T5979] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 647.080720][ T5209] Dev loop5: unable to read RDB block 7 [ 647.088705][ T5979] snd_usb_pod 4-1:1.1: invalid control EP [ 647.105068][ T5209] loop5: unable to read partition table [ 647.126343][ T5979] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 647.161047][ T5209] loop5: partition table beyond EOD, truncated [ 647.201506][ T5979] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 647.275101][ T5979] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 647.464608][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 648.041678][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 648.353412][ T5209] Dev loop5: unable to read RDB block 7 [ 648.375848][ T5209] loop5: unable to read partition table [ 648.403373][ T5209] loop5: partition table beyond EOD, truncated [ 648.628195][T14650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.646278][ T57] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 649.003617][ T5209] Dev loop5: unable to read RDB block 7 [ 649.040087][ T5209] loop5: unable to read partition table [ 649.083672][ T5209] loop5: partition table beyond EOD, truncated [ 649.126468][ T5899] usb 4-1: USB disconnect, device number 106 [ 649.380848][T14662] tipc: Enabling of bearer rejected, failed to enable media [ 649.410368][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 649.476506][ T5209] Dev loop5: unable to read RDB block 7 [ 649.505081][ T5209] loop5: unable to read partition table [ 649.537222][ T5209] loop5: partition table beyond EOD, truncated [ 649.627890][T14664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.645284][T14666] loop3: detected capacity change from 0 to 7 [ 649.666832][T14666] Dev loop3: unable to read RDB block 7 [ 649.684972][T14666] loop3: unable to read partition table [ 649.706110][T14666] loop3: partition table beyond EOD, truncated [ 649.734135][T14666] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 649.762611][ T5209] Dev loop3: unable to read RDB block 7 [ 649.768689][ T5209] loop3: unable to read partition table [ 649.775154][ T5209] loop3: partition table beyond EOD, truncated [ 649.972030][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 650.564743][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 651.130817][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 651.723360][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 652.169286][ T5209] Dev loop5: unable to read RDB block 7 [ 652.203879][ T5209] loop5: unable to read partition table [ 652.228869][ T5209] loop5: partition table beyond EOD, truncated [ 652.291651][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 652.472603][ T24] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 652.501039][ T5920] usb 6-1: new low-speed USB device number 90 using dummy_hcd [ 652.681466][ T24] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 652.699677][ T5920] usb 6-1: Invalid ep0 maxpacket: 32 [ 652.713190][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 652.754275][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 652.787176][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.823238][ T24] usb 1-1: Product: syz [ 652.844663][ T24] usb 1-1: Manufacturer: syz [ 652.861349][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 652.881233][ T24] usb 1-1: SerialNumber: syz [ 652.892891][ T5920] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 652.898477][ T24] usb 1-1: config 0 descriptor?? [ 652.929919][ T24] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 653.099395][ T5920] usb 6-1: Invalid ep0 maxpacket: 32 [ 653.130846][ T5920] usb usb6-port1: attempt power cycle [ 653.420900][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 653.479685][ T5920] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 653.560647][ T5920] usb 6-1: Invalid ep0 maxpacket: 32 [ 653.719452][ T5920] usb 6-1: new low-speed USB device number 93 using dummy_hcd [ 653.791310][ T5920] usb 6-1: Invalid ep0 maxpacket: 32 [ 653.810487][ T5920] usb usb6-port1: unable to enumerate USB device [ 653.963653][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 654.145089][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.173274][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.245471][ T24] usb 1-1: USB disconnect, device number 110 [ 654.267766][T14723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.357288][T14723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.540804][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 655.080926][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 655.229373][T14734] netlink: 484 bytes leftover after parsing attributes in process `syz.1.2356'. [ 655.445171][ T5209] Dev loop5: unable to read RDB block 7 [ 655.474263][ T5209] loop5: unable to read partition table [ 655.499816][ T5209] loop5: partition table beyond EOD, truncated [ 655.622056][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 655.850129][ T5906] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 656.029763][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 656.033241][ T5906] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 656.033276][ T5906] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 656.033302][ T5906] usb 6-1: config 0 interface 0 has no altsetting 0 [ 656.044152][ T5906] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 656.044187][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.044209][ T5906] usb 6-1: Product: syz [ 656.044226][ T5906] usb 6-1: Manufacturer: syz [ 656.044243][ T5906] usb 6-1: SerialNumber: syz [ 656.051530][ T5906] usb 6-1: config 0 descriptor?? [ 656.194260][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.281735][T14752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.282265][T14752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.283671][ T5906] gs_usb 6-1:0.0: Couldn't get device config: (err=-32) [ 656.283706][ T5906] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 656.699211][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.812101][T14764] netlink: 484 bytes leftover after parsing attributes in process `syz.0.2368'. [ 656.935550][T14768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2369'. [ 656.977968][ T29] audit: type=1326 audit(1777062461.238:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfff59cdd9 code=0x7ffc0000 [ 657.057438][ T29] audit: type=1326 audit(1777062461.288:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbfff59cdd9 code=0x7ffc0000 [ 657.142069][ T29] audit: type=1326 audit(1777062461.288:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfff59cdd9 code=0x7ffc0000 [ 657.210524][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 657.257405][ T29] audit: type=1326 audit(1777062461.288:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fbfff59cdd9 code=0x7ffc0000 [ 657.342298][ T29] audit: type=1326 audit(1777062461.288:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfff59cdd9 code=0x7ffc0000 [ 657.387792][ T29] audit: type=1326 audit(1777062461.288:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fbfff59cdd9 code=0x7ffc0000 [ 657.467753][ T29] audit: type=1326 audit(1777062461.288:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfff59cdd9 code=0x7ffc0000 [ 657.549680][ T5906] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 657.582247][ T29] audit: type=1326 audit(1777062461.318:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbfff59cdd9 code=0x7ffc0000 [ 657.657174][ T29] audit: type=1326 audit(1777062461.318:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfff59cdd9 code=0x7ffc0000 [ 657.716627][ T29] audit: type=1326 audit(1777062461.358:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.3.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfff59cdd9 code=0x7ffc0000 [ 657.740118][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 657.753684][ T5906] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 657.768552][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.801026][ T5906] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 657.819898][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 658.351320][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 658.764271][ T5928] usb 6-1: USB disconnect, device number 94 [ 658.890140][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 658.911926][ T5209] Dev loop5: unable to read RDB block 7 [ 658.961585][ T5209] loop5: unable to read partition table [ 658.998349][ T5209] loop5: partition table beyond EOD, truncated [ 659.478668][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 659.617852][ T5906] gspca_nw80x: reg_w err -71 [ 659.627172][ T5906] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 659.698886][ T5906] usb 1-1: USB disconnect, device number 111 [ 660.039413][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 660.508433][T14794] netlink: 'syz.6.2375': attribute type 1 has an invalid length. [ 660.543539][T14794] netlink: 'syz.6.2375': attribute type 2 has an invalid length. [ 660.602768][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 660.643927][ T5209] Dev loop5: unable to read RDB block 7 [ 660.656877][ T5209] loop5: unable to read partition table [ 660.683052][T14796] netlink: 'syz.6.2375': attribute type 1 has an invalid length. [ 660.690075][ T5209] loop5: partition table beyond EOD, truncated [ 660.735559][T14796] netlink: 'syz.6.2375': attribute type 2 has an invalid length. [ 660.988043][T14797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2374'. [ 661.056165][ T5209] Dev loop5: unable to read RDB block 7 [ 661.089131][ T5209] loop5: unable to read partition table [ 661.117835][ T5209] loop5: partition table beyond EOD, truncated [ 661.172818][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.520860][ T5920] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 661.703383][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 661.715668][T14813] netlink: 'syz.3.2381': attribute type 21 has an invalid length. [ 661.749436][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.780094][ T5920] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.801851][ T5920] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 661.861158][ T5920] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 661.928481][ T5920] usb 6-1: config 1 interface 2 has no altsetting 0 [ 661.952751][ T5920] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 661.978460][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.008010][ T5920] usb 6-1: Product: syz [ 662.019576][ T5920] usb 6-1: Manufacturer: syz [ 662.025363][ T5920] usb 6-1: SerialNumber: syz [ 662.075829][ T5920] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 662.093237][ T5920] usb 6-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 662.113197][ T5920] usb 6-1: found format II with max.bitrate = 3, frame size=7 [ 662.131182][ T5920] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 662.144131][ T5920] usb 6-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 662.164015][ T5920] usb 6-1: found format II with max.bitrate = 3, frame size=7 [ 662.187736][ T5920] usb 6-1: selecting invalid altsetting 0 [ 662.239384][T14815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.286378][ T5920] usb 6-1: selecting invalid altsetting 0 [ 662.298639][T14815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.319635][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.349448][T14813] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2381'. [ 662.593059][ T5920] usb 6-1: USB disconnect, device number 95 [ 662.765224][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2384'. [ 662.834674][T12469] udevd[12469]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 662.879531][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.908258][T14825] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 662.976632][T14825] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 663.028694][ T5209] Dev loop5: unable to read RDB block 7 [ 663.089812][ T5209] loop5: unable to read partition table [ 663.096988][ T5209] loop5: partition table beyond EOD, truncated [ 663.482855][ T47] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 663.528257][T14833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.568444][T14833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.959266][ T5898] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 664.029681][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 664.124941][ T5898] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 664.135637][ T5898] usb 4-1: config 0 has no interface number 1 [ 664.154521][ T5898] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 664.156499][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2387'. [ 664.176570][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2387'. [ 664.266343][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 664.589511][T11400] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 665.008060][ T5898] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 665.067837][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.119808][ T5898] usb 4-1: config 0 descriptor?? [ 665.141603][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 665.167739][ T5898] usb 4-1: can't set config #0, error -71 [ 665.217478][ T5898] usb 4-1: USB disconnect, device number 107 [ 665.731381][ T35] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.287661][T14855] syzkaller1: entered promiscuous mode [ 666.334466][T14855] syzkaller1: entered allmulticast mode [ 666.351767][ T7824] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.471337][ T5209] Dev loop5: unable to read RDB block 7 [ 666.485799][ T5209] loop5: unable to read partition table [ 666.498150][ T5209] loop5: partition table beyond EOD, truncated [ 666.773824][ T5209] Dev loop5: unable to read RDB block 7 [ 666.808324][ T5209] loop5: unable to read partition table [ 666.844114][ T5209] loop5: partition table beyond EOD, truncated [ 666.897165][T14867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.913711][ T7819] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.956067][T14867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.016220][T14873] vlan0: entered promiscuous mode [ 667.205480][T14872] syzkaller0: entered promiscuous mode [ 667.227026][T14872] syzkaller0: entered allmulticast mode [ 667.227291][T14876] netlink: 'syz.6.2399': attribute type 1 has an invalid length. [ 667.307010][ T5209] Dev loop5: unable to read RDB block 7 [ 667.332282][ T5209] loop5: unable to read partition table [ 667.357874][ T5209] loop5: partition table beyond EOD, truncated [ 667.620256][ T7813] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.004804][ T5209] Dev loop5: unable to read RDB block 7 [ 668.025255][ T5209] loop5: unable to read partition table [ 668.038098][ T5209] loop5: partition table beyond EOD, truncated [ 668.048404][T14889] loop3: detected capacity change from 0 to 7 [ 668.084484][T14889] Dev loop3: unable to read RDB block 7 [ 668.112470][T14889] loop3: unable to read partition table [ 668.143015][T14889] loop3: partition table beyond EOD, truncated [ 668.162244][ T7813] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.183629][T14889] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 668.410473][ T5209] Dev loop5: unable to read RDB block 7 [ 668.430563][ T5209] loop5: unable to read partition table [ 668.447516][ T5209] loop5: partition table beyond EOD, truncated [ 668.537844][ T5920] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 668.624857][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2410'. [ 668.736924][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.755238][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 668.800322][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 668.831818][ T5920] usb 1-1: config 9 has an invalid interface number: 3 but max is 0 [ 668.854205][ T5920] usb 1-1: config 9 has no interface number 0 [ 668.869703][ T5920] usb 1-1: config 9 interface 3 has no altsetting 0 [ 668.899492][ T5920] usb 1-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=53.63 [ 668.932103][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.949070][ T24] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 668.959455][ T5920] usb 1-1: Product: syz [ 668.975213][ T5920] usb 1-1: Manufacturer: syz [ 668.981274][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2409'. [ 669.015724][ T5920] usb 1-1: SerialNumber: syz [ 669.150959][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 669.178633][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 669.202082][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 97, changing to 7 [ 669.237193][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 24929, setting to 1024 [ 669.296021][ T5920] ftdi_sio 1-1:9.3: FTDI USB Serial Device converter detected [ 669.316718][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 669.338312][ T6543] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 669.364431][ T24] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 669.386996][ T24] usb 4-1: Manufacturer: syz [ 669.409678][ T5920] ftdi_sio ttyUSB0: unknown device type: 0x5363 [ 669.419886][ T24] usb 4-1: config 0 descriptor?? [ 669.448390][ T24] smsusb:smsusb_probe: board id=9, interface number 0 [ 669.484638][ T24] smsusb:siano_media_device_register: media controller created [ 669.523999][ T5920] usb 1-1: USB disconnect, device number 112 [ 669.603162][ T24] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 669.634932][ T5920] ftdi_sio 1-1:9.3: device disconnected [ 669.655027][ T24] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 669.747189][ T24] ------------[ cut here ]------------ [ 669.753190][ T24] !PageLargeKmalloc(page) [ 669.753213][ T24] WARNING: mm/slub.c:6471 at free_large_kmalloc+0x9b/0x110, CPU#1: kworker/1:0/24 [ 669.767454][ T24] Modules linked in: [ 669.772695][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.783720][ T24] Tainted: [L]=SOFTLOCKUP [ 669.788303][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 669.798685][ T24] Workqueue: usb_hub_wq hub_event [ 669.804448][ T24] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 669.810650][ T24] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 52 38 ff 8d 5b 41 5e 5d e9 1f 56 02 ff [ 669.831205][ T24] RSP: 0018:ffffc900001e6b20 EFLAGS: 00010206 [ 669.837450][ T24] RAX: 00000000ff000000 RBX: ffffea0001095880 RCX: 0000000000000001 [ 669.845576][ T24] RDX: ffffc900196f1000 RSI: ffff888042562000 RDI: ffffea0001095880 [ 669.853914][ T24] RBP: 0000000000000000 R08: ffff888054c72f03 R09: 1ffff1100a98e5e0 [ 669.862896][ T24] R10: dffffc0000000000 R11: ffffed100a98e5e1 R12: 1ffff1100ee63a82 [ 669.871020][ T24] R13: 0000000000000000 R14: ffff888054c72f60 R15: dffffc0000000000 [ 669.879363][ T24] FS: 0000000000000000(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 669.888618][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 669.895907][ T24] CR2: 000020000004a030 CR3: 0000000075860000 CR4: 00000000003526f0 [ 669.904130][ T24] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 669.912221][ T24] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 669.920581][ T24] Call Trace: [ 669.924236][ T24] [ 669.927541][ T24] usb_free_urb+0xd0/0x120 [ 669.932345][ T24] smsusb_term_device+0x1d7/0x3e0 [ 669.937970][ T24] smsusb_probe+0x1aba/0x2280 [ 669.943283][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 669.948552][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 669.954592][ T24] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 669.960605][ T24] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 669.966639][ T24] usb_probe_interface+0x659/0xc70 [ 669.972092][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 669.977783][ T24] really_probe+0x267/0xaf0 [ 669.983172][ T24] __driver_probe_device+0x1ef/0x380 [ 669.988660][ T24] driver_probe_device+0x4f/0x240 [ 669.993830][ T24] __device_attach_driver+0x279/0x430 [ 669.999337][ T24] bus_for_each_drv+0x258/0x2f0 [ 670.004432][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 670.011022][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 670.016769][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 670.022515][ T24] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 670.028564][ T24] __device_attach+0x2c5/0x450 [ 670.033453][ T24] ? __pfx___device_attach+0x10/0x10 [ 670.038879][ T24] ? _raw_spin_unlock+0x28/0x50 [ 670.044310][ T24] device_initial_probe+0xa1/0xd0 [ 670.049938][ T24] bus_probe_device+0x12a/0x220 [ 670.054998][ T24] device_add+0x7e9/0xbb0 [ 670.059650][ T24] usb_set_configuration+0x1a87/0x2110 [ 670.065330][ T24] usb_generic_driver_probe+0x8d/0x150 [ 670.071735][ T24] usb_probe_device+0x1c4/0x3b0 [ 670.076683][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 670.082146][ T24] really_probe+0x267/0xaf0 [ 670.087027][ T24] __driver_probe_device+0x1ef/0x380 [ 670.092565][ T24] driver_probe_device+0x4f/0x240 [ 670.097827][ T24] __device_attach_driver+0x279/0x430 [ 670.103726][ T24] bus_for_each_drv+0x258/0x2f0 [ 670.108672][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 670.114871][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 670.120467][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 670.125987][ T24] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 670.132224][ T24] __device_attach+0x2c5/0x450 [ 670.137192][ T24] ? __pfx___device_attach+0x10/0x10 [ 670.142675][ T24] ? _raw_spin_unlock+0x28/0x50 [ 670.147585][ T24] device_initial_probe+0xa1/0xd0 [ 670.152957][ T24] bus_probe_device+0x12a/0x220 [ 670.154934][ T7815] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 670.157868][ T24] device_add+0x7e9/0xbb0 [ 670.157918][ T24] usb_new_device+0xa08/0x16f0 [ 670.157961][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 670.157992][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 670.158028][ T24] hub_event+0x2a1c/0x4f30 [ 670.158055][ T24] ? do_raw_spin_unlock+0xf5/0x210 [ 670.158147][ T24] ? __pfx_hub_event+0x10/0x10 [ 670.158175][ T24] ? process_scheduled_works+0xa70/0x1860 [ 670.158220][ T24] ? process_scheduled_works+0xa70/0x1860 [ 670.158254][ T24] ? process_scheduled_works+0xa70/0x1860 [ 670.158306][ T24] process_scheduled_works+0xb5d/0x1860 [ 670.233244][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 670.239442][ T24] ? assign_work+0x3d5/0x5e0 [ 670.244232][ T24] worker_thread+0xa53/0xfc0 [ 670.249066][ T24] kthread+0x388/0x470 [ 670.253224][ T24] ? __pfx_worker_thread+0x10/0x10 [ 670.258594][ T24] ? __pfx_kthread+0x10/0x10 [ 670.263763][ T24] ret_from_fork+0x514/0xb70 [ 670.268554][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 670.275336][ T24] ? __switch_to+0xc79/0x1410 [ 670.280398][ T24] ? __pfx_kthread+0x10/0x10 [ 670.285190][ T24] ret_from_fork_asm+0x1a/0x30 [ 670.290612][ T24] [ 670.293780][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 670.301121][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.312035][ T24] Tainted: [L]=SOFTLOCKUP [ 670.316529][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 670.326630][ T24] Workqueue: usb_hub_wq hub_event [ 670.331805][ T24] Call Trace: [ 670.335307][ T24] [ 670.338463][ T24] vpanic+0x56c/0xa60 [ 670.342585][ T24] ? __pfx__printk+0x10/0x10 [ 670.347597][ T24] ? __pfx_vpanic+0x10/0x10 [ 670.352327][ T24] ? is_bpf_text_address+0x292/0x2b0 [ 670.357768][ T24] ? is_bpf_text_address+0x26/0x2b0 [ 670.363117][ T24] panic+0xc5/0xd0 [ 670.366875][ T24] ? __pfx_panic+0x10/0x10 [ 670.371342][ T24] ? ret_from_fork_asm+0x1a/0x30 [ 670.376431][ T24] __warn+0x315/0x4c0 [ 670.380472][ T24] ? free_large_kmalloc+0x9b/0x110 [ 670.385647][ T24] ? free_large_kmalloc+0x9b/0x110 [ 670.390814][ T24] __report_bug+0x29a/0x540 [ 670.395472][ T24] ? device_initial_probe+0xa1/0xd0 [ 670.400799][ T24] ? bus_probe_device+0x12a/0x220 [ 670.406073][ T24] ? device_add+0x7e9/0xbb0 [ 670.410616][ T24] ? free_large_kmalloc+0x9b/0x110 [ 670.415928][ T24] ? __pfx___report_bug+0x10/0x10 [ 670.421158][ T24] ? usb_new_device+0xa08/0x16f0 [ 670.426460][ T24] ? hub_event+0x2a1c/0x4f30 [ 670.431194][ T24] ? process_scheduled_works+0xb5d/0x1860 [ 670.437484][ T24] ? smscore_unregister_device+0x651/0x780 [ 670.443528][ T24] ? free_large_kmalloc+0x9b/0x110 [ 670.449131][ T24] report_bug+0x16a/0x220 [ 670.453495][ T24] ? free_large_kmalloc+0x9b/0x110 [ 670.458728][ T24] ? free_large_kmalloc+0x9d/0x110 [ 670.464505][ T24] handle_bug+0x9c/0x200 [ 670.468804][ T24] exc_invalid_op+0x1a/0x50 [ 670.473754][ T24] asm_exc_invalid_op+0x1a/0x20 [ 670.479415][ T24] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 670.485255][ T24] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 52 38 ff 8d 5b 41 5e 5d e9 1f 56 02 ff [ 670.505066][ T24] RSP: 0018:ffffc900001e6b20 EFLAGS: 00010206 [ 670.511248][ T24] RAX: 00000000ff000000 RBX: ffffea0001095880 RCX: 0000000000000001 [ 670.519416][ T24] RDX: ffffc900196f1000 RSI: ffff888042562000 RDI: ffffea0001095880 [ 670.527493][ T24] RBP: 0000000000000000 R08: ffff888054c72f03 R09: 1ffff1100a98e5e0 [ 670.535814][ T24] R10: dffffc0000000000 R11: ffffed100a98e5e1 R12: 1ffff1100ee63a82 [ 670.543880][ T24] R13: 0000000000000000 R14: ffff888054c72f60 R15: dffffc0000000000 [ 670.552238][ T24] usb_free_urb+0xd0/0x120 [ 670.556916][ T24] smsusb_term_device+0x1d7/0x3e0 [ 670.562150][ T24] smsusb_probe+0x1aba/0x2280 [ 670.567126][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 670.572182][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 670.578163][ T24] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 670.584075][ T24] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 670.590116][ T24] usb_probe_interface+0x659/0xc70 [ 670.595379][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 670.601154][ T24] really_probe+0x267/0xaf0 [ 670.606040][ T24] __driver_probe_device+0x1ef/0x380 [ 670.611448][ T24] driver_probe_device+0x4f/0x240 [ 670.616587][ T24] __device_attach_driver+0x279/0x430 [ 670.622381][ T24] bus_for_each_drv+0x258/0x2f0 [ 670.627359][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 670.633378][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 670.638865][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 670.644267][ T24] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 670.650726][ T24] __device_attach+0x2c5/0x450 [ 670.656090][ T24] ? __pfx___device_attach+0x10/0x10 [ 670.661778][ T24] ? _raw_spin_unlock+0x28/0x50 [ 670.666848][ T24] device_initial_probe+0xa1/0xd0 [ 670.671929][ T24] bus_probe_device+0x12a/0x220 [ 670.676805][ T24] device_add+0x7e9/0xbb0 [ 670.681185][ T24] usb_set_configuration+0x1a87/0x2110 [ 670.687020][ T24] usb_generic_driver_probe+0x8d/0x150 [ 670.692596][ T24] usb_probe_device+0x1c4/0x3b0 [ 670.697478][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 670.702958][ T24] really_probe+0x267/0xaf0 [ 670.707659][ T24] __driver_probe_device+0x1ef/0x380 [ 670.713059][ T24] driver_probe_device+0x4f/0x240 [ 670.718293][ T24] __device_attach_driver+0x279/0x430 [ 670.724257][ T24] bus_for_each_drv+0x258/0x2f0 [ 670.729483][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 670.735760][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 670.741242][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 670.746734][ T24] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 670.752567][ T24] __device_attach+0x2c5/0x450 [ 670.757362][ T24] ? __pfx___device_attach+0x10/0x10 [ 670.762674][ T24] ? _raw_spin_unlock+0x28/0x50 [ 670.769058][ T24] device_initial_probe+0xa1/0xd0 [ 670.774409][ T24] bus_probe_device+0x12a/0x220 [ 670.779486][ T24] device_add+0x7e9/0xbb0 [ 670.783974][ T24] usb_new_device+0xa08/0x16f0 [ 670.789044][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 670.794578][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 670.799806][ T24] hub_event+0x2a1c/0x4f30 [ 670.804246][ T24] ? do_raw_spin_unlock+0xf5/0x210 [ 670.809604][ T24] ? __pfx_hub_event+0x10/0x10 [ 670.814494][ T24] ? process_scheduled_works+0xa70/0x1860 [ 670.820275][ T24] ? process_scheduled_works+0xa70/0x1860 [ 670.826117][ T24] ? process_scheduled_works+0xa70/0x1860 [ 670.831994][ T24] process_scheduled_works+0xb5d/0x1860 [ 670.837786][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 670.843999][ T24] ? assign_work+0x3d5/0x5e0 [ 670.848628][ T24] worker_thread+0xa53/0xfc0 [ 670.853450][ T24] kthread+0x388/0x470 [ 670.857556][ T24] ? __pfx_worker_thread+0x10/0x10 [ 670.862689][ T24] ? __pfx_kthread+0x10/0x10 [ 670.867321][ T24] ret_from_fork+0x514/0xb70 [ 670.872029][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 670.877169][ T24] ? __switch_to+0xc79/0x1410 [ 670.882046][ T24] ? __pfx_kthread+0x10/0x10 [ 670.886664][ T24] ret_from_fork_asm+0x1a/0x30 [ 670.891580][ T24] [ 670.895080][ T24] Kernel Offset: disabled [ 670.899848][ T24] Rebooting in 86400 seconds..