last executing test programs: 14.083254837s ago: executing program 3 (id=5219): syz_open_dev$sg(0x0, 0x489, 0x600002) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffe0000000000, 0xfa11, 0xfffffffe}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) r2 = io_uring_setup(0x6b4b, &(0x7f0000000000)={0x0, 0x60a7, 0x20, 0xfffffffc, 0x2a6}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) unshare(0x20040600) flistxattr(r4, &(0x7f00000001c0)=""/245, 0xf5) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x0, 0x0, 0x148, 0xf0, 0x148, 0x29c, 0x240, 0x240, 0x29c, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}, @common=@unspec=@connmark={{0x2c}, {0xfffffffc, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x3, 0x8, 0x1}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x188, 0x1ac, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x8, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@unspec=@state={{0x24}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x0, 0x3ff}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x38c) sendmsg$nl_route(r5, 0x0, 0x20048000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f0000000380)) 12.627814279s ago: executing program 4 (id=5223): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r3 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) getdents(r5, &(0x7f00000000c0)=""/35, 0x23) getdents64(r5, 0xffffffffffffffff, 0x43) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x95b6}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000004c0)={0x16, 0x2, 0x0, "dd3e1ddbc8e90cb57346e6c94dfa5bf04abc3e8fc2976136531a27a41db375d7"}) 11.909101969s ago: executing program 3 (id=5224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000001c0)={@remote, r4}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x2, 0xfffffffe, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000001280)='ntfs3\x00', 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r10, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r9, r10, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x325840, 0x115) 10.776749514s ago: executing program 4 (id=5227): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x3000)=nil, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='+rdma +cguset '], 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/wakeup_count', 0x0, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0xffffffffffffffb6) syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') 9.894459532s ago: executing program 0 (id=5228): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r8], 0x1, r6, r7, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') lseek(r13, 0x98b, 0x2) getdents64(r13, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r11, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, 0xa}, @void, @void}}}, 0x1c}}, 0x0) r14 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r14, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6174020000000000000000000000000000000000000000000000000000000005"], 0x74) setsockopt$sock_int(r10, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000a80)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0x9, 0x0, 0x1, [@generic="43b21089"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendto$unix(r9, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb7b901701476430f}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x1c8, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0xb9, 0xc5, "b9b1f4a1be7e9baa5bde792cc00a49d92dbd2058e770d79a9e14d363bb41796eb3e0818992989139067956e0891f2e7cc7fcb7b4936f28f8ebd244287d7884efb0513be10b8d23c17b8d8eb9fc456678615a12f6940befcf525414fa8fa722843e03d085b97d1859f113108851f9e639c61afff40ac25a1193efa1a5290d7578de5ca8ec55ea80930c39c6cb975b0c6c7e3cc34bbc2ecea207291f2c6a5da9de9b946cc24ebf21626668cad2f70869bec5b92ce49a"}, @NL80211_ATTR_VENDOR_DATA={0xe6, 0xc5, "c33c431e41af66d57a4bfe4028b7bbdf591e88e612e3200a297a0f1d9b776047fd0770d4c67587dcafaeb715d0b035f0041f2b23b619cf914eebd3c27ef7212a583977071f8c42aac33fee77df4ebbc5d1922b0ca477f6b89f6b988c76b6d69e3e0b39cd846b8b2f01a84a6cd2f1f861e7ace25ca66f4c7d0828c98750b6d031308287f5e70d908660e823d9ee2b80895103aeeacb1564d8398f5371aa4b86200dc43088992adf771c7f1949ade4e234f9869b26b27e85f43b25898aaf8f8a9f32c3878de8abd7939bc5bca9e6b0d5b50367dd665cecf9fa7a8417c0cd354c53605c"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2ae00000}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) recvfrom$unix(r10, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0401000000000000802800000008000300", @ANYRES32=r16, @ANYBLOB="040013000a000600"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 9.801059221s ago: executing program 3 (id=5229): socket$inet_udplite(0x2, 0x2, 0x88) r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0, 0x0, r4}) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000002000)) socket$inet(0x2, 0x2000000080002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000800)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="5a6c9751f005", @device_a, @device_b, {0xb, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x1fde, 0x3, 0x3, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x1d, "eb6b1108de23112607474e7dcd00c3c3b426ced4470b1572c2cb10dd9a"}, {@device_b, @broadcast}, {@broadcast, @broadcast}, {@device_a, @device_b, 0xa2, "443bd46e284476c5a5ae1595e64735f60fd7356f4e9ee8ee0fdeb3b6f703ef884fd6969311a5dbc0998bcc62242d0d91e0e87e18198cf09277d0bcc200b7ddca1ae54e0c3f4c84bcecef4d1bece0fc135991343766242b7e9e0edee2d66df3deb4f83c6c3bb37811d316c10c9ae55c086d90221704c93c0c8dca8ac2772051ec91e1efc82b2eaf7c96f6643fe53b0177586c15b8d53004a8d6dc0146631299408c3b"}, {@broadcast, @device_a, 0x9b, "1388c0e2ef1d5f21328c8fc90173dfbb2454e8e9c28efa323511234dd185ac42b817f2adf00012b276f962f0edbc02df9c25086d7156a8a1b925fc7b2eabfbfa43277e767654d3c4d2651707092a73912c9ca16c94142622a16a651a85d2ba3ed5e8d767b9b81937869f053e215c3dc410707ee5e9a41c1a447307075cb29fe73e49a662a6de6c250ac57a36d8a6168ee44201738900c0248352f9"}, {@device_b, @device_a, 0x57, "c31e2fb1c19dd0499a27042c516771f13083a5f92ca6beaa79857394e1cdfcf959404f9c62f5b37122700b42918bb7244534a23f9a822cc0dea131ebe390e35fa677ff38b925668fd1bc1ce08c2a5933e8d546d3ff86cd"}]}, 0x22c) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x27) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 9.437194643s ago: executing program 1 (id=5230): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r0, 0x7fff, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_snmp6\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf250100000044070880380000801400040002004e207f0000010000000000000000200004000a004e2100000001fe8000000000000000000000000000aa040000009800008024000100000000000000000000000000000000000000000000000000000000000000000008000a0001000000200004000a004e230000000100000000000000000000000000000000960d000024000200722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca24000200d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a6040000805c00008008000300050000001400040002004e23ac1414aa000000000000000024000200f793f1dc8368b9309484a83ed7029bd346e38b70e680c8162763c5539c1426d30800030002000000080003000100000008000a0001000000d80200801400040002004e23e000000200000000000000000800030002000000060005000500000024000200524ad0b1e0dceae5bea7c1b5029320e20f8d3b596df04ce932e5f6db615c15398402098028000080060001000a00000014000200fe800000000000000000000000000040050003000100000040000080060001000200000008000200ac1e01010500030001000000060001000a0000001400020000000000000000000000ffffe00000010500030000000000a0000080060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200ff01000000000000000000000000000105000300020000000600010002000000080002000a01010205000300000000000600010002000000080002000000000005000300030000007c000080060001000200000008000200e00000020500030006000000060001000200000008000200ac1414bb0500030002000000060001000200000008000200640101010500030003000000060001000200000008000200640101020500030003000000060001000200000008000200ac1e01010500030001000000040000801c000080060001000200000008000200000000000500030003000000dc000080060001000a0000001400020000000000000000000000ffffac1e00010500030000000000060001000a000000140002002001000000000000000000000000000105000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f000001050003000100000000080002000a0101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000a0000001400020000000000000000000000000000000004000000000000000008000a0001000000f4010080200004000a004e2200000004fe880000000000000000000000000001010000002400010000000000000000000000000000000000000000000000000000000000000000001400040002004e23e000000200000000000000005001098034000080060001000200000008000200ac1e00010500030003000000060001000200000008000200e0000002050003000200000094000080060001000200000008000200000000000500030003000000060001000200000008000200ac14143f0500030003000000060001000a00000014000200fe8000000000000000000000000000220500030003000000060001000a00000014000200000000000000000000000000000000010500030003000000060001bd000200000008000200ac141429050003000100000040000080060001000200000008000200e00000020500030003000000060001000a0000001400020000000000000000000000000000000000050003000000000028000080060001000a0000001400020000000000000000000000ffffac1414bb05000300020000001c000080060001000200000008000200e0000002050003000000000006000500050000001400040002004e2064010101000000000000000008000a0001000000240002009719d2edda23592449434336c7e9f3a89a1845fb283d61bcc291e3b774d85de0d0000080200004000a004e2100000100fe8000000000000000000000000000bbfdffffff24000200e050c75bb3599e01a1f0d47378bd76d943440925400018dabb4518b46d02f16208000300040000005c00098058000080060001000200000008000200ac1414420500030000000000060001000a00000014000200fe80000000000000000000000000001905000300010000000600010002000000080002006401010105000300017f040024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c7400008008000a0001000000200004000a004e2200000005fe8000000000000000000000000000aa0500000024000100"/1829], 0x76c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000a00000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 9.020310643s ago: executing program 0 (id=5232): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r0, 0x7fff, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_snmp6\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="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"/1829], 0x76c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000a00000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 7.504475879s ago: executing program 2 (id=5234): socket(0x23, 0x5, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5}) 7.121716052s ago: executing program 3 (id=5235): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000dc0)=""/4096, 0x1000, 0x2, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @loopback, 0x10000}}, 0x24) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x50) 6.923769068s ago: executing program 1 (id=5236): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x814) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064d1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 6.716487278s ago: executing program 0 (id=5237): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @broadcast}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0xc4, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}]}, @NFTA_RULE_USERDATA={0x67, 0x7, 0x1, 0x0, "39080eded84fcdbc09da6c2c66bad7e0b520e0cd0f2a3c678155d7bfb5a9b5b2c61b37c5ab985f1cb7ed86d4e08fdb79e26c28a534b2bb6a4d20e16786c7ed69420fa533025fccf83954070c70417fa5d2731c3d1c453a851296259e8e2665934b0229"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) listen(0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4) openat$tun(0xffffff9c, 0x0, 0x4002, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 6.230424933s ago: executing program 2 (id=5238): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000091) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r6, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1}) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5, r6}) 5.920564464s ago: executing program 4 (id=5239): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @broadcast}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0xc4, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}]}, @NFTA_RULE_USERDATA={0x67, 0x7, 0x1, 0x0, "39080eded84fcdbc09da6c2c66bad7e0b520e0cd0f2a3c678155d7bfb5a9b5b2c61b37c5ab985f1cb7ed86d4e08fdb79e26c28a534b2bb6a4d20e16786c7ed69420fa533025fccf83954070c70417fa5d2731c3d1c453a851296259e8e2665934b0229"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) listen(0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4) openat$tun(0xffffff9c, 0x0, 0x4002, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 5.620003627s ago: executing program 1 (id=5240): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r0, 0x7fff, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_snmp6\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="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"], 0x76c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000a00000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 5.581674877s ago: executing program 2 (id=5241): socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, 0x0, 0x1, 0x0, &(0x7f0000000400)) statx(r3, 0x0, 0x400, 0x7ff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r4 = socket(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x39, {0x9, 0xd, 0x2040000, 0x3, 0xfffffffd, 0xfffffffe}}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 5.539120007s ago: executing program 0 (id=5242): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8c51318ed599eacd}, 0xc, &(0x7f0000000300)={&(0x7f0000003ac0)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x77f052fe}, @NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2bb50b92}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e909a66}]}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x118, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0xfc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'bond0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x76e596061d14be0f, 0x0, 0x5}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14}}, 0x2d8}, 0x1, 0x0, 0x0, 0x8000}, 0x40804) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x10200300) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3, r4}, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x20044014) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, 0x0) sched_setattr(0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000022020000"], 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 5.001868796s ago: executing program 4 (id=5243): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8c51318ed599eacd}, 0xc, &(0x7f0000000300)={&(0x7f0000003ac0)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x77f052fe}, @NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2bb50b92}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e909a66}]}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x118, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0xfc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'bond0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x76e596061d14be0f, 0x0, 0x5}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14}}, 0x2d8}, 0x1, 0x0, 0x0, 0x8000}, 0x40804) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x10200300) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3, r4}, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x20044014) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, 0x0) sched_setattr(0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000022020000"], 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 3.794459233s ago: executing program 3 (id=5244): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r0, 0x7fff, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_snmp6\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf250100000044070880380000801400040002004e207f0000010000000000000000200004000a004e2100000001fe8000000000000000000000000000aa040000009800008024000100000000000000000000000000000000000000000000000000000000000000000008000a0001000000200004000a004e230000000100000000000000000000000000000000960d000024000200722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca24000200d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a6040000805c00008008000300050000001400040002004e23ac1414aa000000000000000024000200f793f1dc8368b9309484a83ed7029bd346e38b70e680c8162763c5539c1426d30800030002000000080003000100000008000a0001000000d80200801400040002004e23e000000200000000000000000800030002000000060005000500000024000200524ad0b1e0dceae5bea7c1b5029320e20f8d3b596df04ce932e5f6db615c15398402098028000080060001000a00000014000200fe800000000000000000000000000040050003000100000040000080060001000200000008000200ac1e01010500030001000000060001000a0000001400020000000000000000000000ffffe00000010500030000000000a0000080060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200ff01000000000000000000000000000105000300020000000600010002000000080002000a01010205000300000000000600010002000000080002000000000005000300030000007c000080060001000200000008000200e00000020500030006000000060001000200000008000200ac1414bb0500030002000000060001000200000008000200640101010500030003000000060001000200000008000200640101020500030003000000060001000200000008000200ac1e01010500030001000000040000801c000080060001000200000008000200000000000500030003000000dc000080060001000a0000001400020000000000000000000000ffffac1e00010500030000000000060001000a000000140002002001000000000000000000000000000105000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f000001050003000100000000080002000a0101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000a0000001400020000000000000000000000000000000004000000000000000008000a0001000000f4010080200004000a004e2200000004fe880000000000000000000000000001010000002400010000000000000000000000000000000000000000000000000000000000000000001400040002004e23e000000200000000000000005001098034000080060001000200000008000200ac1e00010500030003000000060001000200000008000200e0000002050003000200000094000080060001000200000008000200000000000500030003000000060001000200000008000200ac14143f0500030003000000060001000a00000014000200fe8000000000000000000000000000220500030003000000060001000a00000014000200000000000000000000000000000000010500030003000000060001bd000200000008000200ac141429050003000100000040000080060001000200000008000200e00000020500030003000000060001000a0000001400020000000000000000000000000000000000050003000000000028000080060001000a0000001400020000000000000000000000ffffac1414bb05000300020000001c000080060001000200000008000200e0000002050003000000000006000500050000001400040002004e2064010101000000000000000008000a0001000000240002009719d2edda23592449434336c7e9f3a89a1845fb283d61bcc291e3b774d85de0d0000080200004000a004e2100000100fe8000000000000000000000000000bbfdffffff24000200e050c75bb3599e01a1f0d47378bd76d943440925400018dabb4518b46d02f16208000300040000005c00098058000080060001000200000008000200ac1414420500030000000000060001000a00000014000200fe80000000000000000000000000001905000300010000000600010002000000080002006401010105000300017f040024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c7400008008000a0001000000200004000a00"], 0x76c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000a00000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 3.775922699s ago: executing program 4 (id=5245): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x7, 0x9, 0x0, 0x7}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0205fc090c0000000f0f0000000000000500060000000e000a004e24fffffffdfc010000000000000000000000000000988500000000000005000500000000000a004e22fffff800fc0100000000000000000000000000010600000000000000d3ebde15c70a36c11a304d20943630d88a5e3e5872dfa380952195d9b0310cfc99ab5a847a237b8ca233c37fcbe8624b050df63458228d0951ed8bef784968b50261560f09d865d9a2834f50f1c31a39f3aa4a0df39fec808075a33ba421aaa6096583e6b818892fcb4ffc91ac6865bfa8055681d2837b972dded2d8b965981bd17eb1d83413a96f791f16d3c92e76f1deaef8f0a023c264b121b7c5f039cd039c4a21be4688a72663d38414c897cf35cdc896037ef39abcef247096ebc67e3c72175539107de37c8e86a74427e5b812ff8a44db84573f4deb88cdb047fd5aad3b864fe3dac309c7cfa2b1d448585bfc443df5ac21cbf41713e19c301a2a0cc50c4f2a041ff12d81f0df40d800c8a2352c957db4500b254fb7a36cb4eb9ca912f9e41e435f0eb245a464dffc91aa901de9fdefe51b7b68453d30f3b095c89898c5bfb06d740daa2a24f3a50c8bca3216edf943fa3e48565bc5423377677f7d8a2cdb6fd603d5a5d646000e2da04ebb"], 0x60}, 0x1, 0x400000000000000}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) accept4(r2, 0x0, &(0x7f0000000000), 0x80000) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_setup(0x466, &(0x7f0000000440)={0x0, 0x86ed, 0x40, 0x2}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0xfd00, @l2tp={0x2, 0x0, @empty, 0x3, 0x1000000}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, @llc={0x1a, 0x201, 0x8, 0x2, 0xf8, 0x1, @remote}, 0x4fe, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfd, 0xffffffff, 0xfffd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) setsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x183001, 0x188) syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') 3.695946991s ago: executing program 0 (id=5246): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000780)={0x20, r7, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44094) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@remote, r9}, 0x14) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r11, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) socket(0x840000000002, 0x3, 0xff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 3.341828888s ago: executing program 1 (id=5247): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r0, 0x7fff, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_snmp6\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="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"], 0x76c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000a00000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 3.197003303s ago: executing program 2 (id=5248): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8c51318ed599eacd}, 0xc, &(0x7f0000000300)={&(0x7f0000003ac0)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x77f052fe}, @NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2bb50b92}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e909a66}]}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x118, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0xfc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'bond0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x76e596061d14be0f, 0x0, 0x5}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14}}, 0x2d8}, 0x1, 0x0, 0x0, 0x8000}, 0x40804) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x10200300) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3, r4}, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x20044014) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, 0x0) sched_setattr(0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000022020000"], 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 1.969771799s ago: executing program 2 (id=5249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffb) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4004800, &(0x7f0000000180)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x6, 0x200000000000000, 0xfffffe0000000001, 0xfa11, 0xb21}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea22000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) socket$unix(0x1, 0x5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) 1.333207124s ago: executing program 3 (id=5250): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ffb000/0x3000)=nil, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='+rdma +cguset '], 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/wakeup_count', 0x0, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0xffffffffffffffb6) syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') 1.332869708s ago: executing program 4 (id=5251): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x814) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000"], 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064d1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 853.250771ms ago: executing program 1 (id=5252): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x2, 0x7, 0x5a, @remote, @dev={0xfe, 0x80, '\x00', 0x17}, 0x80, 0x7800, 0x3, 0x4}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@getchain={0x2c, 0x66, 0x102, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x10, 0xe}, {0x8, 0xffff}, {0x2, 0x2}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffff6, 0x3) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x0, 0x1}, 0xffffffffffffff29) openat$ttyS3(0xffffff9c, &(0x7f0000000b00), 0x1, 0x0) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000540), 0xc) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661757d7420ab91f884fdf1667e757365723a73797a2030301030306095360411000000"], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = epoll_create1(0x80000) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000080)) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000002080)={0xe15, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00 ', 0x18, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0xfe, 0x2}]}}}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_int(r3, &(0x7f0000000380)=0xfffffffffffffffe, 0x12) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0xffffffff, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) 820.49056ms ago: executing program 0 (id=5262): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r0, 0x7fff, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_snmp6\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf250100000044070880380000801400040002004e207f0000010000000000000000200004000a004e2100000001fe8000000000000000000000000000aa040000009800008024000100000000000000000000000000000000000000000000000000000000000000000008000a0001000000200004000a004e230000000100000000000000000000000000000000960d000024000200722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca24000200d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a6040000805c00008008000300050000001400040002004e23ac1414aa000000000000000024000200f793f1dc8368b9309484a83ed7029bd346e38b70e680c8162763c5539c1426d30800030002000000080003000100000008000a0001000000d80200801400040002004e23e000000200000000000000000800030002000000060005000500000024000200524ad0b1e0dceae5bea7c1b5029320e20f8d3b596df04ce932e5f6db615c15398402098028000080060001000a00000014000200fe800000000000000000000000000040050003000100000040000080060001000200000008000200ac1e01010500030001000000060001000a0000001400020000000000000000000000ffffe00000010500030000000000a0000080060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200ff01000000000000000000000000000105000300020000000600010002000000080002000a01010205000300000000000600010002000000080002000000000005000300030000007c000080060001000200000008000200e00000020500030006000000060001000200000008000200ac1414bb0500030002000000060001000200000008000200640101010500030003000000060001000200000008000200640101020500030003000000060001000200000008000200ac1e01010500030001000000040000801c000080060001000200000008000200000000000500030003000000dc000080060001000a0000001400020000000000000000000000ffffac1e00010500030000000000060001000a000000140002002001000000000000000000000000000105000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f000001050003000100000000080002000a0101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000a0000001400020000000000000000000000000000000004000000000000000008000a0001000000f4010080200004000a004e2200000004fe880000000000000000000000000001010000002400010000000000000000000000000000000000000000000000000000000000000000001400040002004e23e000000200000000000000005001098034000080060001000200000008000200ac1e00010500030003000000060001000200000008000200e0000002050003000200000094000080060001000200000008000200000000000500030003000000060001000200000008000200ac14143f0500030003000000060001000a00000014000200fe8000000000000000000000000000220500030003000000060001000a00000014000200000000000000000000000000000000010500030003000000060001bd000200000008000200ac141429050003000100000040000080060001000200000008000200e00000020500030003000000060001000a0000001400020000000000000000000000000000000000050003000000000028000080060001000a0000001400020000000000000000000000ffffac1414bb05000300020000001c000080060001000200000008000200e0000002050003000000000006000500050000001400040002004e2064010101000000000000000008000a0001000000240002009719d2edda23592449434336c7e9f3a89a1845fb283d61bcc291e3b774d85de0d0000080200004000a004e2100000100fe8000000000000000000000000000bbfdffffff24000200e050c75bb3599e01a1f0d47378bd76d943440925400018dabb4518b46d02f16208000300040000005c00098058000080060001000200000008000200ac1414420500030000000000060001000a00000014000200fe80000000000000000000000000001905000300010000000600010002000000080002006401010105000300017f040024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c7400008008000a0001000000200004000a004e2200000005fe8000000000000000000000000000aa0500000024000100000000000000000000000000000000000000000000000000000000000000000024000200039265d561d14f4ab7e7b2034d7be9dc7fac6e631abb"], 0x76c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000a00000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 382.729367ms ago: executing program 2 (id=5253): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @broadcast}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0xc4, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}]}, @NFTA_RULE_USERDATA={0x67, 0x7, 0x1, 0x0, "39080eded84fcdbc09da6c2c66bad7e0b520e0cd0f2a3c678155d7bfb5a9b5b2c61b37c5ab985f1cb7ed86d4e08fdb79e26c28a534b2bb6a4d20e16786c7ed69420fa533025fccf83954070c70417fa5d2731c3d1c453a851296259e8e2665934b0229"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) listen(0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4) openat$tun(0xffffff9c, 0x0, 0x4002, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 0s ago: executing program 1 (id=5254): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r8], 0x1, r6, r7, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') lseek(r13, 0x98b, 0x2) getdents64(r13, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r11, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, 0xa}, @void, @void}}}, 0x1c}}, 0x0) r14 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r14, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6174020000000000000000000000000000000000000000000000000000000005"], 0x74) setsockopt$sock_int(r10, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000a80)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0x9, 0x0, 0x1, [@generic="43b21089"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendto$unix(r9, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb7b901701476430f}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x1c8, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0xb9, 0xc5, "b9b1f4a1be7e9baa5bde792cc00a49d92dbd2058e770d79a9e14d363bb41796eb3e0818992989139067956e0891f2e7cc7fcb7b4936f28f8ebd244287d7884efb0513be10b8d23c17b8d8eb9fc456678615a12f6940befcf525414fa8fa722843e03d085b97d1859f113108851f9e639c61afff40ac25a1193efa1a5290d7578de5ca8ec55ea80930c39c6cb975b0c6c7e3cc34bbc2ecea207291f2c6a5da9de9b946cc24ebf21626668cad2f70869bec5b92ce49a"}, @NL80211_ATTR_VENDOR_DATA={0xe6, 0xc5, "c33c431e41af66d57a4bfe4028b7bbdf591e88e612e3200a297a0f1d9b776047fd0770d4c67587dcafaeb715d0b035f0041f2b23b619cf914eebd3c27ef7212a583977071f8c42aac33fee77df4ebbc5d1922b0ca477f6b89f6b988c76b6d69e3e0b39cd846b8b2f01a84a6cd2f1f861e7ace25ca66f4c7d0828c98750b6d031308287f5e70d908660e823d9ee2b80895103aeeacb1564d8398f5371aa4b86200dc43088992adf771c7f1949ade4e234f9869b26b27e85f43b25898aaf8f8a9f32c3878de8abd7939bc5bca9e6b0d5b50367dd665cecf9fa7a8417c0cd354c53605c"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2ae00000}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) recvfrom$unix(r10, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0401000000000000802800000008000300", @ANYRES32=r16, @ANYBLOB="040013000a000600"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): -1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.926690][T14282] usb 2-1: config 0 descriptor?? [ 2246.578751][T19849] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2246.802627][T19849] usb 3-1: Using ep0 maxpacket: 8 [ 2246.952553][T19849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2247.043645][T19849] usb 3-1: config 0 has no interfaces? [ 2247.401596][T19849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2247.465216][T19849] usb 3-1: config 0 has no interfaces? [ 2247.482851][T19849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2247.540265][T19849] usb 3-1: config 0 has no interfaces? [ 2247.563148][T28291] program syz.0.4630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2247.582066][T19849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2247.608525][T19849] usb 3-1: config 0 has no interfaces? [ 2247.625104][T19849] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2247.665457][T19849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.709334][T19849] usb 3-1: config 0 descriptor?? [ 2249.211257][T28291] syz.0.4630 (28291): drop_caches: 2 [ 2249.541551][ T5891] usb 2-1: USB disconnect, device number 99 [ 2249.731258][T10816] usb 3-1: USB disconnect, device number 97 [ 2251.030843][T28305] tipc: Failed to remove unknown binding: 66,1,1/577707666:1169434491/1169434493 [ 2251.064663][T28305] tipc: Failed to remove unknown binding: 66,1,1/577707666:1169434491/1169434493 [ 2251.075253][T28305] tipc: Failed to remove unknown binding: 66,1,1/577707666:1169434491/1169434493 [ 2251.600940][T28326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4624'. [ 2251.822295][T28325] vlan0: entered promiscuous mode [ 2251.878408][T28325] bridge0: entered promiscuous mode [ 2253.276508][T28335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4628'. [ 2255.678424][T14282] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2255.686382][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 2255.818776][T14282] usb 4-1: device descriptor read/64, error -32 [ 2255.882045][ T5891] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2256.038128][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 2256.058313][T14282] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2256.105663][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.194804][ T5891] usb 3-1: config 0 has no interfaces? [ 2256.228618][T14282] usb 4-1: Using ep0 maxpacket: 8 [ 2256.249704][T14282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.301169][T14282] usb 4-1: config 0 has no interfaces? [ 2256.352955][T14282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.376811][T14282] usb 4-1: config 0 has no interfaces? [ 2256.420818][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.437394][T19849] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2256.462598][ T5891] usb 3-1: config 0 has no interfaces? [ 2256.528651][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.540234][ T5891] usb 3-1: config 0 has no interfaces? [ 2256.653222][T19849] usb 2-1: Using ep0 maxpacket: 8 [ 2256.679692][T28378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4637'. [ 2256.699531][T19849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.719187][T14282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.734745][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.758522][T19849] usb 2-1: config 0 has no interfaces? [ 2256.798509][T19849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.833709][T19849] usb 2-1: config 0 has no interfaces? [ 2256.866620][T19849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.878337][T14282] usb 4-1: config 0 has no interfaces? [ 2256.898422][ T5891] usb 3-1: config 0 has no interfaces? [ 2256.908776][ T5891] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2256.929057][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.958204][T14282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.969878][T19849] usb 2-1: config 0 has no interfaces? [ 2256.988271][T19849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2257.019053][T14282] usb 4-1: config 0 has no interfaces? [ 2257.039778][ T5891] usb 3-1: config 0 descriptor?? [ 2257.048838][T14282] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2257.070327][T19849] usb 2-1: config 0 has no interfaces? [ 2257.079300][T19849] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2257.115163][T14282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.125576][T19849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.159709][T14282] usb 4-1: config 0 descriptor?? [ 2257.199149][T19849] usb 2-1: config 0 descriptor?? [ 2258.851389][T23595] usb 4-1: USB disconnect, device number 100 [ 2259.100239][ T5891] usb 3-1: USB disconnect, device number 98 [ 2259.411043][ T29] audit: type=1326 audit(1771432325.649:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.4639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2259.484780][ T29] audit: type=1326 audit(1771432325.649:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.4639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2259.491349][T28397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4641'. [ 2259.613147][T14282] usb 2-1: USB disconnect, device number 100 [ 2259.628836][ T29] audit: type=1326 audit(1771432325.649:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.4639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2259.718655][ T29] audit: type=1326 audit(1771432325.659:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.4639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2259.817130][ T29] audit: type=1326 audit(1771432325.659:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.4639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2259.885569][ T29] audit: type=1326 audit(1771432325.659:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.4639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2259.970354][ T29] audit: type=1326 audit(1771432325.659:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.4639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2260.056627][ T29] audit: type=1326 audit(1771432325.669:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.4639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2260.137386][ T29] audit: type=1326 audit(1771432325.699:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.4639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2260.215381][ T29] audit: type=1326 audit(1771432325.699:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28386 comm="syz.3.4639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2260.769669][T28407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4643'. [ 2263.065759][T28429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4647'. [ 2263.175049][T28430] kernel profiling enabled (shift: 63) [ 2263.186442][T28430] profiling shift: 63 too large [ 2263.887401][T19849] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2264.367336][T19849] usb 2-1: Using ep0 maxpacket: 8 [ 2264.489689][T19849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2264.512321][T19849] usb 2-1: config 0 has no interfaces? [ 2264.529425][T19849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2264.551097][T19849] usb 2-1: config 0 has no interfaces? [ 2264.562415][T19849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2264.578786][T19849] usb 2-1: config 0 has no interfaces? [ 2264.597173][T19849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2264.637562][T19849] usb 2-1: config 0 has no interfaces? [ 2264.658341][T19849] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2264.688565][T19849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2264.718729][T19849] usb 2-1: config 0 descriptor?? [ 2264.780692][T28447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4653'. [ 2265.387885][T19849] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 2265.552373][T19849] usb 3-1: device descriptor read/64, error -71 [ 2265.847338][T19849] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 2265.997346][T19849] usb 3-1: device descriptor read/64, error -71 [ 2266.128102][T19849] usb usb3-port1: attempt power cycle [ 2266.487367][T19849] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 2266.529141][T19849] usb 3-1: device descriptor read/8, error -71 [ 2266.777356][T19849] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 2266.840553][T19849] usb 3-1: device descriptor read/8, error -71 [ 2266.959547][T19849] usb usb3-port1: unable to enumerate USB device [ 2267.190734][T14282] usb 2-1: USB disconnect, device number 101 [ 2268.006854][T28471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4656'. [ 2268.494880][T28479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2270.279661][T28493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2270.489116][T28495] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2270.579492][T28496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4659'. [ 2270.641447][T28497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2272.118464][T14282] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2272.303356][T14282] usb 2-1: Using ep0 maxpacket: 8 [ 2272.326124][T14282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2272.353538][T14282] usb 2-1: config 0 has no interfaces? [ 2272.379053][T14282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2272.393150][T14282] usb 2-1: config 0 has no interfaces? [ 2272.440758][T28514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4663'. [ 2272.532266][T28512] vlan2: entered promiscuous mode [ 2272.538142][T28512] bridge0: entered promiscuous mode [ 2272.558390][T14282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2272.569534][T14282] usb 2-1: config 0 has no interfaces? [ 2272.663173][T28519] usb usb8: usbfs: process 28519 (syz.2.4665) did not claim interface 0 before use [ 2272.722684][T14282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2272.736549][T14282] usb 2-1: config 0 has no interfaces? [ 2272.756880][T14282] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2272.804787][T14282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.871015][T14282] usb 2-1: config 0 descriptor?? [ 2274.181910][T28525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2274.407505][T19849] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2274.507731][T28525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2274.516263][T28536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4668'. [ 2274.587307][T19849] usb 4-1: Using ep0 maxpacket: 8 [ 2274.615982][T19849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2274.660926][T19849] usb 4-1: config 0 has no interfaces? [ 2274.736398][T19849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2274.806921][T19849] usb 4-1: config 0 has no interfaces? [ 2274.866635][T19849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2274.923649][T14282] usb 2-1: USB disconnect, device number 102 [ 2274.953637][T19849] usb 4-1: config 0 has no interfaces? [ 2274.968352][T19849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2275.008041][T19849] usb 4-1: config 0 has no interfaces? [ 2275.030839][T19849] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2275.042711][T28525] bond3: (slave macvlan2): Releasing active interface [ 2275.068704][T19849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.137560][T19849] usb 4-1: config 0 descriptor?? [ 2275.403662][T28547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4670'. [ 2275.619737][T28547] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2277.161482][T19849] usb 4-1: USB disconnect, device number 101 [ 2277.432978][T28561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4672'. [ 2277.468414][T28561] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2279.951129][T28590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2281.869625][T28603] hub 1-0:1.0: USB hub found [ 2281.875737][T28603] hub 1-0:1.0: 1 port detected [ 2282.137622][T28615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4680'. [ 2282.210868][T28615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4680'. [ 2283.252556][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.259263][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.515082][T28623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4685'. [ 2283.722878][T28623] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2286.201227][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2286.201247][ T29] audit: type=1326 audit(1771432352.449:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28646 comm="syz.4.4690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2286.260689][ T29] audit: type=1326 audit(1771432352.489:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28646 comm="syz.4.4690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2286.307565][ T29] audit: type=1326 audit(1771432352.489:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28646 comm="syz.4.4690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2286.366041][ T29] audit: type=1326 audit(1771432352.489:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28646 comm="syz.4.4690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2286.410084][ T29] audit: type=1326 audit(1771432352.489:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28646 comm="syz.4.4690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2286.450441][ T29] audit: type=1326 audit(1771432352.489:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28646 comm="syz.4.4690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2286.481152][ T29] audit: type=1326 audit(1771432352.489:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28646 comm="syz.4.4690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2286.517641][ T29] audit: type=1326 audit(1771432352.489:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28646 comm="syz.4.4690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2286.600251][ T29] audit: type=1326 audit(1771432352.849:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28646 comm="syz.4.4690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2286.646533][ T29] audit: type=1326 audit(1771432352.849:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28646 comm="syz.4.4690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2287.068435][T14282] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2287.228224][T14282] usb 3-1: Using ep0 maxpacket: 32 [ 2287.238335][T14282] usb 3-1: config 0 has an invalid interface number: 138 but max is 0 [ 2287.263183][T14282] usb 3-1: config 0 has no interface number 0 [ 2287.284575][T14282] usb 3-1: config 0 interface 138 has no altsetting 0 [ 2287.331132][T14282] usb 3-1: New USB device found, idVendor=0e41, idProduct=4642, bcdDevice=d1.a3 [ 2287.415098][T14282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2287.477132][T14282] usb 3-1: Product: syz [ 2287.486444][T14282] usb 3-1: Manufacturer: syz [ 2287.514198][T14282] usb 3-1: SerialNumber: syz [ 2287.534959][T14282] usb 3-1: config 0 descriptor?? [ 2289.318197][T28680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2289.353107][T28680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2289.413189][T28680] bond0: (slave macvlan2): Releasing active interface [ 2289.441515][T28680] bond0: (slave macvlan2): the permanent HWaddr of slave - fa:c2:91:b8:79:b8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2289.692558][T28680] bond0: (slave macvlan3): Releasing active interface [ 2289.792376][T28687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2291.389558][T28706] hsr0: entered promiscuous mode [ 2291.404595][T28706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4699'. [ 2291.456576][T28706] hsr_slave_0: left promiscuous mode [ 2291.705491][T28706] hsr_slave_1: left promiscuous mode [ 2292.417343][T10816] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2292.440575][T28706] hsr0 (unregistering): left promiscuous mode [ 2292.470454][T14282] snd_usb_pod 3-1:0.138: Line 6 BassPODxt Live found [ 2292.504597][T14282] snd_usb_pod 3-1:0.138: set_interface failed [ 2292.523552][T14282] snd_usb_pod 3-1:0.138: Line 6 BassPODxt Live now disconnected [ 2292.538971][T14282] snd_usb_pod 3-1:0.138: probe with driver snd_usb_pod failed with error -71 [ 2292.610771][T14282] usb 3-1: USB disconnect, device number 103 [ 2292.628209][T10816] usb 1-1: Using ep0 maxpacket: 8 [ 2292.646389][T10816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2292.678760][T10816] usb 1-1: config 0 has no interfaces? [ 2292.721376][T10816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2292.743932][T10816] usb 1-1: config 0 has no interfaces? [ 2292.762652][T10816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2292.785352][T10816] usb 1-1: config 0 has no interfaces? [ 2292.801552][T10816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2292.864080][T10816] usb 1-1: config 0 has no interfaces? [ 2292.883539][T10816] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2292.908511][T10816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.937718][T10816] usb 1-1: config 0 descriptor?? [ 2293.511582][T28724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4703'. [ 2293.530172][T28724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4703'. [ 2293.540340][T28724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4703'. [ 2294.097305][T10816] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2294.370320][T10816] usb 2-1: Using ep0 maxpacket: 8 [ 2294.451104][T10816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2294.468777][T10816] usb 2-1: config 0 has no interfaces? [ 2294.507825][T10816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2294.523133][T10816] usb 2-1: config 0 has no interfaces? [ 2294.567877][T10816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2294.581319][T10816] usb 2-1: config 0 has no interfaces? [ 2294.689132][T10816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2294.710982][T10816] usb 2-1: config 0 has no interfaces? [ 2294.724557][T10816] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2294.745976][T10816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2294.777891][T10816] usb 2-1: config 0 descriptor?? [ 2295.034075][T10816] usb 1-1: USB disconnect, device number 25 [ 2298.014605][T28757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2298.156308][T14282] usb 2-1: USB disconnect, device number 103 [ 2300.341840][T28779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2305.071358][T28821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4720'. [ 2305.188219][T28821] usb usb8: usbfs: process 28821 (syz.0.4720) did not claim interface 0 before use [ 2306.559506][T28831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2307.277340][T10816] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2307.471492][T10816] usb 3-1: Using ep0 maxpacket: 8 [ 2307.478774][T10816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2307.499051][T10816] usb 3-1: config 0 has no interfaces? [ 2307.508585][T10816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2307.523744][T10816] usb 3-1: config 0 has no interfaces? [ 2307.547467][T10816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2307.560513][T10816] usb 3-1: config 0 has no interfaces? [ 2307.577034][T10816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2307.596999][T10816] usb 3-1: config 0 has no interfaces? [ 2307.609475][T10816] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2307.621624][T10816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.642979][T10816] usb 3-1: config 0 descriptor?? [ 2310.264481][T10816] usb 3-1: USB disconnect, device number 104 [ 2310.754695][T28873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2310.810004][T28873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2310.839882][T28873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2311.307396][T19849] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2311.479171][T19849] usb 4-1: Using ep0 maxpacket: 8 [ 2311.499082][T19849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2311.510237][T19849] usb 4-1: config 0 has no interfaces? [ 2311.529522][T19849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2311.550881][T19849] usb 4-1: config 0 has no interfaces? [ 2311.611893][T19849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2311.635987][T19849] usb 4-1: config 0 has no interfaces? [ 2311.751637][T19849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2311.772853][T19849] usb 4-1: config 0 has no interfaces? [ 2311.784389][T19849] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2311.803240][T19849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2311.834569][T19849] usb 4-1: config 0 descriptor?? [ 2312.550282][T28893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4735'. [ 2312.920694][T28898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4736'. [ 2312.942563][T28898] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2313.863528][T18235] usb 4-1: USB disconnect, device number 102 [ 2314.430876][T28911] blktrace: Concurrent blktraces are not allowed on sg0 [ 2314.450601][T28912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4739'. [ 2315.658146][T14282] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2315.818624][T14282] usb 3-1: Using ep0 maxpacket: 8 [ 2315.828368][T18235] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2315.842747][T14282] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2315.856567][T14282] usb 3-1: config 0 has no interfaces? [ 2315.857523][T19849] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2315.873711][T14282] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2315.890093][T14282] usb 3-1: config 0 has no interfaces? [ 2315.911507][T14282] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2315.923053][T14282] usb 3-1: config 0 has no interfaces? [ 2315.931183][T14282] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2315.943152][T14282] usb 3-1: config 0 has no interfaces? [ 2315.952107][T14282] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2315.962207][T14282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2315.990036][T18235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2316.001197][T18235] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2316.017945][T18235] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2316.029297][T18235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.049574][T14282] usb 3-1: config 0 descriptor?? [ 2316.067935][T19849] usb 1-1: Using ep0 maxpacket: 8 [ 2316.074191][T18235] usb 2-1: config 0 descriptor?? [ 2316.078576][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.095763][T19849] usb 1-1: config 0 has no interfaces? [ 2316.116001][T18235] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2316.132715][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.148859][T19849] usb 1-1: config 0 has no interfaces? [ 2316.156662][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.170346][T19849] usb 1-1: config 0 has no interfaces? [ 2316.180584][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.193134][T19849] usb 1-1: config 0 has no interfaces? [ 2316.201776][T19849] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2316.214985][T19849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.242163][T19849] usb 1-1: config 0 descriptor?? [ 2316.264879][T28910] hsr0: entered promiscuous mode [ 2316.271096][T28912] hsr_slave_0: left promiscuous mode [ 2316.296874][T28912] hsr_slave_1: left promiscuous mode [ 2316.335785][T28912] hsr0 (unregistering): left promiscuous mode [ 2316.470710][T19849] usb 2-1: USB disconnect, device number 104 [ 2316.480510][T10816] usb 1-1: USB disconnect, device number 26 [ 2317.459058][T14282] usb 3-1: USB disconnect, device number 105 [ 2317.548271][T18235] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2317.711604][T18235] usb 1-1: Using ep0 maxpacket: 8 [ 2317.749208][T18235] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2317.760359][T18235] usb 1-1: config 0 has no interfaces? [ 2317.770877][T18235] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2317.784636][T18235] usb 1-1: config 0 has no interfaces? [ 2317.795556][T18235] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2317.811696][T18235] usb 1-1: config 0 has no interfaces? [ 2317.820595][T28925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2317.842967][T18235] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2317.901095][T18235] usb 1-1: config 0 has no interfaces? [ 2317.932716][T18235] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2318.069668][T18235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2318.163326][T18235] usb 1-1: config 0 descriptor?? [ 2319.042185][T28935] netlink: 'syz.4.4744': attribute type 2 has an invalid length. [ 2319.071684][T28935] netlink: 'syz.4.4744': attribute type 2 has an invalid length. [ 2319.481637][T28939] netlink: 'syz.2.4745': attribute type 4 has an invalid length. [ 2319.528107][T28939] netlink: 'syz.2.4745': attribute type 4 has an invalid length. [ 2321.027456][T10816] usb 1-1: USB disconnect, device number 27 [ 2321.588441][T18235] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2321.778664][T18235] usb 4-1: Using ep0 maxpacket: 16 [ 2321.823133][T18235] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 2321.832343][T18235] usb 4-1: config 0 has no interface number 0 [ 2321.930783][T18235] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 2322.092361][T18235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.111884][T18235] usb 4-1: Product: syz [ 2322.123070][T18235] usb 4-1: Manufacturer: syz [ 2322.151462][T18235] usb 4-1: SerialNumber: syz [ 2322.180736][T18235] usb 4-1: config 0 descriptor?? [ 2323.951833][T19849] usb 4-1: USB disconnect, device number 103 [ 2324.155761][T28988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4754'. [ 2324.173151][T28988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4754'. [ 2324.808472][ T5891] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2324.992092][T28999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4757'. [ 2325.028077][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 2325.091974][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2325.120544][ T5891] usb 2-1: config 0 has no interfaces? [ 2325.174935][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2325.224009][ T5891] usb 2-1: config 0 has no interfaces? [ 2325.263375][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2325.332738][ T5891] usb 2-1: config 0 has no interfaces? [ 2325.363293][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2325.382203][ T5891] usb 2-1: config 0 has no interfaces? [ 2325.405670][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2325.421683][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2325.664846][ T5891] usb 2-1: config 0 descriptor?? [ 2327.429997][T29017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4762'. [ 2327.535050][T29017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4762'. [ 2327.613176][T29015] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2327.737911][T24356] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 2327.818842][T29021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2327.835290][T29017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4762'. [ 2328.013670][T24356] usb 3-1: config 255 has an invalid interface number: 175 but max is 0 [ 2328.062670][T24356] usb 3-1: config 255 has no interface number 0 [ 2328.105523][T24356] usb 3-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d [ 2328.134073][T24356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.176610][T24356] usb 3-1: Product: syz [ 2328.184483][T24356] usb 3-1: Manufacturer: syz [ 2328.211188][T24356] usb 3-1: SerialNumber: syz [ 2328.250289][T19849] usb 2-1: USB disconnect, device number 105 [ 2328.362428][T24356] asix 3-1:255.175: probe with driver asix failed with error -22 [ 2328.553200][T19849] usb 3-1: USB disconnect, device number 106 [ 2329.492233][T29039] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4774'. [ 2330.164179][T29050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2332.654000][T29076] can: request_module (can-proto-3) failed. [ 2333.041503][T29084] [U] v3f"S/4:XTzWtlW= [ 2333.653999][T29075] [U] J"e:" [ 2334.222290][T29100] xt_bpf: check failed: parse error [ 2334.418229][T24356] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2334.637882][T24356] usb 3-1: Using ep0 maxpacket: 8 [ 2334.941310][T27431] udevd[27431]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 2335.002648][T29110] netlink: 71 bytes leftover after parsing attributes in process `syz.4.4778'. [ 2335.538570][T24356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2335.552179][T24356] usb 3-1: config 0 has no interfaces? [ 2335.578635][T24356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2335.590122][T24356] usb 3-1: config 0 has no interfaces? [ 2335.638466][T24356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2335.689066][T24356] usb 3-1: config 0 has no interfaces? [ 2335.769147][T24356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2335.830047][T24356] usb 3-1: config 0 has no interfaces? [ 2335.840247][T24356] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2335.855529][T24356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2335.986166][T24356] usb 3-1: config 0 descriptor?? [ 2336.707546][T29120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4781'. [ 2336.718156][T24356] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2336.932416][T24356] usb 2-1: Using ep0 maxpacket: 16 [ 2336.944500][T24356] usb 2-1: config 0 has an invalid interface number: 213 but max is 0 [ 2337.028471][T24356] usb 2-1: config 0 has no interface number 0 [ 2337.128953][T24356] usb 2-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 2337.148285][T24356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.169262][T24356] usb 2-1: Product: syz [ 2337.173508][T24356] usb 2-1: Manufacturer: syz [ 2337.189709][T24356] usb 2-1: SerialNumber: syz [ 2337.213791][T24356] usb 2-1: config 0 descriptor?? [ 2337.597598][T10816] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2337.757464][T10816] usb 4-1: Using ep0 maxpacket: 8 [ 2337.799886][T10816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2337.840031][T10816] usb 4-1: config 0 has no interfaces? [ 2337.875149][T10816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2337.919701][T10816] usb 4-1: config 0 has no interfaces? [ 2337.956152][T10816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2337.980342][T10816] usb 4-1: config 0 has no interfaces? [ 2338.011705][T10816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2338.035744][T10816] usb 4-1: config 0 has no interfaces? [ 2338.049203][T10816] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2338.066304][T10816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2338.118581][T10816] usb 4-1: config 0 descriptor?? [ 2338.653750][T10816] usb 3-1: USB disconnect, device number 107 [ 2338.864995][T29146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4786'. [ 2339.499366][T10816] usb 2-1: USB disconnect, device number 106 [ 2340.262960][T29163] netlink: 'syz.2.4787': attribute type 2 has an invalid length. [ 2340.314113][T29163] !: entered promiscuous mode [ 2340.412930][T29161] netlink: 'syz.2.4787': attribute type 2 has an invalid length. [ 2340.788002][ T5891] usb 4-1: USB disconnect, device number 104 [ 2341.688696][T29177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2341.987727][T24356] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2342.147787][T24356] usb 4-1: Using ep0 maxpacket: 8 [ 2342.161032][T24356] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2342.185957][T24356] usb 4-1: config 0 has no interfaces? [ 2342.196076][T29135] syz.0.4783 (29135): drop_caches: 2 [ 2342.238201][T24356] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2342.249112][T24356] usb 4-1: config 0 has no interfaces? [ 2342.264053][T24356] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2342.295466][T24356] usb 4-1: config 0 has no interfaces? [ 2342.326998][T24356] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2342.360680][T24356] usb 4-1: config 0 has no interfaces? [ 2342.366224][T24356] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2342.395498][T24356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2342.434437][T24356] usb 4-1: config 0 descriptor?? [ 2343.269756][T29191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4794'. [ 2344.466677][T29204] blktrace: Concurrent blktraces are not allowed on sg0 [ 2344.692128][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.706207][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.857291][T19849] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2344.980029][T24356] usb 4-1: USB disconnect, device number 105 [ 2345.047120][T19849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2345.070240][T19849] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2345.123460][T19849] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2345.153624][T19849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2345.198484][T19849] usb 3-1: config 0 descriptor?? [ 2345.232186][T19849] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2345.508817][ T5891] usb 3-1: USB disconnect, device number 108 [ 2348.469520][T29239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2349.399536][T29249] netlink: 71 bytes leftover after parsing attributes in process `syz.3.4806'. [ 2350.305711][T29252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2350.722635][T29265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4810'. [ 2350.922212][T29267] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4810'. [ 2352.164932][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 2352.164952][ T29] audit: type=1326 audit(1771432418.409:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29278 comm="syz.1.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2352.218419][T29286] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2352.237486][ T29] audit: type=1326 audit(1771432418.409:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29278 comm="syz.1.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2352.296067][ T29] audit: type=1326 audit(1771432418.459:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29278 comm="syz.1.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2352.352874][ T29] audit: type=1326 audit(1771432418.459:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29278 comm="syz.1.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2352.418272][ T29] audit: type=1326 audit(1771432418.459:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29278 comm="syz.1.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2352.451579][T29289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2352.463110][T29272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2352.535908][ T29] audit: type=1326 audit(1771432418.459:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29278 comm="syz.1.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2352.582359][ T29] audit: type=1326 audit(1771432418.459:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29278 comm="syz.1.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2352.652654][ T29] audit: type=1326 audit(1771432418.459:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29278 comm="syz.1.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2352.716768][ T29] audit: type=1326 audit(1771432418.459:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29278 comm="syz.1.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2352.809351][ T29] audit: type=1326 audit(1771432418.459:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29278 comm="syz.1.4814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2354.288538][T29305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2354.657294][T19849] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2354.845617][T19849] usb 1-1: Using ep0 maxpacket: 8 [ 2354.914762][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2354.945211][T19849] usb 1-1: config 0 has no interfaces? [ 2354.982872][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2355.014758][T19849] usb 1-1: config 0 has no interfaces? [ 2355.099298][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2355.140408][T19849] usb 1-1: config 0 has no interfaces? [ 2355.227303][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2355.253212][T19849] usb 1-1: config 0 has no interfaces? [ 2355.328448][T19849] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2355.337938][T19849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2355.360367][T29317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2355.438832][T19849] usb 1-1: config 0 descriptor?? [ 2357.119388][ T5891] usb 1-1: USB disconnect, device number 28 [ 2357.258069][T29332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4824'. [ 2357.385509][T29333] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4824'. [ 2357.747379][T23595] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2357.922812][T23595] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2357.932796][T23595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.941402][T23595] usb 3-1: Product: syz [ 2357.947219][T23595] usb 3-1: Manufacturer: syz [ 2357.954886][T23595] usb 3-1: SerialNumber: syz [ 2357.967525][T23595] usb 3-1: config 0 descriptor?? [ 2358.182165][T23595] hso 3-1:0.0: Failed to find INT IN ep [ 2358.191145][T23595] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2358.273362][T29348] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2358.434518][T29336] wg1: left promiscuous mode [ 2358.442484][T29336] syzkaller0: left promiscuous mode [ 2358.451109][T29336] bridge0: left promiscuous mode [ 2358.459050][T29336] ipip0: left promiscuous mode [ 2358.553653][T29348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2358.617821][T24356] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2358.767772][T24356] usb 2-1: Using ep0 maxpacket: 8 [ 2358.776532][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2358.791079][T24356] usb 2-1: config 0 has no interfaces? [ 2358.803860][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2358.816498][T24356] usb 2-1: config 0 has no interfaces? [ 2358.868695][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2358.886152][T24356] usb 2-1: config 0 has no interfaces? [ 2358.895580][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2358.912161][T24356] usb 2-1: config 0 has no interfaces? [ 2358.925493][T24356] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2358.938681][T24356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2358.955789][T24356] usb 2-1: config 0 descriptor?? [ 2359.174459][T24356] usb 2-1: USB disconnect, device number 107 [ 2359.361798][T29355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2360.446063][T14282] usb 3-1: USB disconnect, device number 109 [ 2361.758661][T29367] syz.3.4831 (29367): drop_caches: 2 [ 2362.288163][T23595] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2362.457489][T23595] usb 1-1: Using ep0 maxpacket: 32 [ 2362.475204][T23595] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 2362.496085][T23595] usb 1-1: config 0 has no interface number 0 [ 2362.516470][T23595] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 2362.526507][T23595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2362.546315][T23595] usb 1-1: Product: syz [ 2362.551100][T23595] usb 1-1: Manufacturer: syz [ 2362.555716][T23595] usb 1-1: SerialNumber: syz [ 2362.569344][T23595] usb 1-1: config 0 descriptor?? [ 2362.977415][T19849] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2363.047968][T29396] vivid-000: disconnect [ 2363.141942][T23595] radio-si470x 1-1:0.35: this is not a si470x device. [ 2363.197742][T23595] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 2363.308255][T19849] usb 2-1: Using ep0 maxpacket: 8 [ 2363.610288][T19849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2363.651367][T19849] usb 2-1: config 0 has no interfaces? [ 2363.682622][T19849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2363.717556][T19849] usb 2-1: config 0 has no interfaces? [ 2363.793904][T19849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2363.833288][T19849] usb 2-1: config 0 has no interfaces? [ 2363.908559][T19849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2363.927248][T19849] usb 2-1: config 0 has no interfaces? [ 2364.004677][T19849] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2364.034833][T19849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2364.066167][T19849] usb 2-1: config 0 descriptor?? [ 2364.236596][T19849] usb 1-1: USB disconnect, device number 29 [ 2364.298438][T29383] vivid-000: reconnect [ 2366.004217][T24356] usb 2-1: USB disconnect, device number 108 [ 2366.379959][T29425] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2366.677910][T14282] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2366.685962][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 2366.827806][T14282] usb 4-1: device descriptor read/64, error -32 [ 2367.081704][T14282] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2367.289093][T14282] usb 4-1: Using ep0 maxpacket: 8 [ 2367.307031][T14282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2367.371144][T14282] usb 4-1: config 0 has no interfaces? [ 2367.402073][T14282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2367.448534][T14282] usb 4-1: config 0 has no interfaces? [ 2367.481999][T14282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2367.524908][T14282] usb 4-1: config 0 has no interfaces? [ 2367.576994][T14282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2367.616777][T14282] usb 4-1: config 0 has no interfaces? [ 2367.657773][T14282] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2367.666933][T14282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2367.757837][T14282] usb 4-1: config 0 descriptor?? [ 2369.177827][T14282] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2369.717958][T14282] usb 2-1: Using ep0 maxpacket: 8 [ 2370.088591][T14282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2370.099554][T14282] usb 2-1: config 0 has no interfaces? [ 2370.292520][T14282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2370.377725][T14282] usb 2-1: config 0 has no interfaces? [ 2370.398750][T14282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2370.409508][T14282] usb 2-1: config 0 has no interfaces? [ 2370.420091][T14282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2370.457794][T14282] usb 2-1: config 0 has no interfaces? [ 2370.463942][T14282] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2370.487891][T14282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2370.499086][T14282] usb 2-1: config 0 descriptor?? [ 2370.559117][T19849] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2370.594811][T29468] blktrace: Concurrent blktraces are not allowed on sg0 [ 2370.728460][T19849] usb 3-1: Using ep0 maxpacket: 16 [ 2370.787498][T19849] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 2370.797013][T19849] usb 3-1: config 0 has no interface number 0 [ 2370.832369][T19849] usb 3-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 2370.852239][T19849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.872316][T19849] usb 3-1: Product: syz [ 2370.877474][T19849] usb 3-1: Manufacturer: syz [ 2370.893567][T19849] usb 3-1: SerialNumber: syz [ 2370.948277][T19849] usb 3-1: config 0 descriptor?? [ 2371.262283][T19849] usb 4-1: USB disconnect, device number 107 [ 2371.692494][T29473] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2371.794528][T29474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2372.011955][T19849] usb 2-1: USB disconnect, device number 109 [ 2372.254457][T29480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2372.361135][T29480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2372.432042][T29481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2373.734834][T19849] usb 3-1: USB disconnect, device number 110 [ 2374.579042][T29496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2374.786890][T29507] xt_bpf: check failed: parse error [ 2375.001699][T29510] syzkaller0: entered promiscuous mode [ 2375.016583][T29510] syzkaller0: entered allmulticast mode [ 2375.073658][T29511] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 2376.633577][T29520] syz.2.4862 (29520): drop_caches: 2 [ 2378.327823][T23595] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2378.537531][T23595] usb 1-1: Using ep0 maxpacket: 8 [ 2378.577863][T23595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2378.598964][T23595] usb 1-1: config 0 has no interfaces? [ 2378.640144][T23595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2378.661445][T23595] usb 1-1: config 0 has no interfaces? [ 2378.671252][T23595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2378.715895][T23595] usb 1-1: config 0 has no interfaces? [ 2378.756440][T23595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2378.791017][T23595] usb 1-1: config 0 has no interfaces? [ 2378.813892][T23595] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2378.848120][T23595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2378.888619][T23595] usb 1-1: config 0 descriptor?? [ 2379.708893][T29550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2380.028532][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 2380.028555][ T29] audit: type=1326 audit(1771432446.239:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29552 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2380.125774][ T29] audit: type=1326 audit(1771432446.239:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29552 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2380.170846][ T29] audit: type=1326 audit(1771432446.239:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29552 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2380.210377][ T29] audit: type=1326 audit(1771432446.239:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29552 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2380.254299][ T29] audit: type=1326 audit(1771432446.239:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29552 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2380.295562][ T29] audit: type=1326 audit(1771432446.239:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29552 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2380.370448][ T29] audit: type=1326 audit(1771432446.239:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29552 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2380.434114][ T29] audit: type=1326 audit(1771432446.239:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29552 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2380.470416][ T29] audit: type=1326 audit(1771432446.309:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29552 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2380.568941][T29551] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.4867'. [ 2380.609102][ T29] audit: type=1326 audit(1771432446.309:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29552 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 2381.515501][T14282] usb 1-1: USB disconnect, device number 30 [ 2382.042899][T29574] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2382.235373][T29578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2384.597486][T19849] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2384.770366][T19849] usb 2-1: Using ep0 maxpacket: 32 [ 2384.785760][T19849] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2384.795510][T19849] usb 2-1: config 0 has no interface number 0 [ 2384.804663][T19849] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2384.818350][T19849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.832355][T19849] usb 2-1: Product: syz [ 2384.841357][T19849] usb 2-1: Manufacturer: syz [ 2384.849738][T19849] usb 2-1: SerialNumber: syz [ 2384.870113][T19849] usb 2-1: config 0 descriptor?? [ 2384.882974][T19849] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2384.892445][T19849] usb 2-1: selecting invalid altsetting 1 [ 2384.904503][T19849] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2384.940334][T19849] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2384.959652][T19849] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2384.977844][T19849] usb 2-1: media controller created [ 2385.003069][T19849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2385.128038][T29592] veth0_to_bond: mtu less than device minimum [ 2385.321246][T19849] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2385.349180][T19849] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2385.377922][T19849] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2385.532771][T19849] usb 2-1: USB disconnect, device number 110 [ 2386.513505][T29626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4886'. [ 2386.649121][T19849] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2386.840417][T19849] usb 3-1: Using ep0 maxpacket: 8 [ 2386.873184][T19849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2386.922600][T19849] usb 3-1: config 0 has no interfaces? [ 2386.957780][T19849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2386.981462][T19849] usb 3-1: config 0 has no interfaces? [ 2387.013820][T19849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2387.041280][T19849] usb 3-1: config 0 has no interfaces? [ 2387.062531][T19849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2387.082596][T19849] usb 3-1: config 0 has no interfaces? [ 2387.122178][T19849] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2387.137369][T19849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2387.165552][T19849] usb 3-1: config 0 descriptor?? [ 2390.207987][T19849] usb 3-1: USB disconnect, device number 111 [ 2390.488918][T29664] input: syz1 as /devices/virtual/input/input79 [ 2395.577908][T23595] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2395.595041][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 2395.727256][T23595] usb 2-1: device descriptor read/64, error -32 [ 2395.970491][T23595] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2396.162587][T23595] usb 2-1: Using ep0 maxpacket: 8 [ 2396.350678][T23595] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2396.381874][T23595] usb 2-1: config 0 has no interfaces? [ 2396.564482][T23595] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2396.587998][T23595] usb 2-1: config 0 has no interfaces? [ 2396.653424][T23595] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2396.666141][T23595] usb 2-1: config 0 has no interfaces? [ 2396.729074][T23595] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2396.753136][T23595] usb 2-1: config 0 has no interfaces? [ 2396.762605][T23595] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2396.789085][T23595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2396.809762][T23595] usb 2-1: config 0 descriptor?? [ 2397.058731][T29734] xt_bpf: check failed: parse error [ 2397.100024][T29728] syz.2.4906 (29728): drop_caches: 2 [ 2398.428526][T24356] usb 2-1: USB disconnect, device number 112 [ 2398.857921][T14282] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2398.959348][T29752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4911'. [ 2399.018170][T14282] usb 3-1: Using ep0 maxpacket: 32 [ 2399.025370][T14282] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 2399.038714][T14282] usb 3-1: config 0 has no interface number 0 [ 2399.050684][T14282] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 2399.060964][T14282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.071967][T14282] usb 3-1: Product: syz [ 2399.078713][T14282] usb 3-1: Manufacturer: syz [ 2399.084754][T14282] usb 3-1: SerialNumber: syz [ 2399.113676][T14282] usb 3-1: config 0 descriptor?? [ 2399.413152][T29757] vivid-004: disconnect [ 2399.601326][T14282] radio-si470x 3-1:0.35: this is not a si470x device. [ 2399.613871][T29740] vivid-004: reconnect [ 2399.650681][T14282] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 2399.705686][T14282] usb 3-1: USB disconnect, device number 112 [ 2399.875882][T29748] syz.1.4909 (29748): drop_caches: 2 [ 2401.372266][T19849] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2401.567401][T19849] usb 1-1: Using ep0 maxpacket: 8 [ 2401.606973][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2401.636815][T19849] usb 1-1: config 0 has no interfaces? [ 2401.709922][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2401.731767][T19849] usb 1-1: config 0 has no interfaces? [ 2401.925633][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2401.957725][T19849] usb 1-1: config 0 has no interfaces? [ 2402.067770][T19849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2402.090509][T19849] usb 1-1: config 0 has no interfaces? [ 2402.138524][T19849] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2402.167261][T19849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2402.179339][T19849] usb 1-1: config 0 descriptor?? [ 2403.518624][T29791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2403.531303][T29795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2403.785034][T19849] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2403.952685][T19849] usb 3-1: Using ep0 maxpacket: 8 [ 2404.272602][T19849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2404.286251][T14282] usb 1-1: USB disconnect, device number 31 [ 2404.352623][T19849] usb 3-1: config 0 has no interfaces? [ 2404.408963][T19849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2404.444040][T19849] usb 3-1: config 0 has no interfaces? [ 2404.466765][T19849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2404.557355][T29803] input: syz1 as /devices/virtual/input/input80 [ 2404.606525][T19849] usb 3-1: config 0 has no interfaces? [ 2404.708057][T19849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2404.754804][T19849] usb 3-1: config 0 has no interfaces? [ 2404.766934][T19849] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2404.869012][T19849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2404.902279][T19849] usb 3-1: config 0 descriptor?? [ 2406.141231][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.148315][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.352037][T14282] usb 3-1: USB disconnect, device number 113 [ 2406.419721][T29819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4925'. [ 2406.708138][T29819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4925'. [ 2407.157278][T19849] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2407.807458][T19849] usb 4-1: Using ep0 maxpacket: 8 [ 2407.863729][T19849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2407.894024][T19849] usb 4-1: config 0 has no interfaces? [ 2408.381617][T29836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4928'. [ 2408.414075][T19849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.428243][T19849] usb 4-1: config 0 has no interfaces? [ 2408.452129][T29836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4928'. [ 2408.473646][T19849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.487974][T19849] usb 4-1: config 0 has no interfaces? [ 2408.503357][T19849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.516982][T19849] usb 4-1: config 0 has no interfaces? [ 2408.524271][T19849] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2408.533470][T19849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2408.543820][T19849] usb 4-1: config 0 descriptor?? [ 2408.607907][T24356] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2408.757734][T24356] usb 2-1: Using ep0 maxpacket: 32 [ 2408.790201][T24356] usb 2-1: config 1 interface 0 altsetting 95 bulk endpoint 0x82 has invalid maxpacket 64 [ 2408.814838][T24356] usb 2-1: config 1 interface 0 altsetting 95 bulk endpoint 0x3 has invalid maxpacket 16 [ 2408.844671][T24356] usb 2-1: config 1 interface 0 altsetting 95 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2408.876522][T24356] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2408.899957][T24356] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2408.919589][T24356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.945100][T24356] usb 2-1: Product: syz [ 2408.960481][T24356] usb 2-1: Manufacturer: syz [ 2408.985703][T24356] usb 2-1: SerialNumber: syz [ 2409.022757][T29839] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2409.042137][T29839] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2409.291536][T29839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2409.324266][T29839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2410.129717][T24356] usb 2-1: bad CDC descriptors [ 2410.154159][T24356] usb 2-1: USB disconnect, device number 113 [ 2410.420069][T14282] usb 4-1: USB disconnect, device number 108 [ 2411.221587][T29862] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 2411.767392][T23595] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2411.947853][T23595] usb 2-1: Using ep0 maxpacket: 8 [ 2411.976764][T23595] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2411.988499][T23595] usb 2-1: config 8 has an invalid interface number: 79 but max is 0 [ 2412.009850][T23595] usb 2-1: config 8 has no interface number 0 [ 2412.016122][T23595] usb 2-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2412.067893][T23595] usb 2-1: config 8 interface 79 has no altsetting 0 [ 2412.153602][T23595] usb 2-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 2412.167800][T23595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2412.176010][T23595] usb 2-1: Product: syz [ 2412.186134][T23595] usb 2-1: Manufacturer: syz [ 2412.196247][T23595] usb 2-1: SerialNumber: syz [ 2414.022240][T29891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2414.683029][T23595] usb 2-1: bad CDC descriptors [ 2414.761743][T23595] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2414.878138][T29895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4940'. [ 2415.068376][T23595] snd-usb-audio 2-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 2415.084452][T23595] usb 2-1: USB disconnect, device number 114 [ 2415.157614][T29562] udevd[29562]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2415.797829][T24356] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2416.167282][T24356] usb 2-1: Using ep0 maxpacket: 8 [ 2416.197810][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2416.212700][T24356] usb 2-1: config 0 has no interfaces? [ 2416.250429][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2416.283928][T24356] usb 2-1: config 0 has no interfaces? [ 2416.300369][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2416.341175][T24356] usb 2-1: config 0 has no interfaces? [ 2416.385948][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2416.428616][T24356] usb 2-1: config 0 has no interfaces? [ 2416.449998][T24356] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2416.469517][T24356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.491638][T24356] usb 2-1: config 0 descriptor?? [ 2417.982783][T29932] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2418.958873][T24356] usb 2-1: USB disconnect, device number 115 [ 2420.333247][T24356] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2420.509889][T24356] usb 1-1: Using ep0 maxpacket: 32 [ 2420.524429][T24356] usb 1-1: config 0 has an invalid interface number: 169 but max is 0 [ 2420.538946][T24356] usb 1-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 2420.550238][T24356] usb 1-1: config 0 has no interface number 0 [ 2420.570164][T24356] usb 1-1: config 0 interface 169 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2420.588309][T24356] usb 1-1: config 0 interface 169 has no altsetting 0 [ 2420.712210][T24356] usb 1-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 2420.730162][T24356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.760601][T24356] usb 1-1: Product: syz [ 2420.770709][T24356] usb 1-1: Manufacturer: syz [ 2420.782533][T24356] usb 1-1: SerialNumber: syz [ 2420.850102][T24356] usb 1-1: config 0 descriptor?? [ 2420.882801][T24356] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2420.984815][T24356] snd-usb-audio 1-1:0.169: probe with driver snd-usb-audio failed with error -2 [ 2421.063200][T29562] udevd[29562]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2421.258516][T29950] netlink: 'syz.0.4950': attribute type 21 has an invalid length. [ 2421.266431][T29950] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4950'. [ 2421.357976][T29950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4950'. [ 2421.695211][T24356] usb 1-1: USB disconnect, device number 32 [ 2422.111248][T29972] blktrace: Concurrent blktraces are not allowed on sg0 [ 2422.377574][T10816] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2422.568279][T10816] usb 2-1: Using ep0 maxpacket: 8 [ 2422.602645][T10816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2422.638004][T10816] usb 2-1: config 0 has no interfaces? [ 2422.680559][T10816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2422.708951][T10816] usb 2-1: config 0 has no interfaces? [ 2422.765104][T10816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2422.805939][T10816] usb 2-1: config 0 has no interfaces? [ 2422.882205][T10816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2422.908029][T10816] usb 2-1: config 0 has no interfaces? [ 2422.927836][T10816] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2422.957833][T10816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2422.995945][T10816] usb 2-1: config 0 descriptor?? [ 2425.189478][T14282] usb 2-1: USB disconnect, device number 116 [ 2425.379376][T30006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2429.056581][T30035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4963'. [ 2429.410387][T30035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4963'. [ 2431.193996][T30055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2432.523073][T30078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2433.157636][T10816] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2433.385788][T10816] usb 3-1: Using ep0 maxpacket: 8 [ 2433.414636][T10816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2433.443925][T10816] usb 3-1: config 0 has no interfaces? [ 2433.460408][T10816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2433.475170][T10816] usb 3-1: config 0 has no interfaces? [ 2433.569247][T10816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2433.604313][T10816] usb 3-1: config 0 has no interfaces? [ 2433.630142][T10816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2433.650781][T10816] usb 3-1: config 0 has no interfaces? [ 2433.658026][T10816] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2433.727598][T30094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2433.738093][T10816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2433.758820][T10816] usb 3-1: config 0 descriptor?? [ 2435.814021][T24356] usb 3-1: USB disconnect, device number 114 [ 2436.180617][T30105] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4979'. [ 2436.421715][T30114] input: syz0 as /devices/virtual/input/input82 [ 2436.451343][T14282] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2436.621463][T14282] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2436.636074][T14282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2436.676484][T14282] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2436.711836][T14282] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2436.748843][T14282] usb 4-1: Manufacturer: syz [ 2436.767336][T30109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4981'. [ 2436.799402][T14282] usb 4-1: config 0 descriptor?? [ 2436.977883][T14282] rc_core: IR keymap rc-hauppauge not found [ 2436.990505][T14282] Registered IR keymap rc-empty [ 2437.004250][T14282] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2437.045197][T14282] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input83 [ 2437.119656][T14282] usb 4-1: USB disconnect, device number 109 [ 2439.000879][T30146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2439.342717][T30149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4985'. [ 2439.418832][T30154] input: syz1 as /devices/virtual/input/input84 [ 2439.646976][T30154] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 2439.719799][T30156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4985'. [ 2440.737375][T10816] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2440.930884][T10816] usb 3-1: Using ep0 maxpacket: 8 [ 2440.973232][T10816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2441.027809][T10816] usb 3-1: config 0 has no interfaces? [ 2441.060605][T10816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2441.087830][T10816] usb 3-1: config 0 has no interfaces? [ 2441.141253][T10816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2441.205261][T10816] usb 3-1: config 0 has no interfaces? [ 2441.319416][T10816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2441.339298][T10816] usb 3-1: config 0 has no interfaces? [ 2441.351016][T10816] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2441.367852][T10816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2441.461043][T10816] usb 3-1: config 0 descriptor?? [ 2442.067090][T30176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4993'. [ 2442.283592][T30180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2443.316461][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 2443.316482][ T29] audit: type=1326 audit(1771432509.559:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30184 comm="syz.0.4994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12f6c code=0x7ffc0000 [ 2443.360755][ T29] audit: type=1326 audit(1771432509.599:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30184 comm="syz.0.4994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f12f6c code=0x7ffc0000 [ 2443.407006][ T29] audit: type=1326 audit(1771432509.599:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30184 comm="syz.0.4994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12f6c code=0x7ffc0000 [ 2443.453561][ T29] audit: type=1326 audit(1771432509.599:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30184 comm="syz.0.4994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12f6c code=0x7ffc0000 [ 2443.914154][T14282] usb 3-1: USB disconnect, device number 115 [ 2445.018323][T30210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2445.217369][T10816] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2445.417983][T10816] usb 4-1: Using ep0 maxpacket: 16 [ 2445.493723][T10816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 2445.588990][T10816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2445.704067][T30223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4999'. [ 2445.728297][T10816] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 2445.747850][T10816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2445.766071][T10816] usb 4-1: Product: syz [ 2445.787934][T10816] usb 4-1: Manufacturer: syz [ 2445.816373][T10816] usb 4-1: SerialNumber: syz [ 2445.840314][T10816] usb 4-1: config 0 descriptor?? [ 2448.238624][T10816] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 2448.246069][T10816] usb 4-1: USB disconnect, device number 110 [ 2449.957434][T10816] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2450.137729][T10816] usb 4-1: Using ep0 maxpacket: 8 [ 2450.153281][T30263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5008'. [ 2450.247059][T10816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2450.290450][T10816] usb 4-1: config 0 has no interfaces? [ 2450.324543][T10816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2450.346134][T10816] usb 4-1: config 0 has no interfaces? [ 2450.492370][T10816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2450.505232][T10816] usb 4-1: config 0 has no interfaces? [ 2450.557916][T10816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2450.596931][T10816] usb 4-1: config 0 has no interfaces? [ 2450.602739][T10816] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2450.627286][T10816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2450.678343][T10816] usb 4-1: config 0 descriptor?? [ 2450.801496][T30270] program syz.2.5010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2451.503623][ T29] audit: type=1326 audit(1771432517.749:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30272 comm="syz.2.5011" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd6f6c code=0x0 [ 2451.531010][T30283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5012'. [ 2451.567103][T30280] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2451.574922][T30280] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 2451.583085][T30280] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2452.617787][T24356] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2452.787993][T24356] usb 3-1: Using ep0 maxpacket: 32 [ 2452.795147][T24356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2452.807190][T24356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2452.817916][T24356] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2452.827020][T24356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2452.856134][T24356] usb 3-1: config 0 descriptor?? [ 2453.077635][T30290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2453.160883][T10816] usb 4-1: USB disconnect, device number 111 [ 2455.139481][T30320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2455.156733][T30321] binder: 30312:30321 ioctl 4018620d 0 returned -22 [ 2455.251454][T30321] binder: 30312:30321 ioctl 4018620d 0 returned -22 [ 2455.441213][T24356] usbhid 3-1:0.0: can't add hid device: -71 [ 2455.464548][T24356] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2455.545577][T24356] usb 3-1: USB disconnect, device number 116 [ 2455.581552][T14282] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2455.757978][T14282] usb 2-1: Using ep0 maxpacket: 8 [ 2455.766114][T14282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2455.793317][T14282] usb 2-1: config 0 has no interfaces? [ 2455.830494][T14282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2455.847953][T14282] usb 2-1: config 0 has no interfaces? [ 2455.903118][T14282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2455.969599][T14282] usb 2-1: config 0 has no interfaces? [ 2455.996444][T14282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2456.062074][T14282] usb 2-1: config 0 has no interfaces? [ 2456.086998][T14282] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2456.124043][T14282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2456.169093][T14282] usb 2-1: config 0 descriptor?? [ 2457.194335][T30338] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 2458.598435][T30349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2459.255086][T14282] usb 2-1: USB disconnect, device number 117 [ 2460.012011][T30363] netlink: 'syz.1.5028': attribute type 10 has an invalid length. [ 2460.583623][T30373] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2460.871451][T30373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2461.667674][T24356] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2461.832170][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2461.847885][T24356] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 2461.887963][T24356] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2461.917957][T24356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2461.930155][T24356] usb 2-1: config 0 descriptor?? [ 2462.166980][T30385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2462.251994][T24356] usb 2-1: USB disconnect, device number 118 [ 2464.426587][T30409] fuse: Bad value for 'fd' [ 2464.507700][T24356] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2464.673413][T24356] usb 3-1: Using ep0 maxpacket: 8 [ 2464.694114][T24356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2464.711968][T24356] usb 3-1: config 0 has no interfaces? [ 2464.757972][T24356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2464.774037][T24356] usb 3-1: config 0 has no interfaces? [ 2464.821472][T24356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2464.848015][T24356] usb 3-1: config 0 has no interfaces? [ 2464.867939][T24356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2464.879636][T24356] usb 3-1: config 0 has no interfaces? [ 2464.885165][T24356] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2464.931109][T24356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2464.971296][T24356] usb 3-1: config 0 descriptor?? [ 2465.606703][T30422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2467.208045][T24356] usb 3-1: USB disconnect, device number 117 [ 2467.393679][T30434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2467.454302][T30440] input: syz1 as /devices/virtual/input/input85 [ 2467.606882][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.616144][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2469.135761][T30469] ip6t_REJECT: ECHOREPLY is not supported [ 2469.322398][T30460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2472.214646][T30499] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2472.258574][T30499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2473.313047][T24356] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2473.509408][T24356] usb 2-1: Using ep0 maxpacket: 8 [ 2473.519980][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2473.531832][T24356] usb 2-1: config 0 has no interfaces? [ 2473.541512][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2473.554352][T24356] usb 2-1: config 0 has no interfaces? [ 2473.564495][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2473.588007][T24356] usb 2-1: config 0 has no interfaces? [ 2473.626945][T24356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2473.713948][T24356] usb 2-1: config 0 has no interfaces? [ 2473.747790][T24356] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2473.772264][T24356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2473.790139][T24356] usb 2-1: config 0 descriptor?? [ 2473.914504][T30509] syz.0.5058 (30509): drop_caches: 2 [ 2474.114135][T30515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2474.840217][T30523] x_tables: duplicate underflow at hook 3 [ 2475.706938][T30531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2476.354227][T23595] usb 2-1: USB disconnect, device number 119 [ 2476.450912][T30534] bridge_slave_1: default FDB implementation only supports local addresses [ 2477.523063][T30549] fuse: Bad value for 'fd' [ 2478.548276][T30560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5069'. [ 2479.178713][T30569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5072'. [ 2480.857903][ T29] audit: type=1326 audit(1771432547.099:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30582 comm="syz.3.5075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2480.911038][T30587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5075'. [ 2480.934239][ T29] audit: type=1326 audit(1771432547.099:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30582 comm="syz.3.5075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2480.971214][ T29] audit: type=1326 audit(1771432547.109:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30582 comm="syz.3.5075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2481.018081][ T29] audit: type=1326 audit(1771432547.109:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30582 comm="syz.3.5075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2481.063649][ T29] audit: type=1326 audit(1771432547.109:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30582 comm="syz.3.5075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2481.097903][ T29] audit: type=1326 audit(1771432547.109:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30582 comm="syz.3.5075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2481.121402][T24356] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2481.139043][ T29] audit: type=1326 audit(1771432547.109:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30582 comm="syz.3.5075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2481.178585][ T29] audit: type=1326 audit(1771432547.109:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30582 comm="syz.3.5075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2481.210767][ T29] audit: type=1326 audit(1771432547.119:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30582 comm="syz.3.5075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2481.244273][ T29] audit: type=1326 audit(1771432547.119:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30582 comm="syz.3.5075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2481.287873][T24356] usb 1-1: Using ep0 maxpacket: 8 [ 2481.297039][T24356] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2481.316209][T24356] usb 1-1: config 0 has no interfaces? [ 2481.327922][T24356] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2481.338584][T24356] usb 1-1: config 0 has no interfaces? [ 2481.346984][T24356] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2481.357861][T24356] usb 1-1: config 0 has no interfaces? [ 2481.367279][T24356] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2481.377808][T24356] usb 1-1: config 0 has no interfaces? [ 2481.383369][T24356] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2481.403088][T24356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.426196][T24356] usb 1-1: config 0 descriptor?? [ 2483.137388][T10816] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2483.780261][T10816] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2483.797844][T10816] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2483.831262][T10816] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2483.880518][T10816] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2483.917262][T10816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2484.124151][T23595] usb 1-1: USB disconnect, device number 33 [ 2484.131614][T10816] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2484.147928][T10816] usb 4-1: invalid MIDI out EP 0 [ 2484.282616][T29759] udevd[29759]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2484.364104][T10816] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2485.154966][T30618] bond4: Removing last ns target with arp_interval on [ 2485.517845][T24356] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 2485.710480][T24356] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 2485.731622][T24356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2485.774289][T24356] usb 1-1: config 0 descriptor?? [ 2485.951706][T24356] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input87 [ 2486.433837][T10816] usb 4-1: USB disconnect, device number 112 [ 2486.448484][T30599] delete_channel: no stack [ 2488.117390][ T5178] bcm5974 1-1:0.0: could not read from device [ 2488.190700][T24356] usb 1-1: USB disconnect, device number 34 [ 2488.197834][ T5178] bcm5974 1-1:0.0: could not read from device [ 2488.229434][ T5178] bcm5974 1-1:0.0: could not read from device [ 2488.279841][T29562] udevd[29562]: Error opening device "/dev/input/event4": No such device [ 2488.304803][T29562] udevd[29562]: Unable to EVIOCGABS device "/dev/input/event4" [ 2488.313352][T29562] udevd[29562]: Unable to EVIOCGABS device "/dev/input/event4" [ 2488.321858][T29562] udevd[29562]: Unable to EVIOCGABS device "/dev/input/event4" [ 2488.334002][T29562] udevd[29562]: Unable to EVIOCGABS device "/dev/input/event4" [ 2488.750631][T30650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2488.897304][T10816] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 2489.057384][T10816] usb 1-1: device descriptor read/64, error -71 [ 2489.397402][T10816] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 2489.537236][T10816] usb 1-1: device descriptor read/64, error -71 [ 2489.657821][T10816] usb usb1-port1: attempt power cycle [ 2489.856465][T30656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5089'. [ 2489.997264][T10816] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 2490.020475][T10816] usb 1-1: device descriptor read/8, error -71 [ 2490.277305][T10816] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 2490.298192][T10816] usb 1-1: device descriptor read/8, error -71 [ 2490.407681][T10816] usb usb1-port1: unable to enumerate USB device [ 2493.377818][T14282] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 2493.554370][T14282] usb 3-1: config 0 has an invalid interface number: 189 but max is 0 [ 2493.565879][T14282] usb 3-1: config 0 has no interface number 0 [ 2493.577835][T14282] usb 3-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2493.593754][T14282] usb 3-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2493.613174][T14282] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 2493.626609][T14282] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2493.644211][T14282] usb 3-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2493.662826][T14282] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 2493.674714][T14282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2493.692413][T14282] usb 3-1: Product: syz [ 2493.705036][T14282] usb 3-1: Manufacturer: syz [ 2493.716481][T14282] usb 3-1: SerialNumber: syz [ 2493.732615][T14282] usb 3-1: config 0 descriptor?? [ 2493.742534][T30684] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2493.753615][T14282] ums-alauda 3-1:0.189: USB Mass Storage device detected [ 2493.771381][T14282] scsi host1: usb-storage 3-1:0.189 [ 2493.913315][T30691] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5097'. [ 2493.985185][T14282] usb 3-1: USB disconnect, device number 118 [ 2494.637868][T14282] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2494.797771][T14282] usb 1-1: Using ep0 maxpacket: 8 [ 2494.914718][T14282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2494.933941][T14282] usb 1-1: config 0 has no interfaces? [ 2495.000644][T14282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2495.019138][T14282] usb 1-1: config 0 has no interfaces? [ 2495.173331][T14282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2495.199506][T14282] usb 1-1: config 0 has no interfaces? [ 2495.257885][T14282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2495.282152][T14282] usb 1-1: config 0 has no interfaces? [ 2495.300154][T14282] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2495.334553][T14282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.374062][T14282] usb 1-1: config 0 descriptor?? [ 2495.821450][T30713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2495.856358][T30713] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5101'. [ 2496.472941][T30719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5102'. [ 2496.495103][T30719] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5102'. [ 2496.506690][T30719] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5102'. [ 2497.322299][T14282] usb 1-1: USB disconnect, device number 39 [ 2498.278072][T30734] hub 9-0:1.0: USB hub found [ 2498.300308][T30734] hub 9-0:1.0: 1 port detected [ 2500.709214][T30746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2502.091819][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 2502.091839][ T29] audit: type=1326 audit(1771432568.339:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2502.152096][ T29] audit: type=1326 audit(1771432568.369:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2502.197772][ T29] audit: type=1326 audit(1771432568.429:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2502.227319][ T29] audit: type=1326 audit(1771432568.429:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2502.257388][ T29] audit: type=1326 audit(1771432568.429:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2502.460895][ T29] audit: type=1326 audit(1771432568.709:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2502.485324][ T29] audit: type=1326 audit(1771432568.729:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2502.517045][ T29] audit: type=1326 audit(1771432568.759:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2502.541814][ T29] audit: type=1326 audit(1771432568.759:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2502.570362][ T29] audit: type=1326 audit(1771432568.759:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30766 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2502.887529][T23595] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2503.127249][T23595] usb 2-1: Using ep0 maxpacket: 8 [ 2503.226095][T23595] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2503.240070][T23595] usb 2-1: config 0 has no interfaces? [ 2503.265176][T23595] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2503.279268][T23595] usb 2-1: config 0 has no interfaces? [ 2503.387767][T23595] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2503.403383][T23595] usb 2-1: config 0 has no interfaces? [ 2503.500093][T23595] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2503.557344][T23595] usb 2-1: config 0 has no interfaces? [ 2503.573490][T23595] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2503.583611][T23595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2503.598341][T23595] usb 2-1: config 0 descriptor?? [ 2504.510856][T30790] fuse: Unknown parameter '0x0000000000000005' [ 2504.813190][T30794] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2504.933508][T30795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2506.247773][T14282] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2506.397892][T14282] usb 1-1: Using ep0 maxpacket: 32 [ 2506.428409][T14282] usb 1-1: config 1 interface 0 altsetting 160 bulk endpoint 0x1 has invalid maxpacket 64 [ 2506.454669][T14282] usb 1-1: config 1 interface 0 altsetting 160 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2506.488514][T14282] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2506.500409][T14282] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2506.529448][T14282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2506.540630][T14282] usb 1-1: Product: syz [ 2506.546352][ T5891] usb 2-1: USB disconnect, device number 120 [ 2506.556151][T14282] usb 1-1: Manufacturer: syz [ 2506.575991][T14282] usb 1-1: SerialNumber: syz [ 2506.589203][T30803] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2508.033355][T30830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2508.240944][ T5891] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2508.418119][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2508.441167][ T5891] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2508.492992][ T5891] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2508.518338][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2508.548676][ T5891] usb 3-1: config 0 descriptor?? [ 2509.038865][T14282] usb 1-1: USB disconnect, device number 40 [ 2509.877301][T10816] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2510.219363][T10816] usb 1-1: Using ep0 maxpacket: 8 [ 2510.247840][T10816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2510.275023][T10816] usb 1-1: config 0 has no interfaces? [ 2510.310686][T10816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2510.337720][T10816] usb 1-1: config 0 has no interfaces? [ 2510.459062][T10816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2510.492345][T10816] usb 1-1: config 0 has no interfaces? [ 2510.558019][T10816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2510.613398][T10816] usb 1-1: config 0 has no interfaces? [ 2510.639077][T10816] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2510.678003][T10816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2510.725603][T10816] usb 1-1: config 0 descriptor?? [ 2511.181404][T30857] netlink: 'syz.3.5130': attribute type 10 has an invalid length. [ 2511.241927][T30858] netlink: 'syz.3.5130': attribute type 10 has an invalid length. [ 2511.548425][T30862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2511.973821][T30869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2512.245655][T10816] usb 3-1: USB disconnect, device number 119 [ 2512.884690][T10816] usb 1-1: USB disconnect, device number 41 [ 2513.415344][T30887] binder: 30883:30887 ioctl 4018620d 0 returned -22 [ 2515.826111][T30901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2516.267217][T30905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2517.861922][T30922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5142'. [ 2517.927049][T30922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5142'. [ 2518.377793][T24356] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 2518.545550][T24356] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 2518.570379][T24356] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2518.596286][T24356] usb 1-1: config 0 has no interfaces? [ 2518.657772][T24356] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2518.675969][T24356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2518.698661][T24356] usb 1-1: config 0 descriptor?? [ 2521.288113][T24356] usb 1-1: USB disconnect, device number 42 [ 2521.718426][T30968] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5152'. [ 2521.992243][T30975] trusted_key: encrypted_key: insufficient parameters specified [ 2522.254053][T30970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2524.634170][T30989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2526.054498][T31021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5163'. [ 2526.069348][T31021] netlink: 'syz.4.5163': attribute type 4 has an invalid length. [ 2526.158412][T31021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2527.590976][T31034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5166'. [ 2527.618048][T31034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5166'. [ 2527.638064][T31034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5166'. [ 2527.668630][T31033] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5165'. [ 2527.916703][T31038] GUP no longer grows the stack in syz.2.5165 (31038): 80005000-80008000 (80004000) [ 2527.937701][T31038] CPU: 1 UID: 0 PID: 31038 Comm: syz.2.5165 Tainted: G L syzkaller #0 PREEMPT(full) [ 2527.937736][T31038] Tainted: [L]=SOFTLOCKUP [ 2527.937744][T31038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2527.937758][T31038] Call Trace: [ 2527.937767][T31038] [ 2527.937777][T31038] dump_stack_lvl+0xe8/0x150 [ 2527.937847][T31038] fixup_user_fault+0x637/0x6f0 [ 2527.937900][T31038] fault_in_user_writeable+0x71/0xd0 [ 2527.937928][T31038] futex_lock_pi+0x800/0xb00 [ 2527.937967][T31038] ? __pfx_futex_lock_pi+0x10/0x10 [ 2527.938026][T31038] ? __pfx_futex_wake_mark+0x10/0x10 [ 2527.938070][T31038] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 2527.938116][T31038] do_futex+0x292/0x420 [ 2527.938146][T31038] ? __pfx_do_futex+0x10/0x10 [ 2527.938170][T31038] ? __vm_munmap+0x2e6/0x3d0 [ 2527.938202][T31038] __se_sys_futex_time32+0x3ab/0x440 [ 2527.938236][T31038] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 2527.938262][T31038] ? rcu_is_watching+0x15/0xb0 [ 2527.938303][T31038] ? __ia32_sys_futex_time32+0x21/0xf0 [ 2527.938334][T31038] __do_fast_syscall_32+0x20d/0x640 [ 2527.938405][T31038] ? do_fast_syscall_32+0x33/0x70 [ 2527.938435][T31038] ? asm_int80_emulation+0x1a/0x20 [ 2527.938471][T31038] ? do_int80_emulation+0x274/0x4d0 [ 2527.938501][T31038] ? trace_irq_disable+0x3b/0x150 [ 2527.938534][T31038] do_fast_syscall_32+0x33/0x70 [ 2527.938564][T31038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2527.938587][T31038] RIP: 0023:0xf7fd6f6c [ 2527.938608][T31038] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2527.938627][T31038] RSP: 002b:00000000f4c0e50c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 2527.938653][T31038] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d [ 2527.938668][T31038] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 2527.938682][T31038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2527.938693][T31038] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2527.938706][T31038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2527.938735][T31038] [ 2529.019408][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.026122][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.159414][T31048] IPVS: Error connecting to the multicast addr [ 2529.235894][T31055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2531.167839][T24356] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2531.327834][T24356] usb 2-1: Using ep0 maxpacket: 16 [ 2531.336686][T24356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 2531.371646][T24356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32770, setting to 1024 [ 2531.418154][T24356] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 2531.447916][T24356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2531.478687][T24356] usb 2-1: config 0 descriptor?? [ 2531.953317][T24356] bigben 0003:146B:0902.002E: unexpected rdesc, please submit for review [ 2531.988733][T24356] hid_parser_main: 5 callbacks suppressed [ 2531.988767][T24356] bigben 0003:146B:0902.002E: unknown main item tag 0x0 [ 2532.070629][T24356] bigben 0003:146B:0902.002E: unknown main item tag 0x0 [ 2532.092401][T24356] bigben 0003:146B:0902.002E: unknown main item tag 0x0 [ 2532.115154][T24356] bigben 0003:146B:0902.002E: unknown main item tag 0x0 [ 2532.133234][T24356] bigben 0003:146B:0902.002E: item fetching failed at offset 4/5 [ 2532.162701][T24356] bigben 0003:146B:0902.002E: parse failed [ 2532.198473][T24356] bigben 0003:146B:0902.002E: probe with driver bigben failed with error -22 [ 2532.277007][T24356] usb 2-1: USB disconnect, device number 121 [ 2533.815757][T31097] syzkaller1: entered promiscuous mode [ 2533.835487][T31097] syzkaller1: entered allmulticast mode [ 2533.875588][T31097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5178'. [ 2534.080740][T31100] tun0: tun_chr_ioctl cmd 1074025675 [ 2534.091153][T31100] tun0: persist enabled [ 2534.102957][T31100] tun0: tun_chr_ioctl cmd 1074025675 [ 2534.119569][T31100] tun0: persist disabled [ 2534.128374][T31100] netlink: 'syz.2.5179': attribute type 1 has an invalid length. [ 2534.136482][T31100] netlink: 'syz.2.5179': attribute type 2 has an invalid length. [ 2534.497719][ T5891] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2534.650477][ T5891] usb 3-1: config 86 has an invalid interface number: 125 but max is 1 [ 2534.660187][ T5891] usb 3-1: config 86 has an invalid interface descriptor of length 5, skipping [ 2534.670289][ T5891] usb 3-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 2534.680244][ T5891] usb 3-1: config 86 has no interface number 0 [ 2534.686597][ T5891] usb 3-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 2534.704924][T31111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5182'. [ 2534.714635][ T5891] usb 3-1: config 86 interface 125 has no altsetting 0 [ 2534.734736][ T5891] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 2534.745382][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2534.759751][ T5891] usb 3-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 2534.774612][T31113] openvswitch: netlink: Message has 1 unknown bytes. [ 2534.782726][T31113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2534.838973][T31112] netlink: 71 bytes leftover after parsing attributes in process `syz.3.5182'. [ 2535.020642][ T5891] usb 3-1: USB disconnect, device number 120 [ 2535.914257][T31129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5185'. [ 2536.318208][T31123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2536.379946][T31136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2536.974159][T31118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2537.458318][T31146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5186'. [ 2538.081817][T31144] ipip0: entered promiscuous mode [ 2538.090249][T31144] ipip0: entered allmulticast mode [ 2538.189610][T31157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5190'. [ 2539.928428][T19849] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 2539.998065][T23595] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2540.097307][T19849] usb 2-1: device descriptor read/64, error -71 [ 2540.180318][T23595] usb 1-1: Using ep0 maxpacket: 8 [ 2540.303247][T23595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2540.319510][T23595] usb 1-1: config 0 has no interfaces? [ 2540.346234][T23595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2540.387838][T19849] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 2540.404843][T23595] usb 1-1: config 0 has no interfaces? [ 2540.454644][T23595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2540.498710][T23595] usb 1-1: config 0 has no interfaces? [ 2540.567857][T23595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2540.582504][T23595] usb 1-1: config 0 has no interfaces? [ 2540.631510][T23595] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 2540.645181][T19849] usb 2-1: device descriptor read/64, error -71 [ 2540.661989][T23595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2540.724482][T23595] usb 1-1: config 0 descriptor?? [ 2540.753294][T31173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2540.778216][T19849] usb usb2-port1: attempt power cycle [ 2541.167326][T19849] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 2541.216308][T19849] usb 2-1: device descriptor read/8, error -71 [ 2541.497950][T19849] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 2541.547780][T19849] usb 2-1: device descriptor read/8, error -71 [ 2541.667662][T19849] usb usb2-port1: unable to enumerate USB device [ 2542.765410][ T5891] usb 1-1: USB disconnect, device number 43 [ 2544.415203][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 2544.415229][ T29] audit: type=1326 audit(1771432610.659:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31207 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2544.477442][ T29] audit: type=1326 audit(1771432610.719:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31207 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2544.532423][ T29] audit: type=1326 audit(1771432610.719:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31207 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2544.625432][ T29] audit: type=1326 audit(1771432610.719:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31207 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2544.677898][ T29] audit: type=1326 audit(1771432610.719:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31207 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2544.727594][ T29] audit: type=1326 audit(1771432610.719:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31207 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2544.793657][ T29] audit: type=1326 audit(1771432610.719:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31207 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2544.828237][ T29] audit: type=1326 audit(1771432610.719:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31207 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2544.877834][ T29] audit: type=1326 audit(1771432610.859:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31207 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2544.945904][ T29] audit: type=1326 audit(1771432610.859:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31207 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2545.098075][T24356] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2545.260986][T24356] usb 4-1: Using ep0 maxpacket: 32 [ 2545.272781][T31216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2545.320359][T24356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2545.334995][T24356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2545.356738][T31219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5201'. [ 2545.389211][T31219] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5201'. [ 2545.402803][T24356] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2545.426856][T24356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.509074][T24356] usb 4-1: config 0 descriptor?? [ 2546.026242][T24356] ft260 0003:0403:6030.002F: unknown main item tag 0x7 [ 2546.229879][T24356] ft260 0003:0403:6030.002F: failed to retrieve chip version [ 2546.252650][T24356] ft260 0003:0403:6030.002F: probe with driver ft260 failed with error -32 [ 2547.657964][T24356] usb 4-1: USB disconnect, device number 113 [ 2547.672501][T31237] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[31237] [ 2551.415356][T31280] KVM: debugfs: duplicate directory 31280-5 [ 2551.632190][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 2551.632211][ T29] audit: type=1804 audit(1771432617.879:2395): pid=31286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5215" name="/newroot/1070/file1" dev="tmpfs" ino=5561 res=1 errno=0 [ 2552.249854][T31295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2552.435893][T31296] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2552.995962][ T29] audit: type=1326 audit(1771432619.239:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31299 comm="syz.3.5219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2553.070125][ T29] audit: type=1326 audit(1771432619.239:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31299 comm="syz.3.5219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2553.161153][ T29] audit: type=1326 audit(1771432619.269:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31299 comm="syz.3.5219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2553.232601][ T29] audit: type=1326 audit(1771432619.269:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31299 comm="syz.3.5219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2553.259683][ T29] audit: type=1326 audit(1771432619.269:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31299 comm="syz.3.5219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2553.297000][ T29] audit: type=1326 audit(1771432619.399:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31299 comm="syz.3.5219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2553.353348][ T29] audit: type=1326 audit(1771432619.399:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31299 comm="syz.3.5219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2553.380948][T31307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5220'. [ 2553.440869][ T29] audit: type=1326 audit(1771432619.399:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31299 comm="syz.3.5219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2553.491379][ T29] audit: type=1326 audit(1771432619.399:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31299 comm="syz.3.5219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7ff2f6c code=0x7ffc0000 [ 2554.217962][T24356] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2554.368067][T24356] usb 3-1: Using ep0 maxpacket: 16 [ 2554.375936][T24356] usb 3-1: config 0 has no interfaces? [ 2554.390179][T24356] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2554.400484][T24356] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2554.423628][T24356] usb 3-1: Manufacturer: syz [ 2554.459554][T24356] usb 3-1: config 0 descriptor?? [ 2556.384024][T31348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5225'. [ 2556.442442][T31348] netlink: 320 bytes leftover after parsing attributes in process `syz.1.5225'. [ 2557.237787][T31356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5228'. [ 2557.439393][T24356] usb 3-1: USB disconnect, device number 121 [ 2557.664801][T31358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2557.793604][T31366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2558.279117][T31369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2558.712924][T31374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2560.361521][T31392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5236'. [ 2561.434001][T31410] input: syz1 as /devices/virtual/input/input88 [ 2561.498038][T31409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2563.349978][T31429] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2563.431390][T31429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2563.853346][T31439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2564.335656][T31430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5245'. [ 2565.776912][T31451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5251'. [ 2566.329061][T31460] pim6reg: left allmulticast mode [ 2566.498621][T31466] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 2567.029406][T31474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5254'. [ 2567.043967][T31457] ------------[ cut here ]------------ [ 2567.050115][T31457] !rwb [ 2567.050148][T31457] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#0: syz.3.5250/31457 [ 2567.063487][T31457] Modules linked in: [ 2567.067961][T31457] CPU: 0 UID: 0 PID: 31457 Comm: syz.3.5250 Tainted: G L syzkaller #0 PREEMPT(full) [ 2567.079044][T31457] Tainted: [L]=SOFTLOCKUP [ 2567.083642][T31457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2567.094106][T31457] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 2567.100665][T31457] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 5d 09 26 fd eb 18 e8 56 09 26 fd eb 0d e8 4f 09 26 fd 4c 89 ff e8 c7 fd 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 2567.110552][T31458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2567.120518][T31457] RSP: 0000:ffffc9000550f8d0 EFLAGS: 00010282 [ 2567.120604][T31457] RAX: 85afff06d23ba200 RBX: 1ffff1100f718204 RCX: 0000000000000046 [ 2567.120624][T31457] RDX: 0000000000000006 RSI: ffffffff8def122b RDI: ffffffff8c27a500 [ 2567.120641][T31457] RBP: dffffc0000000000 R08: ffffffff901170b7 R09: 1ffffffff2022e16 [ 2567.120660][T31457] R10: dffffc0000000000 R11: fffffbfff2022e17 R12: ffff88807b8c1020 [ 2567.120677][T31457] R13: 0000000000000000 R14: ffff888029f73000 R15: ffff88807b8c1000 [ 2567.120695][T31457] FS: 0000000000000000(0000) GS:ffff888125466000(0063) knlGS:00000000f5051b40 [ 2567.120715][T31457] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2567.120732][T31457] CR2: 0000000030bf9ff8 CR3: 0000000079074000 CR4: 00000000003526f0 [ 2567.120754][T31457] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2567.120769][T31457] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2567.120785][T31457] Call Trace: [ 2567.120794][T31457] [ 2567.120811][T31457] blk_register_queue+0x382/0x430 [ 2567.120954][T31457] __add_disk+0x677/0xd50 [ 2567.121022][T31457] ? down_read+0x272/0x2e0 [ 2567.237785][T31457] add_disk_fwnode+0xfb/0x480 [ 2567.242509][T31457] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2567.248834][T31457] loop_add+0x85e/0xb40 [ 2567.253141][T31457] ? __pfx_loop_add+0x10/0x10 [ 2567.257925][T31457] loop_control_ioctl+0x12e/0x5a0 [ 2567.263073][T31457] ? __fget_files+0x2a/0x420 [ 2567.267760][T31457] ? __pfx_loop_control_ioctl+0x10/0x10 [ 2567.273349][T31457] ? __fget_files+0x2a/0x420 [ 2567.278062][T31457] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2567.283670][T31457] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2567.289280][T31457] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2567.295290][T31457] ? __se_sys_futex_time32+0x3ab/0x440 [ 2567.300821][T31457] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 2567.306644][T31457] ? rcu_is_watching+0x15/0xb0 [ 2567.311530][T31457] __do_fast_syscall_32+0x20d/0x640 [ 2567.316758][T31457] ? lockdep_hardirqs_on+0x7a/0x110 [ 2567.322092][T31457] ? do_fast_syscall_32+0x33/0x70 [ 2567.327235][T31457] ? irqentry_exit+0x10e/0x620 [ 2567.332048][T31457] ? rcu_is_watching+0x15/0xb0 [ 2567.336838][T31457] do_fast_syscall_32+0x33/0x70 [ 2567.341786][T31457] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2567.348194][T31457] RIP: 0023:0xf7ff2f6c [ 2567.352304][T31457] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2567.372073][T31457] RSP: 002b:00000000f505150c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2567.380601][T31457] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000004c80 [ 2567.388638][T31457] RDX: 00000000ffffffb6 RSI: 0000000000000000 RDI: 0000000000000000 [ 2567.396626][T31457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2567.404675][T31457] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2567.413283][T31457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2567.421332][T31457] [ 2567.424382][T31457] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2567.431796][T31457] CPU: 0 UID: 0 PID: 31457 Comm: syz.3.5250 Tainted: G L syzkaller #0 PREEMPT(full) [ 2567.442749][T31457] Tainted: [L]=SOFTLOCKUP [ 2567.447120][T31457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2567.457213][T31457] Call Trace: [ 2567.460526][T31457] [ 2567.463469][T31457] vpanic+0x56c/0xa60 [ 2567.467509][T31457] ? __pfx__printk+0x10/0x10 [ 2567.472131][T31457] ? __pfx_vpanic+0x10/0x10 [ 2567.476643][T31457] ? is_bpf_text_address+0x292/0x2b0 [ 2567.481953][T31457] ? is_bpf_text_address+0x26/0x2b0 [ 2567.487199][T31457] panic+0xc5/0xd0 [ 2567.490966][T31457] ? __pfx_panic+0x10/0x10 [ 2567.495423][T31457] __warn+0x315/0x4f0 [ 2567.499428][T31457] ? wbt_init_enable_default+0x18a/0x220 [ 2567.505086][T31457] ? wbt_init_enable_default+0x18a/0x220 [ 2567.510822][T31457] __report_bug+0x29a/0x540 [ 2567.515420][T31457] ? do_fast_syscall_32+0x33/0x70 [ 2567.520463][T31457] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2567.526989][T31457] ? wbt_init_enable_default+0x18a/0x220 [ 2567.532638][T31457] ? __pfx___report_bug+0x10/0x10 [ 2567.537829][T31457] ? wbt_init_enable_default+0x18a/0x220 [ 2567.543502][T31457] report_bug+0x16a/0x220 [ 2567.547866][T31457] ? wbt_init_enable_default+0x18a/0x220 [ 2567.553543][T31457] ? wbt_init_enable_default+0x18c/0x220 [ 2567.559191][T31457] handle_bug+0x98/0x200 [ 2567.563446][T31457] exc_invalid_op+0x1a/0x50 [ 2567.567977][T31457] asm_exc_invalid_op+0x1a/0x20 [ 2567.572865][T31457] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 2567.579167][T31457] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 5d 09 26 fd eb 18 e8 56 09 26 fd eb 0d e8 4f 09 26 fd 4c 89 ff e8 c7 fd 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 2567.598785][T31457] RSP: 0000:ffffc9000550f8d0 EFLAGS: 00010282 [ 2567.604868][T31457] RAX: 85afff06d23ba200 RBX: 1ffff1100f718204 RCX: 0000000000000046 [ 2567.612850][T31457] RDX: 0000000000000006 RSI: ffffffff8def122b RDI: ffffffff8c27a500 [ 2567.620836][T31457] RBP: dffffc0000000000 R08: ffffffff901170b7 R09: 1ffffffff2022e16 [ 2567.628834][T31457] R10: dffffc0000000000 R11: fffffbfff2022e17 R12: ffff88807b8c1020 [ 2567.636817][T31457] R13: 0000000000000000 R14: ffff888029f73000 R15: ffff88807b8c1000 [ 2567.644816][T31457] blk_register_queue+0x382/0x430 [ 2567.649901][T31457] __add_disk+0x677/0xd50 [ 2567.654514][T31457] ? down_read+0x272/0x2e0 [ 2567.658961][T31457] add_disk_fwnode+0xfb/0x480 [ 2567.663660][T31457] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2567.669517][T31457] loop_add+0x85e/0xb40 [ 2567.673703][T31457] ? __pfx_loop_add+0x10/0x10 [ 2567.678428][T31457] loop_control_ioctl+0x12e/0x5a0 [ 2567.683487][T31457] ? __fget_files+0x2a/0x420 [ 2567.688111][T31457] ? __pfx_loop_control_ioctl+0x10/0x10 [ 2567.693688][T31457] ? __fget_files+0x2a/0x420 [ 2567.699946][T31457] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2567.705530][T31457] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2567.711025][T31457] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2567.717031][T31457] ? __se_sys_futex_time32+0x3ab/0x440 [ 2567.722549][T31457] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 2567.728386][T31457] ? rcu_is_watching+0x15/0xb0 [ 2567.733198][T31457] __do_fast_syscall_32+0x20d/0x640 [ 2567.738691][T31457] ? lockdep_hardirqs_on+0x7a/0x110 [ 2567.743917][T31457] ? do_fast_syscall_32+0x33/0x70 [ 2567.748972][T31457] ? irqentry_exit+0x10e/0x620 [ 2567.753768][T31457] ? rcu_is_watching+0x15/0xb0 [ 2567.758577][T31457] do_fast_syscall_32+0x33/0x70 [ 2567.763485][T31457] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2567.769831][T31457] RIP: 0023:0xf7ff2f6c [ 2567.774132][T31457] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 2567.793773][T31457] RSP: 002b:00000000f505150c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2567.802214][T31457] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000004c80 [ 2567.810210][T31457] RDX: 00000000ffffffb6 RSI: 0000000000000000 RDI: 0000000000000000 [ 2567.818206][T31457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2567.826210][T31457] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2567.834200][T31457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2567.842205][T31457] [ 2567.845865][T31457] Kernel Offset: disabled [ 2567.850208][T31457] Rebooting in 86400 seconds..