last executing test programs: 25m10.835968578s ago: executing program 2 (id=1700): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x1, 0x800, 0x0, 0xa7}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a01"], 0xa0}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_XSAVE2(r7, 0x9000aecf, &(0x7f000039f000/0x2000)=nil) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000d80)={"6cdd4237dd245c8404721efdc9c8dc1964125fa900002b761c6ec25b2bec0ba4c8052dc93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d269c438b46485f02baee1ab60ff4758e066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001004000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9d1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a6baa41d614f6ffff1bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ffd3bf79a1f5c5dc4562d22db8780edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff60000adfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c05c41554cef107cd2c569319d6e9bb2058d023f669a64fc7d9684b45b000000fb354673dcfa9235ea5a2ff23c17cfc5acb290e8976dcac779ff0100f5620000003d4e1800fe28a774b99d3890bd37428617de4cdd6f53c419ce78754182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fdd5599234cb10459e33b5208752726ed9f0c340d494b82d19cc930bb8a5f8b4da8f4603ac0c3b698384e1b4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f26df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132155fa4525c488c7ff1f040f00e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc028fd3d972c3eff254297b6bf400009c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f699613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801ffff00002bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba76c1381b1cec6ddaa76e186719d819164300"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x42090}, 0xc014) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) 25m9.058975815s ago: executing program 2 (id=1708): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040400010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x20, 0x1, 0x37, {0x37, 0x22, "eb27f2bf45411e550d3152ef3f67bfac6300c10bd5aed5205bb0221b590e35d0a3d65edd8f51fc47170fbd9cb429e9050d012e35a1"}}, 0x0}, &(0x7f0000000580)={0x1c, &(0x7f00000004c0)={0x0, 0x15, 0xa, "ac63796f7fc2ee450744"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 25m7.031279924s ago: executing program 2 (id=1716): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff"], 0x50) close(r4) 25m6.441678941s ago: executing program 2 (id=1718): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xfffffffffffffdd1, 0x1, [{0x70, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x176e}}]}, @action_gd=@TCA_ACT_TAB={0xffffffffffffff71, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xfffffffffffffdd1, 0x1, [{0x70, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x176e}}]}, @action_gd=@TCA_ACT_TAB={0xffffffffffffff71, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x2, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x2, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 25m5.766193149s ago: executing program 2 (id=1720): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25m5.339349848s ago: executing program 2 (id=1723): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, 0x0, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040), 0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x53, 0x40108001, 0x0, 0xfffffffffffffff1, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x200002, 0x9, 0x6, 0x2, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x2, 0xd}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000002c0)={0x41, 0x0, 0x0, 0x3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) syz_open_procfs(0x0, 0x0) socket(0x28, 0x0, 0x1) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x7a) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) ptrace$getregset(0x4205, r9, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) keyctl$invalidate(0x15, r7) 25m4.609468283s ago: executing program 32 (id=1723): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, 0x0, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040), 0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x53, 0x40108001, 0x0, 0xfffffffffffffff1, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x200002, 0x9, 0x6, 0x2, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x2, 0xd}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000002c0)={0x41, 0x0, 0x0, 0x3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) syz_open_procfs(0x0, 0x0) socket(0x28, 0x0, 0x1) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x7a) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) ptrace$getregset(0x4205, r9, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) keyctl$invalidate(0x15, r7) 23m42.509593948s ago: executing program 1 (id=2093): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000f80)}}], 0x1, 0x84) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0x48}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1b0, 0x29, 0x36, {0x5e, 0x32, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xeff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x380}}], 0x1, 0x810) creat(&(0x7f00000000c0)='./bus\x00', 0x118) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x45050, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x405}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 23m42.133177034s ago: executing program 1 (id=2096): r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xb6, 0x34, 0x18, 0x20, 0x525, 0xa4a4, 0xd37e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x6, 0x4, 0xa0, 0xf3, "", [{{0x9, 0x4, 0x84, 0x6, 0x2, 0x2, 0x5, 0xb5, 0x4, [], [{{0x9, 0x5, 0xa, 0x1, 0x10, 0xf8, 0x6c, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x410, 0xe0, 0xa, 0x3}}]}}]}}]}}, 0x0) 23m40.740737688s ago: executing program 1 (id=2103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd26, 0x25dfdbfe, {{@in6=@empty, @in=@remote, 0x0, 0x6, 0x0, 0x1, 0x2, 0x0, 0x10, 0xc, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, {}, 0x0, 0x10, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xfffffffe, 0x2, {0x3, 0xe265, 0x1ff}}, @TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x8}, @TCA_HTB_INIT={0x0, 0x2, {0x3, 0x0, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x492a}]}}]}, 0x48}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x8040}, 0x18) mknodat(r7, &(0x7f0000000300)='./file0\x00', 0x200, 0xe) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000e00)={&(0x7f0000000000), 0xc, &(0x7f0000000dc0)={&(0x7f0000000740)={0x654, r8, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x168, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3ff, 0x5ec, 0xb, 0xd, 0x2, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x12, 0x4, 0x36, 0x9, 0x16, 0x30, 0x24, 0xc, 0x16, 0x6, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x5, 0x3}, {0x2, 0x9}, {0x4, 0x8}, {0x4, 0x9}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x9}, {0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x1b, 0xc, 0x16, 0x18, 0x24, 0x36]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x43, 0x2, 0x18, 0x16, 0x48, 0x16, 0x3, 0x48, 0x0]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x3}, {0x7}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x1}, {0x1, 0x6}, {0x1, 0x7}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x1}, {0x1, 0x2}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x4}, {0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x5, 0x6}, {0x1}, {0x0, 0x7}, {0x4, 0x8}, {0x2, 0x7}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x2, 0x5}, {0x4, 0x2}, {0x5, 0x5}, {0x4, 0x6}, {0x2}, {0x6, 0x1}, {0x0, 0x2}, {0x4, 0x6}]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x2}, {0x1, 0x3}, {0x1, 0x2}, {}, {0x6, 0x7}, {0x2, 0x8}, {0x7, 0x9}, {0x4, 0x6}, {0x4, 0x5}, {0x6, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x5, 0x4}, {0x6}, {0x3, 0x7}, {0x0, 0x5}, {0x4, 0x3}, {0x2, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x3}, {0x3}, {0x1, 0x6}, {0x1, 0xa}, {0x2, 0x6}, {0x3, 0x3}, {0x6, 0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x7, 0x2}, {0x1, 0x7}, {0x1, 0x1}, {0x3, 0xa}, {0x1, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x7, 0x9}, {0x5, 0xa}, {0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xb, 0x6, 0x3, 0xae5, 0x4, 0x7, 0x10]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x6c, 0x16, 0x12, 0x6, 0x5, 0x18]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x6c, 0x30, 0xb, 0x6c, 0x6, 0x6, 0x12, 0x18, 0x5, 0x36, 0x30, 0x60, 0xc, 0x24, 0x5, 0x36, 0xb, 0x1, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4c, 0x0, 0xfe01, 0x5, 0x5, 0x8, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x30, 0x3, 0x18, 0x0, 0x30, 0x48, 0xc, 0x30, 0xb, 0x0, 0x0, 0x6, 0x30, 0x5, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x17e, 0x3, 0x1, 0x8, 0x4, 0x7fff, 0x545]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0xfff, 0x8000, 0x2, 0x5, 0x8000, 0x4, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x7, 0xffff, 0x4, 0x10, 0x9, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x8, 0x2, 0x7c, 0x3, 0x9, 0xa4c, 0x2]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x40, 0x1000, 0x77, 0x6, 0x3, 0x1, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x919d, 0x6, 0xa, 0x1ff, 0xe, 0xa046, 0x7, 0xffff]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x2}, {0x5, 0x5}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0x9}, {0x3, 0x7}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x3, 0x19, 0xc, 0x4, 0x30, 0x2, 0x30, 0x4, 0x36, 0x1b, 0x30, 0x1, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xd2e, 0x0, 0x40, 0x5, 0x1, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0xb, 0x48, 0xb, 0x1, 0x4, 0x30, 0x3, 0xc, 0x24, 0xc, 0x1f, 0x30, 0x30, 0x18, 0x60, 0xb, 0x24, 0x5]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x62e0, 0x8, 0x8001, 0x8, 0x9, 0x9, 0x64, 0xcc]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x5, 0x1, 0x4, 0x4, 0x6, 0x24, 0x2, 0x2, 0x4, 0x60, 0x13, 0x2, 0x13, 0x48, 0x12, 0x33, 0x18, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x12, 0x36, 0x36, 0x6c, 0x16, 0x16, 0x2, 0x3, 0x60, 0x3d, 0x4, 0x24, 0xb, 0x24, 0xb46db51c480d814b, 0x16, 0x12, 0x48, 0x66, 0x18, 0xc]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x60, 0x24, 0x3, 0x24, 0x60, 0x24, 0x1f, 0x16, 0x6, 0x4, 0x18, 0x5, 0x48, 0x6, 0x18, 0x4, 0x24, 0x1, 0x18, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb3, 0xee9, 0x91cf, 0xfb04, 0x2, 0x1, 0x400, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xb, 0xce3c, 0x3, 0x5e, 0x8, 0xb2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x4, 0xb, 0x16, 0x24, 0x60, 0x9, 0x1b, 0x18, 0xc, 0x1, 0x12, 0xc, 0x12, 0x2, 0x24, 0x3, 0x60, 0x6, 0x4, 0x18, 0x30, 0xc, 0x1b, 0x5, 0x1b, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb2a6, 0x6, 0x1, 0x6, 0xd, 0x4, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe, 0x7, 0x2, 0x1, 0x1, 0x10, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x9b6, 0xba23, 0x4, 0x3, 0x1, 0x7, 0x1]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x1, 0x5}, {0x6, 0x5}, {0x5, 0x2}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x8}, {0x5}, {0x7, 0x4}, {0x5, 0x3}, {0x6, 0x4}, {0x6, 0x9}, {0x1, 0x6}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x6, 0x400, 0x16, 0xfffd, 0x7fff, 0xfff7, 0xfff7]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x6}, {0x3, 0x9}, {0x4, 0x7}, {0x4, 0xa}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x3, 0x30, 0xb, 0x1b, 0x30, 0x24, 0x12, 0x6c, 0x24, 0x1d, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x1ff, 0xffff, 0x1, 0x7, 0x3, 0xdbeb]}}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x1e0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xb000, 0xf046, 0x6, 0x3, 0x1000, 0x3, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x0, 0x36, 0x16, 0x55, 0x5, 0xc, 0x7e, 0x6c, 0x24, 0x1b, 0x2, 0x12]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x1}, {0x6, 0x3}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0xa}, {0x1}, {0x5, 0x2}, {0x5, 0x4}, {0x3, 0x5}, {0x7, 0x2}, {0x6}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0x7}, {0x0, 0x6}, {0x3, 0x7}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x0, 0x6, 0x0, 0x2, 0x5, 0x8640]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xbb, 0x7, 0x6, 0x2, 0x5, 0x4, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x3, 0x1b, 0x1, 0x6c, 0x1, 0x2]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4e, 0x9, 0x36, 0x2, 0x5, 0x7d, 0x2e, 0x4d, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0xf2a5, 0xcc6, 0x70e1, 0x5, 0x8, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x81, 0x9, 0x6, 0x7, 0x9, 0x2, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6c, 0x0, 0x1b, 0x9, 0x30, 0x5, 0x36, 0x5, 0x30, 0x4, 0x48, 0x4, 0x18, 0xc, 0x12, 0x18]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x1000, 0x7f, 0x0, 0x8, 0x0, 0xe]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x3, 0x52, 0x15, 0x5d, 0x3, 0xb, 0x9, 0x26, 0x9, 0x18, 0xa, 0x3, 0x60, 0x2, 0x9, 0xb, 0x36, 0x2, 0x12, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7a, 0x5, 0x5, 0x0, 0x5, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x57, 0x5, 0x1ff, 0x0, 0x9, 0x7, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x3, 0xffff, 0xfffc, 0x6, 0x3, 0xad8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x140, 0xad, 0x6, 0x8, 0x80, 0x9, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x5, 0x2, 0x7, 0xfc01, 0xf652]}}]}]}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x3, 0x0, 0xfffe, 0x8, 0x0, 0x3ff]}}]}]}]}, 0x654}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400efffff08058103"], 0x0) 23m39.313878497s ago: executing program 1 (id=2109): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1800001, 0x5d032, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x3, 0x1, 0x0, 0x7e}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000007080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[], 0xc}}], 0x1, 0x4000000) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) syz_open_dev$media(&(0x7f00000001c0), 0x10000, 0x200) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) syz_io_uring_setup(0x1bc9, &(0x7f0000000000)={0x0, 0x725a, 0x20, 0x0, 0x35b}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect(0x0, 0x24, &(0x7f0000001880)=ANY=[@ANYBLOB="120101020a94060100166701020301090212000106ef400a090439060094bc3d00000000"], &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0}) 23m36.197212028s ago: executing program 1 (id=2126): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1c, 0x4, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x0, 0x2, 0x3, 0x6, 0xfffffffffffffffc, 0x4}, @map_fd={0x18, 0xb}, @generic={0x5, 0x2, 0x6, 0x9ec, 0x8}], &(0x7f00000001c0)='GPL\x00', 0xffffffbf, 0xa9, &(0x7f0000000280)=""/169, 0x40f00, 0x30, '\x00', r2, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x5, 0x1, 0x5, 0x5}], 0x10, 0x83}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x32c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x300, 0x2, [@TCA_BPF_ACT={0x108, 0x1, [@m_ife={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7ffffffd, 0x2, 0x7, 0x7ff, 0x9}}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x8, 0x10000, 0x10}, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}]}, {0x43, 0x6, "5b700b3285f8fc9ee3f498aad54b69f4365ba72d70be6a30faeae3f32b84f8188d8713961e5306feeb66f2ed7efa1552d05a5350c0f9b64eac0ccdd315fcaf"}, {0xc, 0x7, {0x1, 0xcece5c3b2b80a312}}, {0xc, 0x8, {0x5, 0x3}}}}]}, @TCA_BPF_ACT={0x1dc, 0x1, [@m_nat={0x9c, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x71, 0x6, "75362c8cd3e295fa443a5dcf67ca872ee530ae24cf290ca230370225fb2740c7f82c2318c22ff684b72f67bc03817563bc6b4c8579f10dfa743df951f57c6defd2e08d5243cd88ca26abe6e0b31bdb268ccb372d5274ffa8190c5cb24b26c2950af51ad3df807b8e8f4a904f92"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x38, 0x8, 0x0, 0x0, {{0x7}, {0x4}, {0x10, 0x6, "195a58006e3a1490c261acf2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x5c, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x32, 0x6, "3c40d2ea525c5c470e547de4eb2b0e52f39a1960e6db087fecce2886deb80f4742e35300e6b9bf3c3634530f8966"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xa8, 0x8, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0x1, 0x10000000, 0x80000000, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x821, 0x4, 0x0, 0x8}}]}, {0x41, 0x6, "eba6037abdce421c8b5e5a403bf5142760a1298035be64d4872c17bfec1ebba2dd80cb6f463aeff33c7a14b9e8660e0bba7319173c33e5ba99c85f0863"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xc}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 23m35.882572357s ago: executing program 1 (id=2128): syz_usb_connect$hid(0x4, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x66, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x408, 0xb319, 0x3}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x6}}) socket$key(0xf, 0x3, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002500010329bd7000fddbdf251500000004002f803969fb600a61a544b0cfd1f409f77f5af580062e3b808f6375f146098f148c23bfc988c4f9f43607d6e2174c"], 0x18}, 0x1, 0x0, 0x0, 0xc804}, 0x3e59cdaa2f3e420c) r7 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x6) fcntl$addseals(r7, 0x409, 0x3f) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x2000) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r8 = socket(0x2c, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 23m35.559479203s ago: executing program 33 (id=2128): syz_usb_connect$hid(0x4, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x66, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x408, 0xb319, 0x3}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x6}}) socket$key(0xf, 0x3, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002500010329bd7000fddbdf251500000004002f803969fb600a61a544b0cfd1f409f77f5af580062e3b808f6375f146098f148c23bfc988c4f9f43607d6e2174c"], 0x18}, 0x1, 0x0, 0x0, 0xc804}, 0x3e59cdaa2f3e420c) r7 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x6) fcntl$addseals(r7, 0x409, 0x3f) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x2000) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r8 = socket(0x2c, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 20m3.811025277s ago: executing program 4 (id=3025): ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x6) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80) (async) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)=""/53, &(0x7f0000000080)=0x35) (async) syz_emit_ethernet(0x4e, &(0x7f0000002100)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, [{0x5, 0x0, "9dc8"}]}}}}}}, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) (async) recvmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r5 = fanotify_init(0x200, 0x0) r6 = dup2(r5, r4) write$cgroup_subtree(r6, 0x0, 0x0) (async) userfaultfd(0x80801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39ddaa) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708008000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r7, @ANYRES32=r3], 0x0) (async) syz_open_dev$I2C(&(0x7f00000000c0), 0x7ffffffe, 0x200) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r8, 0x0, 0xd, &(0x7f0000000240)=""/166) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000240)={0x4, 0x0, {0xe, @struct={0x1ff, 0x5}, 0x0, 0x41, 0x8000000000000001, 0x1, 0x325, 0x800, 0x37, @usage=0x12000000000, 0x10001, 0x3, [0x8000000000000001, 0x100000000, 0x1, 0x3, 0x4, 0x7]}, {0xfffffffffffffffe, @struct={0x3, 0x6}, 0x0, 0x0, 0x352f, 0x3, 0x8000000000000001, 0x8, 0x480, @usage=0x800, 0x4ff, 0x101, [0x3, 0x80, 0x4, 0x3, 0x1, 0xe]}, {0x7d00, @struct={0x9, 0x1c}, 0x0, 0x6, 0xff, 0x100000000, 0x1, 0x0, 0x7a, @usage=0x9, 0x9, 0x800, [0x80, 0x4, 0x3, 0xbc3, 0xfffffffffffffffa, 0xfff]}, {0x200, 0x40000000000, 0xffffffff}}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001280)={r9, "934ff87354365910401ce2da49e9b186"}) 20m3.564859121s ago: executing program 4 (id=3029): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001380)={&(0x7f0000001140)={0xa, 0x4e21, 0x5, @loopback}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000011c0)="4a707786d5de5e6e4562b5a95b4acd5ab3036ed04913b5b9983e29928f8adee3204bad6fb40590c7e4c8939ee13fb3ac2dd57d9991eaed43fc5e46d10e0f227fca6c0f5c6dc739e4e4a11ee45d27fa62b6df0406eb986605437055d350a80912c38f99eb2322d9bdd72e185fff7ec1ce2ac346ebf182c77c908a71f075a1604061698c1f8fc6727f8b28751936970b8e04ea5e2afdcd6bf5a4053a9c1d7abb", 0x9f}], 0x1, &(0x7f00000012c0)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x29, 0xa, 0x0, 0x8, 0x0, [@private1, @ipv4={'\x00', '\xff\xff', @remote}, @private1, @rand_addr=' \x01\x00', @local]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x29, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x101}, @pad1, @generic={0x9, 0x6, "8d0f61f017a6"}]}}}], 0x98}, 0x40080) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 20m3.381896658s ago: executing program 4 (id=3031): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'vlan0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x0}) r4 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)=0x200000) r8 = ioctl$TIOCGPTPEER(r7, 0x5441, 0x3) ppoll(&(0x7f0000000180)=[{r8, 0x128c}, {r8, 0xfae83c30bf5f62e}], 0x2, 0x0, 0x0, 0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000040)={0x80000001, 0x6, 0xff, 0xf52, 0x6, "e3cda6606b8e839d173f1c305256591f7b3424"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600"}) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f00000005c0)={"0c070000007dab000000040400000039622fb7000000000d00", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r11, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{}, {}]}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000040)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x9, 0x6}, {0xab56d2b3a897685d, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0xbae0}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0xf, 0xc}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 20m0.28934898s ago: executing program 4 (id=3051): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40880) finit_module(0xffffffffffffffff, &(0x7f00000002c0)='skcipher\x00', 0x2) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) 19m59.748740231s ago: executing program 4 (id=3055): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) accept4$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000440)=0x14, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="440100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x20, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x19}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0xd, 0x4, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xfd9e, 0x3}) write$P9_RGETLOCK(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="240000003702000000594ef20d00"/24, @ANYRES32=r10, @ANYBLOB="0600706f72743100"], 0x24) r11 = socket(0x10, 0x803, 0x6) r12 = socket$inet(0xa, 0x801, 0x84) connect$inet(r12, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r12, 0x8) r13 = accept4(r12, 0x0, 0x0, 0x0) sendto$inet(r13, &(0x7f00000004c0)="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", 0xfd48, 0x90, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB="3c0012800b000100626174616476"], 0x64}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 19m59.629773199s ago: executing program 4 (id=3056): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x11) landlock_restrict_self(r0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r1 = getpgid(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000c40)=0x2, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000140)=""/30, &(0x7f0000000240)=0x1e) r3 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r3, 0x10000030, 0x0, 0x4) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000001300)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000001040)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x3, 0x4}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) prlimit64(0x0, 0x8, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x8) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) sendmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="28b340daf363963ccb20261a0989ad58f1521bd4e1b3f9", 0x17}], 0x1}}], 0x1, 0x11) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0xc6, 0x6, @remote}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) 19m59.322762603s ago: executing program 34 (id=3056): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x11) landlock_restrict_self(r0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r1 = getpgid(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000c40)=0x2, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000140)=""/30, &(0x7f0000000240)=0x1e) r3 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r3, 0x10000030, 0x0, 0x4) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000001300)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000001040)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x3, 0x4}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) prlimit64(0x0, 0x8, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x8) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) sendmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="28b340daf363963ccb20261a0989ad58f1521bd4e1b3f9", 0x17}], 0x1}}], 0x1, 0x11) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0xc6, 0x6, @remote}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) 13.656595225s ago: executing program 7 (id=7907): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x1c, 0x32, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xb1eb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2040880}, 0x4000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1412, 0x2, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000340)={{r1, &(0x7f0000000200)='+{\x00', 0x12000, &(0x7f0000000240)={@_ha_fsid={[0x7, 0x401]}, {0x7, 0x3, 0x4bd2, 0x5}}, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xe611}, {[0x1, 0xfffffffb, 0x4, 0x2]}, 0x6, 0x3d, &(0x7f0000000300)=""/61}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8d00020}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20004047) r5 = openat(r2, &(0x7f0000000680)='./file0\x00', 0x4800, 0x23) r6 = syz_open_dev$mouse(&(0x7f00000006c0), 0x6, 0x705000) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000780)=[@text32={0x20, &(0x7f0000000700)="0f01c5650f01c366b850008ee0c744240000300000c74424022be20000c7442406000000000f01142466b822008ec02ef30f090fa90f0014e90f20d835200000000f22d865660f6b7640", 0x4a}], 0x1, 0x2, &(0x7f00000007c0), 0x0) ioctl$IMCLEAR_L2(r6, 0x80044946, &(0x7f0000000800)=0x7) io_uring_enter(r1, 0x610, 0xdbc2, 0x43, &(0x7f0000000840)={[0x5]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f00000008c0)={0x800, 0x1, 0x100, 0x8, 0x711, 0x5}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x801408}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x18, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x11) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000a00)) read$FUSE(r5, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r5, &(0x7f0000002a80)={0x18, 0x0, r9}, 0x18) mount$fuseblk(&(0x7f0000002ac0), &(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40), 0x1, &(0x7f0000002b80)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x3}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}], [{@smackfsroot={'smackfsroot', 0x3d, 'devlink\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'nl80211\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r10}}]}}) syz_clone3(&(0x7f0000003e80)={0x280, &(0x7f0000002d00), &(0x7f0000002d40)=0x0, &(0x7f0000002d80), {0x18}, &(0x7f0000002dc0)=""/93, 0x5d, &(0x7f0000002e40)=""/4096, &(0x7f0000003e40)=[r11, r11, r11, r11, r11, 0x0], 0x6, {r7}}, 0x58) r13 = syz_open_procfs(r12, &(0x7f0000003f00)='net/ptype\x00') r14 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000040c0)={0x0, &(0x7f0000003f40)=[@out_dx={0x6a, 0x28, {0x2387, 0x2, 0x7}}, @nested_amd_invlpga={0x17d, 0x20, {0x40000, 0x19ef}}, @nested_vmresume={0x130, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x7, 0x6}}, @code={0xa, 0x43, {"660fc7b500000000d9f3660f38805d000f20db0f01f88f097c816100b8010000000f01c1c422a9bc9ff8000000f3ad0f013f"}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x82, 0x3, 0xe, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro64=0x2401, 0xe, 0x6, 0x2}}, @in_dx={0x69, 0x20, {0xb4b5}}], 0x153}) ioctl$KVM_SET_FPU(r14, 0x41a0ae8d, &(0x7f0000004100)={'\x00', 0x4, 0x4, 0x1, 0x0, 0xe, 0x10000, 0x2000, '\x00', 0x1196}) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000042c0), &(0x7f0000004300)=0x4) syz_usb_connect(0x5, 0x5f2, &(0x7f0000004340)={{0x12, 0x1, 0x310, 0xa8, 0x3c, 0x2f, 0x8, 0x1472, 0x9, 0x3056, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e0, 0x3, 0x3, 0x5, 0x80, 0x7, "", [{{0x9, 0x4, 0x5e, 0x1, 0x10, 0x9b, 0x7d, 0x8e, 0x1e, [@hid_hid={0x9, 0x21, 0xf2a, 0x7f, 0x1, {0x22, 0x4f6}}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x9, 0x8, 0x5, [@generic={0x16, 0x0, "8edab16bcbf271f019e9285b91e8c1897315b534"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0xb, 0x81, 0xe}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x4, 0xf, 0x1, [@generic={0x63, 0xc, "f7f1aa0c29fa36c118745ab226f5f29df51d672e73edea4074998bccbf733eab615773b280f82e140ce433cc6e4c446c164bbfcf4e4da6a97e57aec4353a45eecebfbe9a5e90faceaa6483098aa09c35cdaa345d8d8cb06feb2b49e9388c9a8fcb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xecf}]}}, {{0x9, 0x5, 0x80, 0xc, 0x660, 0x91, 0x1, 0xcd}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x8, 0x85, 0x9}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x10, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x7f, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x31, 0x77, 0x2, [@generic={0x7a, 0x3, "214d7d9969b0d1c2325ad1754c5f4c488d0b055d1db266141bb633257d563cd98be37109c4a480b7cce5676f0f8628181a4a04368d426448be604d2c31bd96ee44b680fd057532d5a1cfee3bcc71e761bd58a8b8dd587fa9c4a1093ca8cf06667278564d1fec7e772ff2af00541210586e3e8f35cdff7a88"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x8, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7}]}}, {{0x9, 0x5, 0xf, 0x4, 0x1ff, 0x1, 0x6, 0x4, [@generic={0x84, 0x24, "292394a0f662b425ffb6eee2b0a38c71c2ade6efa0b3ce219ac5a66aa2e61a82e3d57ca2722e1bbaf553d13f653e7d499865642880bae77b396c93b06086c3e98854134336bb60af82406d1f934544a2df1616d81d50787ee41cfcc4e1a098c8e946986da4105bc1ce85a158d940b8cbda350346dd7d1ac32773fe6c4e5bd9a27087"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x5, 0xfb, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xda, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xfdd}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x8, 0xb8, 0x6}}, {{0x9, 0x5, 0x9, 0x3, 0x110, 0x7, 0x6, 0x5, [@generic={0xf1, 0x10, "3b7607d5201b32e2e44848eebcd09863a11ae57ecd33ced75be786cdf26db4c4948d05a61fe4323db24059371671940463527994c58faa437ac8d0f79b4e5078ae3db5de16664f4f866af0ad86d2c1506dd5a9bdd8c0c65598451c86377d031e4cafc367fcff03c3a85e74e1663794e75e2c3b03b2689118c8bfd300d30c941eb8071d2532e3dac1c7c0604adacef6544c05801a11b68cacbded7135974b8b48737f37bc8e6336706f5bfb1a1a3f2b6295e4683f5966b0f3c1b71a05d2c13798b216ac3ab9648e55e68e19efeedbf23cca9f06c5dd2a8a01fa2803c1fcdaea7d154a12bb3a9db7ed078289a0049f36"}, @generic={0x57, 0x0, "a357980decf52e8c85b04b7c947a2e071021b8dd378f6e9434178d70bb72c4daa3065219a48f409fc95af3e1405ea59eca7c30e6482758dbfccc846ff52f7ab7a04be32933b4838f223fdc511c96a3b75930a0a52e"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x16, 0x80, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x3}]}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x6a, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf8, 0x9}, @generic={0x1c, 0x31, "c69b857fa6740c8d2f3fa87c837d7719c81bde052825648ac790"}]}}]}}, {{0x9, 0x4, 0x2d, 0xfd, 0x5, 0x8, 0x15, 0xaf, 0xfd, [@generic={0x13, 0x10, "24e3facdd798933e24cfd2a7b2843d6987"}], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x2, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x4}]}}, {{0x9, 0x5, 0x82, 0x1, 0x40, 0x4, 0x0, 0x6, [@generic={0x3f, 0x8, "762310cf92bedf3a384b43485b0b90de7d1c0626c0612bbe200981f27f8ece51f66270183fff9edbc3d7c7f01fe2fe4b47e7b6db540209268fa4200aa3"}, @generic={0xa6, 0x7, "8c97426301edc517282800ad9ea2a62a28ffbc76da9fe7bdbe58f0144b934711f4555272626a855a23000aa6f871394257b44e3e7975e099c45d6184a0a3a9fca3dca6c5886f3e58bde40eea23498e4d62e0688c5982e69014e8423220a7006819945255c9f2b3d3698664b70ff2dda4197a90d78961107a9849b707022219077f40f6dc2d646a8e77b54aacd55a6c8b300d92f0e62447f7f5ad7578e9650597bf66c828"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x6, 0x1, 0x80}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0xff, 0x4e, 0x9}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0xee, 0x6, 0xfd, [@generic={0xb9, 0x11, "ae557e74ce94d491d414149067bdb97c9996ef8c60f2538b6087062a34fa8c61837076ec78f07a27b5bb0ca661a83977d3e14c10b87f42176e2dbcbdc9ffee1f8876adcfb621c5ebc15e2e9de0f1b89beee604cdd716eb95d9f3b78dab3871939e813b993d1f3479706e7d329991122d83db74eb81cc7fe243d23ee9b8792a982104e41691502315cc357f1beb35e684681b40b82bfb505b5779296c2fa036cef4df3e2bade8c5a89661eaee48297bba34a0c16926e5ff"}]}}]}}, {{0x9, 0x4, 0x9f, 0x5, 0x2, 0xff, 0x3, 0x7c, 0xa, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x0, 0x7, "f45b2a"}]}], [{{0x9, 0x5, 0xb, 0xc, 0x3ff, 0xe, 0x6, 0xa0}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x1, 0x6, 0x14, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7ff}]}}]}}]}}]}}, &(0x7f0000004b40)={0xa, &(0x7f0000004940)={0xa, 0x6, 0x110, 0x5, 0x0, 0x3, 0x8, 0x1b}, 0x15, &(0x7f0000004980)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x2a}]}, 0x3, [{0x48, &(0x7f00000049c0)=@string={0x48, 0x3, "7ac3b8ba91819e5b4d6124bcc2d008dab609ea5762becd0ffd92753c8f6b64828bcf983cd301458fd9d6579bdaaead0c5ee7603f95015972daebba56adbeb5ce8c6e23d4be03"}}, {0xb7, &(0x7f0000004a40)=@string={0xb7, 0x3, "db8cc1e85dc081ef6d8a85790cb34285091c09703ec3f5f64fb352daaebc5decd3d01651986b6d0b74fbe77bf33ca3e12087102368f1df0f57bc3695d37c70bd4a9e6cf551e53f331c27283852c9ef4e57b819fd1344f554dd71440f22b404ff4f8e5bcef63be152cc966fb76a2da1654c48d8aeb4666ba1adbbe92391ee7c34bc388b9f7349a3ca584436bb9e81669813d1232de09a62636d7c05ba46ecf6ff7988bc3bb745f90d781a30b6ee856a30e676416fe3"}}, {0x4, &(0x7f0000004b00)=@lang_id={0x4, 0x3, 0x80a}}]}) write$FUSE_GETXATTR(r5, &(0x7f0000004b80)={0x18, 0x0, r9, {0x785420e0}}, 0x18) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000004bc0)={0x100, 0xb7a7, @value=0x2}) write$binfmt_elf32(r13, &(0x7f0000004c00)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x89, 0x3, 0x1, 0x100, 0x3, 0x6, 0x80000001, 0x1ea, 0x38, 0x51, 0x10, 0x100, 0x20, 0x2, 0x4, 0x7fff, 0x7}, [{0x4, 0x10, 0x80000000, 0x9, 0x4, 0x80000000, 0x1, 0x81}, {0x6, 0xffffffff, 0x0, 0x9, 0xffffff81, 0x7, 0xfffffffe, 0x5}], "3dde77c015934a1db80b26a4cb29f04718a262d4e7c131e75bbf43295a2f9940b93d9bbc17cafd781c2c3063cf3027ef7d2fb90e46fcec7b3aa0993fde43bec439a1bd554389e8bcb49261a8b3655a0031a3ff94054e90f2b1b32f45a9e845deb4c3ef2aa90e0e5332062dd7b654b8ab4358f9d66d69111d9096817f4afa7c254c78790077", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xafd) 10.548395202s ago: executing program 7 (id=7921): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) syz_emit_ethernet(0x227, &(0x7f0000000680)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "a61039", 0x1f1, 0x6, 0xff, @mcast1, @private2, {[@hopopts={0xb8, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x1, [0x0]}, @generic={0x8, 0x3f, "82981ba082f3d1173e1a2cc6e79676b336409671475df23d593ef3c1a42649510096ad64c18a31f6cefabac89fb61f6d9c804e6293541f726288a6e7de0b52"}, @generic={0xd3, 0xa7, "8f6f14c8bbe8f5a7261b3c10e18bfd7ae5cb5190a890cebda62df6152ff4015e128ed3a0e9ea77a7fd58b9157d0ef16da0ef8da3c7a01fdc33d703817c40494cb966e35da24315d2ee4e106337e1533aa3387910a9a2a2fb362a41efaa721d5e52d39324ade981c7bf678d12f75e8f768fcae2e57e4d2bf338c87c103bec4ba081ecca046be5cbc92184857e89b32ea6bf6ecca68da48c4058ad01c61911f9270661111a73c72f"}, @pad1]}, @hopopts={0x2, 0xc, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x40}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x35}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x1b, "0860a668a275ec3df05be48c72df6b140d887d74adafc557c1e67d"}, @pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x20, 0xd21, [0x80000001]}}]}, @fragment={0x11, 0x0, 0x10, 0x1, 0x0, 0x9, 0x67}, @fragment={0x16, 0x0, 0x7, 0x1, 0x0, 0x7, 0x64}, @routing={0x8, 0x8, 0x1, 0x1, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2d}]}], @payload_direct={{{{0x29, 0x0, 0x0, 0x0, 0x1, 0x8, 0x3, 0x2, 0x4636, 0x0, 0x2, 0x3, 0x1, 0x3, 0x0, 0x8, 0x3, 0x4e23, 0x4e20}, 0x2, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) 9.336955593s ago: executing program 3 (id=7923): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x800) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) r2 = semget$private(0x0, 0x3, 0x101) semtimedop(r2, &(0x7f00000000c0)=[{0x1, 0x6, 0x800}], 0x1, &(0x7f0000000100)={0x77359400}) r3 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000001c0)={0x2, 'ip6erspan0\x00', {0x8}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x44) futex_waitv(&(0x7f0000001d80)=[{0x7, &(0x7f0000000340)=0xfffffffffffffffe, 0x80}, {0x5, &(0x7f0000000380)=0x6, 0x2}, {0xcc50688, &(0x7f00000003c0)=0xba58, 0x82}, {0x0, &(0x7f0000000400)=0xfffffffffffffff8, 0x2}, {0x7, &(0x7f0000000440)=0x4, 0x2}, {0x7fff, &(0x7f0000000480)=0x8000000000000000, 0x2}, {0x81, &(0x7f00000004c0)=0x85, 0x2}, {0x5, &(0x7f0000000500)=0x5, 0x82}, {0x2, &(0x7f0000000540)=0x8, 0x2}, {0x8, &(0x7f0000000580)=0xff, 0x6}, {0x6, &(0x7f00000005c0)=0x1, 0x2}, {0x9, &(0x7f0000000600)=0xac, 0x82}, {0x2, &(0x7f0000000640), 0x82}, {0x40, &(0x7f0000000680)=0x8000, 0x82}, {0x6, &(0x7f00000006c0), 0x80}, {0x2, &(0x7f0000000700)=0x78, 0x2}, {0x5, &(0x7f0000000740), 0x2}, {0x100, &(0x7f0000000780)=0x8, 0x2}, {0x1, &(0x7f00000007c0)=0x8001, 0x1c01a7e5ea7a3d8f}, {0x8, &(0x7f0000000800)=0x6, 0x2}, {0x800, &(0x7f0000000840)=0x40, 0x82}, {0x7, &(0x7f0000000880)=0x1, 0x2}, {0x80000001, &(0x7f00000008c0)=0x4, 0x2}, {0x400, &(0x7f0000000900)=0x83d, 0x2}, {0x2, &(0x7f0000000940)=0x5, 0x2}, {0x3, &(0x7f0000000980)=0x1, 0x82}, {0xf5bf, &(0x7f00000009c0)=0x81, 0x2}, {0xfac, &(0x7f0000000a00)=0x2, 0x82}, {0x3, &(0x7f0000000a40)=0xef, 0x2}, {0x4, &(0x7f0000000a80)=0x1, 0x2}, {0x81, &(0x7f0000000ac0)=0x5, 0x82}, {0x9, &(0x7f0000000b00)=0x7, 0x2}, {0x4, &(0x7f0000000b40)=0x8000, 0xbd694772ed10a71e}, {0x41, &(0x7f0000000b80)=0xffffffffffffffff, 0x2}, {0x3, &(0x7f0000000bc0)=0x7, 0x82}, {0x80000001, &(0x7f0000000c00)=0x40, 0x2}, {0x347, &(0x7f0000000c40), 0x2}, {0x0, &(0x7f0000000c80)=0xa43, 0x2}, {0x4, &(0x7f0000000cc0)=0x1, 0x2}, {0xffffffffffffffff, &(0x7f0000000d00)=0xfffffffffffffff8, 0x82}, {0x5, &(0x7f0000000d40)=0x2, 0x82}, {0xfff, &(0x7f0000000d80)=0x3, 0x2}, {0x6, &(0x7f0000000dc0)=0xffffffffffffff81, 0x2}, {0xbd, &(0x7f0000000e00)=0x82000000000000, 0x82}, {0xff, &(0x7f0000000e40)=0x5, 0x2}, {0x2, &(0x7f0000000e80)=0x6, 0x82}, {0x1, &(0x7f0000000ec0)=0x100000001, 0x2}, {0x1, &(0x7f0000000f00)=0x3, 0x2}, {0x3, &(0x7f0000000f40)=0x4, 0x2}, {0x9, &(0x7f0000000f80)=0x5, 0x2}, {0x6, &(0x7f0000000fc0)=0xde, 0x82}, {0x4, &(0x7f0000001000)=0x8000000000000000, 0x82}, {0x0, &(0x7f0000001040)=0xffff, 0x2}, {0x0, &(0x7f0000001080)=0x100, 0x82}, {0x5670, &(0x7f00000010c0)=0x1, 0x82}, {0x7, &(0x7f0000001100)=0x3, 0x82}, {0x3, &(0x7f0000001140)=0x736b, 0x2}, {0xfffffffffffffff8, &(0x7f0000001180)=0x188a, 0x82}, {0x6, &(0x7f00000011c0)=0x1, 0x80}, {0x1ff, &(0x7f0000001200)=0x3, 0x2}, {0xd2, &(0x7f0000001240)=0x3ff, 0x82}, {0xfffffffffffffff0, &(0x7f0000001280)=0x4, 0x2}, {0xffffffffffffffff, &(0x7f00000012c0)=0x9, 0x2}, {0xfffffffffffffffe, &(0x7f0000001300), 0x82}, {0x4a, &(0x7f0000001340)=0xca4, 0x2}, {0x6, &(0x7f0000001380)=0x9, 0x82}, {0x100000000, &(0x7f00000013c0)=0x6, 0x82}, {0x8, &(0x7f0000001400)=0x1, 0x2}, {0x519, &(0x7f0000001440)=0x2, 0x82}, {0xaa0, &(0x7f0000001480)=0x2, 0x82}, {0xff, &(0x7f00000014c0)=0x9, 0x82}, {0xe25, &(0x7f0000001500)=0x800, 0x2}, {0x2, &(0x7f0000001540)=0x101, 0x82}, {0x4, &(0x7f0000001580)=0x401, 0x82}, {0x8e, &(0x7f00000015c0)=0x2}, {0x2, &(0x7f0000001600)=0x3, 0x2}, {0x4, &(0x7f0000001640)=0x7fffffffffffffff, 0x82}, {0xad9e, &(0x7f0000001680)=0x200, 0x2}, {0x7, &(0x7f00000016c0)=0x1, 0x2}, {0x10001, &(0x7f0000001700)=0x229, 0x2}, {0x8, &(0x7f0000001740)=0x13510000000, 0x82}, {0x1, &(0x7f0000001780)=0xe55e, 0x82}, {0x4, &(0x7f00000017c0)=0x200, 0x82}, {0xfffffffffffffff7, &(0x7f0000001800)=0x2, 0x82}, {0x401, &(0x7f0000001840)=0x2, 0x82}, {0xe78, &(0x7f0000001880)=0x7, 0x82}, {0x8, &(0x7f00000018c0)=0xf900000000, 0x82}, {0x3, &(0x7f0000001900)=0x9af7, 0x82}, {0x7f, &(0x7f0000001940)=0xfff, 0x82}, {0x8, &(0x7f0000001980)=0x9, 0x82}, {0x7, &(0x7f00000019c0)=0xb, 0x2}, {0xffffffffffffc162, &(0x7f0000001a00)=0x8, 0x2}, {0x2, &(0x7f0000001a40), 0x82}, {0x6, &(0x7f0000001a80)=0x5, 0x2}, {0xdae, &(0x7f0000001ac0)=0x6, 0x2}, {0x6, &(0x7f0000001b00)=0x401, 0x2}, {0x2, &(0x7f0000001b40)=0x9, 0x82}, {0x0, &(0x7f0000001b80)=0x7, 0x9dd53941acd34756}, {0xe157, &(0x7f0000001bc0)=0xc, 0x82}, {0x8, &(0x7f0000001c00)=0xff, 0x82}, {0x3ff, &(0x7f0000001c40), 0x2}, {0x100000000, &(0x7f0000001c80)=0x7f, 0x2}, {0x1ff, &(0x7f0000001cc0)=0x6, 0x2}, {0x6, &(0x7f0000001d00)=0x3, 0x2}, {0x4, &(0x7f0000001d40)=0x8, 0x2}], 0x69, 0x0, &(0x7f0000002780)={0x0, 0x989680}, 0x1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000027c0)={'\x00', 0xfab3, 0x6, 0x8f5, 0x0, 0xfffffffffffffff0, 0xffffffffffffffff}) sched_rr_get_interval(r6, &(0x7f0000002840)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000002880)={0x2, [0x0, 0x0]}) io_setup(0x5, &(0x7f00000028c0)=0x0) io_getevents(r7, 0x8, 0x2, &(0x7f0000002900)=[{}, {}], &(0x7f0000002940)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)=@getrule={0x14, 0x22, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40048c5) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000002a80)={0x0, 0x0}, &(0x7f0000002ac0)=0xc) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000002bc0)={{0x1, 0x0, 0xffffffffffffffff, r9, r10, 0xa4, 0x11d}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002c40), 0x10641, 0x0) ioctl$SNDCTL_SYNTH_INFO(r11, 0xc08c5102, &(0x7f0000002c80)={"fa8e48d22b3b14d402d08d473fa34a684a0243c884ff36bf0e507a336afd", 0x5, 0x2, 0x401, 0xb96, 0x2, 0x4, 0x200, 0x2, [0x5, 0x6, 0x3, 0x8f, 0x9, 0x8, 0x7, 0x5, 0xc000000, 0x19de, 0xbf, 0x60, 0x0, 0x10, 0x4, 0x100, 0x1e40, 0x6, 0x8]}) clock_getres(0x3, &(0x7f0000002d40)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002d80)) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000002f80), &(0x7f0000002fc0)={'U-', 0x80}, 0x16, 0x1) r12 = eventfd(0x10) io_cancel(r7, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x1, 0xfff6, r3, &(0x7f0000003000), 0x0, 0x8, 0x0, 0x1, r12}, &(0x7f0000003080)) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000003240)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003100)={0xd8, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x759}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e000000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000) sendto$inet6(r3, &(0x7f0000003280)="311f4eb5a3df82ef50ce783453837f4b8d88da659d3f28bcf9158c508ea059c40e03930239a08bcf0ef1cd97ac159f435e081591f416803a85ffb9251c0044429b332956d5d0a06c39d42e95786782fbb410435492b56c6f3c171859b6cad284006c8a0c226b114f69b7fddd95335f8f5ad09144c559976952abddc496801c", 0x7f, 0x804, &(0x7f0000003300)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x760}, 0x1c) 8.935413418s ago: executing program 3 (id=7924): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x151200) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f00000001c0)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmmsg$unix(r0, &(0x7f000000a140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x1, 0x2000c080) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 8.304189232s ago: executing program 7 (id=7925): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141011b763620250501997539010203010902240001000010000904840402c4c61f0009050c02000202000a090582020002"], 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000ffc000/0x3000)=nil) (async) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000ffc000/0x3000)=nil) socket$pptp(0x18, 0x1, 0x2) (async) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000002c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x0, 0x7, 0x22, 0x68, 0x0, 0x4, 0x2, 0x0, @private=0xa010102, @broadcast}, {0x11, 0x3, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "23802b26619a"}}}}, 0x30) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x410041, 0x0) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) (async) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) shutdown(r6, 0x1) (async) shutdown(r6, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) pwritev(r3, &(0x7f0000000540)=[{&(0x7f00000000c0)="b202974326635d399c395e261d23e09de2a5a51879287fb9c4a09d5798efbe9580d2911dfb5706b9684739966a32e7cdc027b50c0a9d6f8dfc27840f4cbe664a31d6437e19e772f7d90e8ff66ec96447535a0efb570f4c6e1f9db2edf3602bf6b1fc", 0x62}, {&(0x7f0000000300)="89426ab8d8084bed133754c2df22ae1d2d7531a58b03c6e3142118e1b275260bc11342df06c9c8cdb31c4f5d4c56ce132f31209b36d330ef5b02d05f34fda04344aff30728b917fc246400d90f013bed1ad7a9dab4fac83733dab86d0e103572ee2eee83e727bd74f1f985310f307f467c61dee122dbcbfd7338e4394ec6ff1688a2d2127c7748366ec7ee397bf818837776784f418a2f897935c4eae04f1c5506581fd8c4abbd230259cfb839c2ba17364022e494de2a09ba2de34ed946fa5b29e2c558ed4944", 0xc7}, {&(0x7f0000000400)="4c54f37c3102c31043c2d59a998f18aea4be47735fa20f432304fa64e2cea2e06b36707477dc71e49b8e8fd714d157d9a8b929339415b07c7d118053a15b307682716c3baeaa7116d770f573a81d993c3bd9d6a03d8c2141a9f24ab8e178cb8efd2248e41eb60d26148a280f2c3e0eadb6c25515ded07313f01275679b7b8fd996dd48e50f56ceca44f62273f96319983d7531bb4da5644f3cb433b18c8c4e74ac8bafa70931", 0xa6}, {&(0x7f00000004c0)="a0c5e8ed91052153a247063794117ecfbc4b15efa28db069975ec7b24516eac8af0e5cf78e293d3543e943b0f9eb5a31fd49eb6c362907469ac3685666e99c562575be54cafd01d4716f026e1e1b1ce59c64030c183fcd08a0e1a03edcf5", 0x5e}], 0x4, 0x1, 0xffffffff) (async) pwritev(r3, &(0x7f0000000540)=[{&(0x7f00000000c0)="b202974326635d399c395e261d23e09de2a5a51879287fb9c4a09d5798efbe9580d2911dfb5706b9684739966a32e7cdc027b50c0a9d6f8dfc27840f4cbe664a31d6437e19e772f7d90e8ff66ec96447535a0efb570f4c6e1f9db2edf3602bf6b1fc", 0x62}, {&(0x7f0000000300)="89426ab8d8084bed133754c2df22ae1d2d7531a58b03c6e3142118e1b275260bc11342df06c9c8cdb31c4f5d4c56ce132f31209b36d330ef5b02d05f34fda04344aff30728b917fc246400d90f013bed1ad7a9dab4fac83733dab86d0e103572ee2eee83e727bd74f1f985310f307f467c61dee122dbcbfd7338e4394ec6ff1688a2d2127c7748366ec7ee397bf818837776784f418a2f897935c4eae04f1c5506581fd8c4abbd230259cfb839c2ba17364022e494de2a09ba2de34ed946fa5b29e2c558ed4944", 0xc7}, {&(0x7f0000000400)="4c54f37c3102c31043c2d59a998f18aea4be47735fa20f432304fa64e2cea2e06b36707477dc71e49b8e8fd714d157d9a8b929339415b07c7d118053a15b307682716c3baeaa7116d770f573a81d993c3bd9d6a03d8c2141a9f24ab8e178cb8efd2248e41eb60d26148a280f2c3e0eadb6c25515ded07313f01275679b7b8fd996dd48e50f56ceca44f62273f96319983d7531bb4da5644f3cb433b18c8c4e74ac8bafa70931", 0xa6}, {&(0x7f00000004c0)="a0c5e8ed91052153a247063794117ecfbc4b15efa28db069975ec7b24516eac8af0e5cf78e293d3543e943b0f9eb5a31fd49eb6c362907469ac3685666e99c562575be54cafd01d4716f026e1e1b1ce59c64030c183fcd08a0e1a03edcf5", 0x5e}], 0x4, 0x1, 0xffffffff) 8.061141144s ago: executing program 6 (id=7926): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001d40)={&(0x7f00000018c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b04000000000a0101000000000000b2a2ea7255fddda57a"], 0x20}, 0x0) unshare(0x2c020400) r2 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) close(0x3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mq_notify(r2, 0x0) sendmmsg$inet(r0, &(0x7f0000000bc0), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.508239775s ago: executing program 3 (id=7927): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d10fffff500e90600"/20}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x20, 0x30, 0x26, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.333883997s ago: executing program 5 (id=7928): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x3, 0x8, 0x7ffc, 0x0, 0x2, 0x8, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = getpgid(0x0) sched_setattr(r5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r4, @ANYRES64=r3], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) sendfile(r6, 0xffffffffffffffff, 0x0, 0x5) r7 = socket(0x1e, 0x4, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r7, 0x0, 0x4800) r8 = syz_open_procfs(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000300)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000080)=0x1, 0x12) sendfile(r10, r10, 0x0, 0x7ff) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 7.17292401s ago: executing program 6 (id=7929): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x73, &(0x7f00000001c0)={0x40, 0x17, 0x4, "739e2a16"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2, 0x12, 0xfc, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x20, 0x3, 0x10}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24040800}, 0x40020) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000000)=0x4800, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000001400)={0x1, @win={{0xd, 0x8, 0xbb, 0x200}, 0x4, 0x9, 0x0, 0xffffffa3, 0x0, 0x1}}) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="c265772064656661756c7420757365723a73"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x0, 0x16, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.172977909s ago: executing program 5 (id=7932): syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000500)=""/84, 0x54}], 0x2, 0x4, 0x8008) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3}) (async) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000180)={&(0x7f0000000300)}) (async) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000100)) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 5.217347846s ago: executing program 3 (id=7935): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) syz_emit_ethernet(0x227, &(0x7f0000000680)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "a61039", 0x1f1, 0x6, 0xff, @mcast1, @private2, {[@hopopts={0xb8, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x1, [0x0]}, @generic={0x8, 0x3f, "82981ba082f3d1173e1a2cc6e79676b336409671475df23d593ef3c1a42649510096ad64c18a31f6cefabac89fb61f6d9c804e6293541f726288a6e7de0b52"}, @generic={0xd3, 0xa7, "8f6f14c8bbe8f5a7261b3c10e18bfd7ae5cb5190a890cebda62df6152ff4015e128ed3a0e9ea77a7fd58b9157d0ef16da0ef8da3c7a01fdc33d703817c40494cb966e35da24315d2ee4e106337e1533aa3387910a9a2a2fb362a41efaa721d5e52d39324ade981c7bf678d12f75e8f768fcae2e57e4d2bf338c87c103bec4ba081ecca046be5cbc92184857e89b32ea6bf6ecca68da48c4058ad01c61911f9270661111a73c72f"}, @pad1]}, @hopopts={0x2, 0xc, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x40}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x35}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x1b, "0860a668a275ec3df05be48c72df6b140d887d74adafc557c1e67d"}, @pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x20, 0xd21, [0x80000001]}}]}, @fragment={0x11, 0x0, 0x10, 0x1, 0x0, 0x9, 0x67}, @fragment={0x16, 0x0, 0x7, 0x1, 0x0, 0x7, 0x64}, @routing={0x8, 0x8, 0x1, 0x1, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2d}]}], @payload_direct={{{{0x29, 0x0, 0x0, 0x0, 0x1, 0x8, 0x3, 0x2, 0x4636, 0x0, 0x2, 0x3, 0x1, 0x3, 0x0, 0x8, 0x3, 0x4e23, 0x4e20}, 0x2, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) 5.147922554s ago: executing program 7 (id=7936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}}}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x18, r4, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000000)={'vlan1\x00', {0x2, 0x4e20, @loopback}}) 5.099501547s ago: executing program 0 (id=7937): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x800}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0040000001, 0x892, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0040000001, 0x892, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @pix_mp={0xffffffff, 0xf, 0x31363553, 0x7, 0xd, [{0x9, 0x5}, {0x22955b83, 0x7f68}, {0x5, 0x4}, {0x28, 0x3}, {0x6, 0x5}, {0x800, 0x3}, {0x5, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x1}}, 0x9}) (async) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @pix_mp={0xffffffff, 0xf, 0x31363553, 0x7, 0xd, [{0x9, 0x5}, {0x22955b83, 0x7f68}, {0x5, 0x4}, {0x28, 0x3}, {0x6, 0x5}, {0x800, 0x3}, {0x5, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x1}}, 0x9}) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffe0, 0xb}, {0x10, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffe0, 0xb}, {0x10, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 5.030271487s ago: executing program 7 (id=7938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x40, 0x43ce60e584d6c2ce, 0x1a, "8207abdb954d95dfce75e15879f8a1e7bc20b9b078f447febf52"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x24, 0x66, {0x66, 0x7, "42ec771042d0f4fda76613785fbc454be852e280220c7e8c1a65cd42b51ae2abbe571b628909ceb05ad0612af5893e1b57d9c83d6f3a49dffbd4ee0a6f5998aa80cc6a1d1839b995fe3e4e8d7e1e8500a2a35959e41b1970e6945c012e7276e1f99e9337"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x40, 0x3, 0xab, "e725b9e24423aef03a386b55f1aacbf137f4cc91bce8162f57fcd0cafc44d587d1919f31cc3ac85fbec8a890c80aaa01e4b0d4a0bef3953f481bccc60685a2371752680916e031e07b31417b3208e298334ede94cf7e9ada5528d95893f63dd28a6fd0d771eaf783decd14a1b53bc5841e06a58db11931d80bb6aee41ec6949610a5ed488801f7541fb950df21d0d9309d6be6e79bf3856a8e155bbd48cfc222ea421511cd41d2046746f8"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0x401}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "eeba301ad6fe6b28095a1986d4d39218aa1053b0ae314f2afc43fa6181135c8d268bf4f5623ab1a4f42e671de313af"}}) socket$nl_netfilter(0x10, 0x3, 0xc) 4.911145985s ago: executing program 0 (id=7939): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000680)=ANY=[@ANYBLOB="120100020000002082057d004000010203010902600003010680070904"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) 4.470851886s ago: executing program 5 (id=7940): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) 4.112161315s ago: executing program 5 (id=7941): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100003ca12a102c105161e644000000010902120701000000000904"], 0x0) 4.092067363s ago: executing program 6 (id=7942): write$sndseq(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x611}}], 0x1c) (async) write$sndseq(0xffffffffffffffff, 0x0, 0x0) (async) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x331, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) socket(0x840000000002, 0x3, 0xff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2d10}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x8000) (async) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 4.069735168s ago: executing program 3 (id=7943): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000020601020000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000001c0007800c00028008000140ffffffff0c0001800800014080ffffff05000500020000000500010006000000dbe3c7354aa50d9d5b3f6cf4faa753b36d5826dac4ff14e836bcc7b79a9fd803c4fd8311f07793a177cb6b1dd70e34f204c448f29c91b09b51b9aa84ea941cceb4a3f0b7ddc9eca4c745cf8442370150af4e5102348d8a23f034bf00b2e248da3ed4f1731c14c45920bf5d4ea5bf76b796b0bd61a25e0f46ffdf2d22025c5494045020455fb35955b02991ce247048df6094"], 0x64}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffe, 0xd, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffe, 0xd, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x1cef000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) removexattr(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00') remap_file_pages(&(0x7f000072b000/0x2000)=nil, 0x2000, 0x0, 0xfffffffffffffffd, 0x1) (async) remap_file_pages(&(0x7f000072b000/0x2000)=nil, 0x2000, 0x0, 0xfffffffffffffffd, 0x1) 3.869723423s ago: executing program 6 (id=7944): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x140, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x400, 0x1, 0x4, 0x5627c2c3}, {0x0, 0xb, 0x2, 0x9}, {0xf, 0x5, 0xe, 0x3}, {0x400, 0x35, 0x2, 0xf}, {0x8, 0x1, 0x2, 0x4}, {0x40, 0x7, 0x94, 0x1}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x400076, 0x484100) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x3}, 0x18) close_range(r0, r5, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000002400)={0x4, 0x0, [{0x40000001, 0xe63, 0x3, 0x2, 0x20002df3, 0x106, 0x5}, {0xa, 0x4, 0x3, 0x8002, 0x27, 0x7, 0x3}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0xff, 0x9}, {0x80000007, 0xc28, 0x3, 0xfffffffc, 0x5, 0xae, 0xffff}]}) 3.600758798s ago: executing program 0 (id=7945): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) wait4(0x0, 0x0, 0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000029f000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00004f7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000026e000/0xb000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000626000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) iopl(0x1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3.177332276s ago: executing program 0 (id=7946): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r1, &(0x7f0000000040)=[{0x0, 0x85fd, 0x1000}], 0x1) semctl$GETZCNT(r1, 0x0, 0xf, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f00000000000000000005002400000000000500240001"], 0x9c}}, 0x40) 2.705352077s ago: executing program 3 (id=7947): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4108, 0x100c}], 0x1, 0x8, 0x1) 2.367870058s ago: executing program 6 (id=7948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x21, 0x57538}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x9, 0x1, {0x4, 0x9bd, 0x5, 0x8100}}]}]}]}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x88c0}, 0x8804) 2.310055883s ago: executing program 6 (id=7949): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000021, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="13010000da7d3f10cd06090104250102030109021200010000230009041e110009651e00"], 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r5, 0x2, {0x2, 0x0, 0x2}}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x1, 0x8000}, {0x6, 0x0, 0x1}]}, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000500)={r9, 0x80000000, 0x0, r9}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r9, 0x17, 0x2, r9}) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) 2.189176077s ago: executing program 0 (id=7950): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmmsg$unix(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000007020000000000009e0043d3931c065248676700000000000000", @ANYRES8=r0, @ANYRES32=r0], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.13138443s ago: executing program 5 (id=7951): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000000)=[@nested_load_code={0x12e, 0x7d, {0x0, "66440fc736b9800000c00f3235002000000f3066baf80cb8eca3448cef66bafc0c66b8bd7c66eff3450f01b496000000000f0094fccd000000440f52e8b8010000000f01d90f20e035000200000f22e066440fc774abe8b9800000c00f3235000400000f30"}}, @out_dx={0x6a, 0x28, {0x403c, 0x0, 0xfffffffffffffff9}}, @uexit={0x0, 0x18, 0x7}, @in_dx={0x69, 0x20, {0x124f, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xd0}}, @out_dx={0x6a, 0x28, {0xff44, 0x1, 0x6}}, @nested_load_syzos={0x136, 0x120, {0x0, 0xbab, [@nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x280a, 0x7984b978, 0x2, 0x4}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x70, 0x5, 0x1, 0x2}}, @nested_load_syzos={0x136, 0x20, {0x1}}, @rdmsr={0x66, 0x18, {0x896}}]}}, @nested_create_vm={0x12d, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xc59e, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest64=0x280e, 0x800, 0x7, 0xfffffffffffffddb}}, @wr_drn={0x68, 0x20, {0x2, 0x7}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_code={0x12e, 0x7d, {0x0, "460f2240660f6ebe543dffff0f0da4bf637d091246254400000066baf80cb8243afa8aef66bafc0c66b8c9c166efc74424005f000000c74424021c9dd50cff2c24b97a0b0000b803000000ba000000000f30b9b20800000f3266400f00e8f0119a32000000"}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x8d, 0x4, 0x8000}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x0, 0xffffffffffffffff, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0xc000, 0xfd1b}}, @code={0xa, 0x72, {"66b880000f00d0f365400f2102660fc73736410fc79e74e5440666baa00066b80aef66efc4417b1180fcffffff66baf80cb84a49b48aef66bafc0c66edc4c2edb687ab00000066b869000f00d066baf80cb8dc33708cef66bafc0cb81f000000ef"}}, @wrmsr={0x65, 0x20, {0x40000100, 0x8}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x6406, 0x89, 0x9, 0xf}}, @nested_load_code={0x12e, 0x9d, {0x3, "48b834850000000000000f23d80f21f835400000800f23f866450f3880acf8a5020000c74424000c000000c744240200000000ff1c24666565470f08c7442400f37f0000c744240200200000c7442406000000000f01142466ba2000b0edee66baf80cb810190f88ef66bafc0cb80f000000ef64440f01c2b9140600000f3266b881008ed8"}}, @cpuid={0x64, 0x18, {0x3, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x9000, 0xf9ca}}, @cpuid={0x64, 0x18, {0x3, 0x2}}, @wr_crn={0x67, 0x20, {0x8, 0x3}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0x80a0000, 0x2230}}, @uexit={0x0, 0x18, 0x843}, @wr_drn={0x68, 0x20, {0x1, 0xb065}}, @rdmsr={0x66, 0x18, {0x298}}], 0x699}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002780)={0x0, 0x0, 0x0}, &(0x7f00000027c0)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) write$FUSE_ENTRY(r1, &(0x7f00000028c0)={0x90, 0x0, r2, {0x4, 0x2, 0x80000000, 0xdfb4, 0x6, 0x0, {0x1, 0x6, 0x401, 0xfffffffffffffff7, 0x1, 0x2, 0x11fef415, 0x4, 0x8, 0x3000, 0x4, r6, r9, 0xdd, 0xfffffffa}}}, 0x90) (async, rerun: 32) r10 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000002980), 0x40, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f00000029c0)=0x1) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000002a00), 0x20000, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000002a40)={0xc5, 0x0, r11}) (async) open_by_handle_at(r11, &(0x7f0000002ac0)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x9, 0x1, 0x6, 0x1, 0x0, 0x3}}, 0xc00) r12 = dup(r10) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r12, 0xc0305615, &(0x7f0000002b00)={0x0, {0x4, 0x7}}) (async) ioctl$KVM_TDX_GET_CPUID(r0, 0xc008aeba, &(0x7f0000002cc0)={0x5, 0x0, &(0x7f0000002b40)={0x8, 0x0, [{0x6, 0xc188, 0x2, 0x7, 0x27a, 0x8c, 0x8000}, {0xc0000001, 0x80, 0x6, 0x8, 0x0, 0x0, 0xd}, {0x80000007, 0x1, 0x2, 0x134c, 0xfffffffa, 0x1, 0x13}, {0x80000008, 0x10001, 0x0, 0x60, 0x6, 0xd, 0xff}, {0xb, 0x400, 0x1, 0xffffffff, 0x3, 0x5, 0x8}, {0xc0000000, 0x1ff, 0x1, 0x7f, 0xfff, 0x7f9, 0x30}, {0x2, 0x7, 0x7, 0x2, 0x7, 0x646e, 0xfb52}, {0x80000001, 0x8001, 0x6, 0x7, 0xe, 0x8, 0xd442}]}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000002d00)={0x3, 0x4, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async, rerun: 64) read$FUSE(r12, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_STATX(r1, &(0x7f0000004d80)={0x130, 0x0, r2, {0x1, 0xfffffe00, 0x0, '\x00', {0x1, 0x57a8, 0x2, 0x800, r3, r13, 0xc000, '\x00', 0x0, 0x10001, 0xfffffffffffffff9, 0x8, {0x84e9, 0xffff}, {0x1, 0x80000001}, {0x99, 0x3ff}, {0x8, 0x4f67}, 0x5, 0xa66, 0x5, 0xebf}}}, 0x130) (async, rerun: 32) r14 = syz_open_dev$loop(&(0x7f0000004ec0), 0x3, 0x2000) (async, rerun: 32) r15 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000004f00), 0x0, 0x0) lseek(r15, 0x81, 0x1) (async) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000005f80)=@urb_type_interrupt={0x1, {0x8, 0x1}, 0xcb, 0x0, &(0x7f0000004f40)="a11d57d6bc63254ece3134fd06fced3914f10c2d0beaddbe165cad00223db8", 0x1f, 0x10001, 0xbd, 0x0, 0x1, 0xddb, &(0x7f0000004f80)="95a1655b8883f38e04f87813abee3a188d20b7ccd823d031d8f9d52e7bdc5213fcf33912637ef96358f224eb3d03d38fe047f40ce7b39ff8d5016ca002172132fa03d4195a85929b4373e16faa017324a110cc4daedf01f98fe244aa3be340e952162b69d5bd9e714483cbadce14b9164a5c95f3589ff13c173758758cdc47224829185468915489417e918807f0dc174cac19e9f272f131cd299abd2c8ca24bf2bbec35b144771136ea87df8303b185cc333816fad5877cd38e557f531076d3a5cfa7c73f0edac6c30764651d14c340ac9ad8c5998c91bddc9d784967e0a33d2f1a0c51675e9462dd4ec9a457445837e1ef8861d8ea2c9f755d2f384450999889edc5e5f0114b9cf897c83ce8da6a21e04211f27f7a7e11faa7bc5a6c58f3162269f823c1000abba866185f4c54a52398bb7f78bebac1a8cc299b46b8ce4a68809f4c186c10d799b40bf8033e5b6cbeca34d868454b0b5661a630cc9aa306ab6acd8d297fcd612a94f1cfedcf72dfe29b94754d70b1650370fe2a1a35bd5299da1ae46cd0b49a5f5c908e667b3c6e069070d82efc3405dd58c94e80a15bc6923fa3ee130fae078658a98447bc3ceac36c1a229932f3ef30bf9345f6d6c01842889a8a4fbe4024b984621f40d9a82fc95e6382d6d87de1565969b0278442749a61fef5f690392d3ccab8d7a940b5f6739887318bc92af66e78a2fb92f1a25e468cd2dbbb99d8142166086d16585446896ca64f2585b549f1b845eb8223f05a562f6d1761d89f1c9b69d0642080bb27244a2070f511fa15fcc8d671023c0b6a01d198debd3130850365c6d2635daac87362d27bfe5c1420efd38a743cb331030260308f60ec39da0f4fdabadbbbd4bc93cb219a654d4ffe39246a1f4bca2185dcd6d5a6d9cc6915bef694ea671e094d33e0ce27cc2070ac6f61c831917d9c6f680a648933b38ecf48513938f882148068a30cf19df211a897699d53c02bfd263dd99883f757d06434b38b41130b90d6629f1e8de3eeb07c3cf0dcd8ac1d20cb77f376b8ea672c0722d4eaf2b8176159c1477ae7e869816bfb6565760335e301e92f84bde2cf413b2d5900827f95a2272b7ac4e8d5912054e8b0bc88c127cf28ec59146d8f335f7c0df91caa0897e73006f00833b0ed695cf839e119cb0024f8563f5771d754a65df34a917ac94795434cf05af9b7a75dd0fb6194fe16b4f643526028b86c0fa7b019879bc65d161d52e34472220fdb6a4ad4b60b342734aeeadefdc4455b66570ba7a03cc96c9f6f451d98564d64948d12e2e891dba2356871cdd32de794ddf709607b59cc70ecea5b3a9de3cdce7ebee530ee8106d39c88c0ea353035706a533b3c88398b22330be0c2d14ee5f3a9bdd4d533dda676d15e2ab07d848a5e978910d9cd7e4353e98b265be8cba5b41f6c0a5fec236b9314def39964358df7967007c3a4eaad33401fa66d03511eefd5bf71fbc19ef6593fade5b0c50414a715b6dad94acffd616956988650dbea450c14b5d576a9442e4a0b819204e5ffc4e91ba526b1118a5a81f79790dd71e33a014a15d59646236b6ca5dbcf1ecc16938fbc7e3603cfab576bfa80aff9af4d3d225999695e721dea4d707382515cd3fbaef706b3a51b2bb5e25bd235ff6db956567c53d37d123f05770a7117b676137e95199177a8baf5384cfedbd39f4e2b44a8fde7dcebf09680a1f0ecbb6a2c44b90759cd340ba85dc1a7581c8b0ccf9682c0698d5fa7a8845544b9e7b6977728b15dbe7ccb691d44c47f1e910a7fa450abce44f971a1fe0fc1f058f431c071fe5843eeb55b99241beda7944697a556d280083f077161f8abd930675d7f06864976c03af3258702b201ea161084ce53e7035792f2cab5227b1a8135ce8cfd09c6527214378ac068625c8fa4ccc80ceccd684555160b8c2715c03d82e1c6149a53b27c3d776ed518c5b90e93d0559307a2a7b4e3a52ff28b90d22793e7d9c3673e809c9e679286097ab4d17e77648b850cc1640aef4095bfe72cd9dab1128d70440efcb36f9d64f7db869aba566271af2dbbdc6515f30ca7d1a92f8f503bfb57bb3aeb59166e77b14dad9df3d4312d8d3b1f23522e843f40cf916f9237194f512bfddacb102d9c701523c58ad6800de5dbbc3f6fa0645d45bf7a2cf0eb643867382da2d8a474cb6e6efcab4b9291148d407d16281fa3dca0f7b876677e7bc8dbc73dd3447c90aaec1adee410292eceeb7af233941026032d79835f14c78d0859b27f8c676cbf49f97664a6a890b657a2bde5bf7c7423ae2bfb763a833d31fe9ae364d84d19bbf5395a56e0e3f0e418338a2971ee38380dcb720566f344965aa8aeb85d8ebdf0fef0edfa28c01a38b4aead4b955273dd3cca38c5c053107b4a8a49f6dc0a31a05120196824716a8e8370ab4658118905e48863472c768a752e8743bd785b9c18c2b7ff3da4af3f49eb4995de9485c275e1959c9b1e1175258d0188ea162a06d39f6bf5b1ed42c8368609a8817a2d9e8e3fdc758c2e36a18cf6216470d6d0e7491f527e0c7908c48bb363abe12a8ab5906461ee0fed9807fcbe584748d7e45d2a4c3a629f1093f38b4b5f5d87a661a423382e415f97ccc7c1a5f69cd7b1b060794348f1f9a1f11f4731590481c385d90dbe59ba66bd9ada512756fb01d374d80e48c918a30a811be288d01aeca4e0be7ab3a0128abd3d63f66b61a94a646413bf3bc0cd5c1b767812ea41ab064b4f5973137a0a6e2ff64c18417a001f60cddd33469e27c86a8d1c1d6818f38e4bf315bdc767e057ea05377f29d7232783d0805e1ea94172dbfdcb1d7cd12ef7a11d8a8fa4538926d18b8803b129c9317cfb17497e5c4a6d19957600aa9ac3edf4056a9c938698cf8c9e5455a7cb17a435e9cb03851b6310478499123c24dc40d6ebc3f3f0f1fcae9cc943c0e26f9e973a41f92d41b20f8c03c1ca358afa786b9b05699d6a1cccd23248ad43dc765d3753b68f41934d5206e96e4cd4a781b2dc475114bdbf02c31eea8d5657ae6a86a75968faa47c2c5566b24f2ceedf68d4112af317b5ae40818e0b89fde3bd4f0eee3120706966cd7ff79be76b31e2e554dddf748b17ecb4432c70e303816c9cc0376eb70fa26c89dfb017c0aca4baff5fc09cd4f18b5f4214624ba7bf1ab84c7dccdc64ae0bf722bdc03bdbe94fb2b3009415bb088e2a90afa8651f9426c52b898b865e0e887f914db2e6ebc33db15e755f84f0d95414b7210bc12a11c08bf3909ff725a6bcbcadefbc40f72dd7c6521170b6beefaf8be9629087d1fac79980e1559b720386abef2ea05ddb132e09774d321cfdb6dac3dd4d2d9e79e7583612e48e95a2d9090960cdb914fa7f334d85f8d765f145cf1d09da803d8afb43f50bf288ac2e9a340f3d0e3c26ae180aba594bb1310ff85f066b3c43ffb94cea4726b0acf6871e64ef11e09221ff1448431bd7b450d543a897a82c17c462a911277fbd058d3feece5fdeaee51e8f2a35da701d84bd48c5cdfb27f09c4bf111d4fbb500333474e23a5577e61fe3678a47ebd23821ac9ade61ab0aad7afd9ed155b15cfe65f9297b444ef7ecca1ede327f677132d5dbdfd1210389007da9330405b7b27dd52d61241ff23b7f8c99dd4779d87e82db920de36e239c04dac1777656afe9799440371d0d59cd5b3e8d53ef7699c87783732502a8da3516ff2ce6dfc458d3a9c92e344635360e4b67c3147992f2faffd894003e6d90a12f5a57694f26ff65292dc131f5caea811a2205d69d3768d24bc87370228b250bebaa066a6ffb7959f186f22a3c3a1115f73f04c9eed6e4bf914cb260248980bbe312dbce43f1bea0532a6bdf16d7f6eaaf168511365092d95b0557a2fcaed023fc987275e7d9a0601777ecb7ec41f9518da2ec78e0f03dcfc72a274c2a917ad706f2a8e04b4797f9c169411c04452e2b01486269cfb33b0639ddda844068f991245dae225f9e1b28a8a18cea823dabe33a183d56d7be0416731aa91eed8362079dcb3359f7ffc5554a5e404018da90e05d3fb5abc7290ab07e8e5049c5479e0875c15d2279b5a22353fee181ae813a27e7fdebf0249122cd322eba07885bec58190c91d4d505868399f7fe3bbcfa1a7f5d6f518440167810d5e0ecb1e081b44d11a1f4ff9e37b74a27e73b77f7cd7b54ac49861a997873c68b0d83a905ff185e4396b8ec2225e9c94e26ee8c692de94e74f70c5a029076b778b91bb0ae34e1d16aeda180552c5b84620833f1d60cebdf5f23478b7fa232ec124986e416f3ac36948c5b39622716ee7cbeb245b019a25b6928f1bd298e636eae113f85c59bee5b42c6aa0b7af732f90bc61dc853a046a77742ecd858390e39ac66e951b77d659b80860a4f2bd274044aa78f8c5942fb48268132bda1e3d2fe77f7f91ea1c4e43d5b5ade86007985081577b8cb8e143e8ad3949f90a1e026d4f82edeb2a2b20b3aa49130eff5db43a0a3608fdf277b966be4b3e9d84dae84085e2c05e1a9e0971f591fe7c7dbf0fff2a5161809bf3a4e108b9ff4e37637ff2fcd9b0c3d1fd1029154d83065dff14b1c90ba41cade3c0d63c506aa327e141fe9a1e2262cf9facf19a8cc605c8102f5a0e439ea117b98b5fbf370c33fb8bdffa74dd678557dfc18d789658db686f9fb24720574c31e2809a47599564a1047e7a73a2e1ed6cf31d5856d45f634afe82fb6981af1565dbc869e72c8d7e15b0cd18efe63681a7724c34340eab8d4b2f89a26b1981ed693b1cff33d6dfeea3f68a23c2f71f3b91ed319013acf627d0538dd9468b813fd64d0efe686bdc4ad3a3b7fbee6effcf83387a562e881b7fe2ebd09cf75841960f04d954653e2e708aef9f2b7bb4d7f7c6289823437180ce1d81304cf679f6c1dbb3ac1f45f0fcaaff1e5a07d81f660dd515d42c4d1e8c16d99185b532dae1cbbbf59f9ea8f3fc854f602bf7e4a4bc2ca25ca94277057db80370498b9e09f1de32714792d89f951a172f913cb81d1eacb9230e5c69de77062767007278e884d7023f851c421107f262ffac08731f5ae79c337874d3a2d857870f91035ce28ba8804b87f4a7d7aa0f9c5259fa770b4ca9f8a3e8df08b13482c0eb791339632543f276303226687753776e5e4ac6f377d35c940e7637f99a6601256561efbe1b6a4d3c02f83292c8c8b0c69a68ba6a73ed999522c32ad30c93ea46d358b8403b850997a2e1da5d55a0f383df6b5355ed6d1dd56e815cc5d3113da23fe3c5e4bd9d8bf5ed2a9b569d5adc5ab117bc661be0ee2a0781d4f3d96cb2876eeb5f539c1eef18fe816587179624ebfec53820b61be6dcb949e7bbf2fbd303aa262deda2ae945bb3679db5a2f292ebc0df7e5e681c7c4be33d34c71c12d9172ecb8e299dba905e040716691cbe69a769fd5c29bc66d41258aa59c52755e177a16504173c08db6d19a4d53e560038d90e2b218f555b482d4d22816ded621fcbac684e05ac54638403a80614f5201ea0d5fde090e88d23b3f3a8d88f33efc31710957b2e4fa9c5dd3e55cfcd6e4b6a8fafe914d19b885d5a8469cc820603b743b203fa597fe9b951ff19efa8412254b75fb33eeed1e30745cbd6f075ea90c08d264a74e53356a82ac492682ca47717b7d602dad5204f8acd85f0c7818e7dbe5a33f7934d95f22dfd287feda13ebd007a835d4a5f231f57697f2d0981070a720588f62d89b6c520c0211e78063c7deb622f15eaf5e578d73c7f06d91e73c083c328b759652033d0185b393e21720b21331f06dae42762c0748a5125927ff64fef5"}) ioctl$LOOP_SET_BLOCK_SIZE(r14, 0x4c09, 0x38) (async) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000006100)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000060c0)={&(0x7f0000006000)={0xc0, 0x9, 0x6, 0x7799cb7fd41d95a7, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '\'\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_SKBPRIO={0x8}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8001}, 0x4) (async) syz_80211_inject_frame(&(0x7f0000006140), &(0x7f0000006180)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x4, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @random="484bd9e69cc3", @from_mac=@device_b, {0x3, 0x5}}, @a_msdu=[{@device_b, @device_a, 0x1000, "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"}, {@device_b, @device_b, 0x5e, "9bc43618ecda26a10c74da0eb4a8f5829e4aa84fd13d1e10f8e0b0267226fccb00da878d980e233bfa53fb8328f8299f553e562e1ba6d930fb5c3a2cf7ba0c472f41d4f7e8347a526ed380e22d1fb587b2abc89f586ca7f6f1e3d2bd09c0"}, {@device_b, @device_a, 0x24, "6018f2f674ef91bef67844d15b1b1ae77e7e9223bfd0aa1724139ac507ad4e74f8d3138d"}, {@device_b, @broadcast, 0xc0, "2b38338dcd033acdafa0c9437b352c7d2c9481145f538d3b8cffad44c979f383f2567fe08439638c51b1700c2d8ba0e597142be2bdb6e0ae583393613be99ada5286dc14709e9b3770f751e19c928e9fd2ed0f8127a2c4119844690201435452c783b8355451a4843660b309af2b949e5dcff6462c88a0f1d6850ba57f0478f3b5f11722007aa4e47826d8ec97f8d10506c4fc54ac8cf7ac6f6e36963a30b2b6d2b6464e7800fd8e56cd8526967781db8fa553517ada6650f640c048ab84d35c"}]}, 0x1198) (async) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000007340)=@sg0, r3, &(0x7f0000007380)) (async, rerun: 32) setsockopt(r12, 0x0, 0xfc, &(0x7f00000073c0)="5002878034a4ca4c6e76bbcbcb7f27319ae1a7816f76e04b558c712a0268afc49c53731ecce83cc053e11ea66b2eb26f6325aeefeafec3c5bec6f62a214fde08fd35680a29d7a28eb5a9abce6ba10110fbb403", 0x53) (async, rerun: 32) r16 = geteuid() syz_fuse_handle_req(r1, &(0x7f0000007440)="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", 0x2000, &(0x7f000000bec0)={&(0x7f0000009440)={0x50, 0x0, 0x65, {0x7, 0x2d, 0x1, 0x40, 0x1, 0x4, 0xfffffffb, 0x7, 0x0, 0x0, 0x1, 0x1}}, &(0x7f00000094c0)={0x18, 0x0, 0x7fffffff, {0x40}}, &(0x7f0000009500)={0x18, 0xffffffffffffffda, 0x4, {0x81}}, &(0x7f0000009540)={0x18, 0x6ed7dfa91b8bb6ad, 0x80000000, {0x3aa9}}, &(0x7f0000009580)={0x18, 0x0, 0x2, {0x3}}, &(0x7f00000095c0)={0x28, 0x0, 0x5, {{0x0, 0xfffffffffffffffc, 0x1, r5}}}, &(0x7f0000009600)={0x60, 0x0, 0x400, {{0x3, 0x8, 0xfffffffffffffffa, 0x5, 0x8, 0x5, 0xfb, 0xb}}}, &(0x7f0000009680)={0x18, 0x0, 0x30c0}, &(0x7f00000096c0)={0x12, 0x0, 0x6, {'\'\x00'}}, &(0x7f0000009700)={0x20, 0x0, 0x8001, {0x0, 0x28}}, &(0x7f0000009740)={0x78, 0x0, 0x101, {0x9, 0x2, 0x0, {0x1, 0x8, 0x4, 0x3, 0x7, 0xfffffffffffffffa, 0x9, 0x3ff, 0xfff, 0xe000, 0x4, r3, r9, 0x7, 0x9000}}}, &(0x7f00000097c0)={0x90, 0x0, 0x4, {0x2, 0x1, 0x5, 0x800, 0xab, 0x7, {0x4, 0x5, 0x596, 0xe06a, 0x8, 0x3, 0x369, 0x9, 0xe, 0xa000, 0x6, r3, r13, 0x98f, 0x8000}}}, &(0x7f0000009880)={0x38, 0x0, 0x5, [{0x5, 0x6, 0xb, 0x0, '/dev/loop#\x00'}]}, &(0x7f000000b900)={0x358, 0x0, 0x2, [{{0x2, 0x0, 0x10001, 0x3, 0x6, 0x6, {0x6, 0x2, 0x66ab, 0x9, 0x1, 0x8000000000000001, 0x80000000, 0x3, 0xbf32, 0xc000, 0xb, r6, r7, 0x10, 0x1ff}}, {0x1, 0x8, 0x0, 0x5}}, {{0x3, 0x2, 0xffffffffffffff44, 0x7bea, 0x1, 0xa, {0x6, 0x5, 0x6, 0x1, 0xff, 0x2, 0x2, 0x0, 0xfffffffb, 0x4000, 0x9, r8, r9, 0x5, 0xb469}}, {0x4, 0x5, 0x5, 0x1, 'syz1\x00'}}, {{0x2, 0x1, 0x0, 0xffff, 0x9, 0x2, {0x3, 0x8, 0x7, 0x0, 0xfffffffffffffffc, 0x3, 0x3, 0x4, 0xc53, 0x3000, 0x7, r6, r13, 0x7, 0x2734}}, {0x0, 0x6, 0x1, 0x4, '['}}, {{0x1, 0x3, 0x2, 0x8, 0x8, 0x0, {0x5, 0x100000000, 0x0, 0x0, 0x7, 0x1000, 0x9, 0xe, 0x2, 0xa000, 0xb, r16, r13, 0x5135, 0x7}}, {0x6, 0x0, 0x1f, 0x0, '/sys/kernel/debug/sync/sw_sync\x00'}}, {{0x1, 0x0, 0x5, 0x7ff, 0x3, 0x3, {0x6, 0x6, 0x8000000, 0xde29, 0x3, 0xffffffff, 0x10001, 0x5, 0xf3f, 0x1000, 0xfffffffa, 0x0, r4, 0x3, 0x1}}, {0x0, 0x1, 0x1f, 0x3ff, '/sys/kernel/debug/sync/sw_sync\x00'}}]}, &(0x7f000000bc80)={0xa0, 0x0, 0xbd, {{0x1, 0x3, 0x6, 0xcf17, 0x6, 0xff, {0x2, 0x0, 0x7, 0x7, 0x8, 0x0, 0x7fff, 0x3, 0x10000, 0xc000, 0xfffffff9, r3, r4, 0x5, 0xd}}}}, &(0x7f000000bd40)={0x20, 0x0, 0x1, {0x800, 0x0, 0x1, 0x3}}, &(0x7f000000bd80)={0x130, 0x0, 0xffff, {0x1, 0x9, 0x0, '\x00', {0x8000, 0x0, 0x800, 0x44, r8, r7, 0xa000, '\x00', 0x2, 0x3ff, 0x100000000, 0x0, {0x200, 0x80}, {0xe, 0x7}, {0x9, 0x2}, {0x7, 0x9}, 0x7, 0x9, 0x5, 0xfffffff7}}}}) 2.124764841s ago: executing program 0 (id=7952): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x73, &(0x7f00000001c0)={0x40, 0x17, 0x4, "739e2a16"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2, 0x12, 0xfc, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x20, 0x3, 0x10}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24040800}, 0x40020) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000000)=0x4800, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000001400)={0x1, @win={{0xd, 0x8, 0xbb, 0x200}, 0x4, 0x9, 0x0, 0xffffffa3, 0x0, 0x1}}) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="c265772064656661756c7420757365723a73"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x0, 0x16, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.88942939s ago: executing program 7 (id=7953): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) syz_emit_ethernet(0x227, &(0x7f0000000680)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "a61039", 0x1f1, 0x6, 0xff, @mcast1, @private2, {[@hopopts={0xb8, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x1, [0x0]}, @generic={0x8, 0x3f, "82981ba082f3d1173e1a2cc6e79676b336409671475df23d593ef3c1a42649510096ad64c18a31f6cefabac89fb61f6d9c804e6293541f726288a6e7de0b52"}, @generic={0xd3, 0xa7, "8f6f14c8bbe8f5a7261b3c10e18bfd7ae5cb5190a890cebda62df6152ff4015e128ed3a0e9ea77a7fd58b9157d0ef16da0ef8da3c7a01fdc33d703817c40494cb966e35da24315d2ee4e106337e1533aa3387910a9a2a2fb362a41efaa721d5e52d39324ade981c7bf678d12f75e8f768fcae2e57e4d2bf338c87c103bec4ba081ecca046be5cbc92184857e89b32ea6bf6ecca68da48c4058ad01c61911f9270661111a73c72f"}, @pad1]}, @hopopts={0x2, 0xc, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x40}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x35}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x1b, "0860a668a275ec3df05be48c72df6b140d887d74adafc557c1e67d"}, @pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x20, 0xd21, [0x80000001]}}]}, @fragment={0x11, 0x0, 0x10, 0x1, 0x0, 0x9, 0x67}, @fragment={0x16, 0x0, 0x7, 0x1, 0x0, 0x7, 0x64}, @routing={0x8, 0x8, 0x1, 0x1, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2d}]}], @payload_direct={{{{0x29, 0x0, 0x0, 0x0, 0x1, 0x8, 0x3, 0x2, 0x4636, 0x0, 0x2, 0x3, 0x1, 0x3, 0x0, 0x8, 0x3, 0x4e23, 0x4e20}, 0x2, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) 0s ago: executing program 5 (id=7954): socket(0x22, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00ff000000005ff700"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000075aa110000", @ANYRES8=r1, @ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095000000000000006c042204a75d424300df7a038b8ff36cfd65718084cc887fe303c47543ed90a032bc255a2f388168d08900196a0dff2272a0f93cc08a3fff2a8cfb2713df5b68213a6764af97f7f3751d3b9922d669d7c9ebfe17c6f267e826dd55d48cabd4e4c94e98ef3a2aeba384e0e53b1b0f68b5aa9eebf625ccc43060fd141edcb3eabd7d2059d03c7fd4e4fb28db49453a24"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8) sendto(0xffffffffffffffff, &(0x7f00000002c0)="10d1b07c8d2d42f6bce302ea0aa8fe58222f3ef91d51d3227b160afdad8e53358b75d4800fbd835e4a07032dffc82b775df28af47ba8c49da3e13cad111935366faa349bbf4df0e38bdfdc962deec86dcf10e117f1fabb2eec13e3d99299f7f0c006d7f3e6d8366852088684d49f914811e7f684b6fb918f9cc2567287fc15c55554e39f129bc817a5e878881b1852eb40f07517fcf64deb258f61c929621ee24a01a3a36c6d51da315190ee80d5e4cf71cb20b98326321829153317707b462c410aa254aae414f01be8fb98f08270c15845c5e7f324d3d5c774a361bfbf9f0a24f68c15ddcb333adf891c4601", 0xed, 0x24000000, &(0x7f0000000480)=@hci={0x1f, 0x3, 0x1}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000509adb3467196bd20000000000"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000000c0)={0x3, 'caif0\x00', {0xa}, 0x3}) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) kernel console output (not intermixed with test programs): ce=bb.9d [ 1814.695916][T22476] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1814.703869][T11728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.718399][ T728] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1814.732240][T11728] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1814.821240][T11727] usb 4-1: Using ep0 maxpacket: 8 [ 1814.831511][T11727] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1814.841147][T11727] usb 4-1: config 7 has an invalid interface number: 115 but max is 0 [ 1814.849509][T11727] usb 4-1: config 7 has no interface number 0 [ 1814.857791][T11727] usb 4-1: config 7 interface 115 altsetting 7 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1814.871628][T11727] usb 4-1: config 7 interface 115 altsetting 7 endpoint 0x89 has invalid maxpacket 7397, setting to 1024 [ 1814.886311][T11727] usb 4-1: config 7 interface 115 altsetting 7 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1814.896964][T22476] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.908977][T11727] usb 4-1: config 7 interface 115 has no altsetting 0 [ 1814.916267][T22476] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1814.927020][T22476] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1814.944186][T11727] usb 4-1: New USB device found, idVendor=0675, idProduct=0200, bcdDevice=e1.e3 [ 1814.963705][T22476] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1814.975596][T11727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.985367][T22476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.987061][T13777] usb 1-1: USB disconnect, device number 58 [ 1814.993984][T11727] usb 4-1: Product: syz [ 1815.008274][T11727] usb 4-1: Manufacturer: syz [ 1815.017543][T11727] usb 4-1: SerialNumber: syz [ 1815.025943][T22476] usb 6-1: config 0 descriptor?? [ 1815.041902][ T730] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1815.270437][T11727] cxacru 4-1:7.115: usbatm_usb_probe: bind failed: -19! [ 1815.287141][T11727] usb 4-1: USB disconnect, device number 62 [ 1815.459322][T22476] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1815.647265][ T734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1815.657728][ T734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1815.721872][T13777] usb 6-1: USB disconnect, device number 25 [ 1816.913106][ T765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7385'. [ 1816.934519][ T765] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7385'. [ 1816.950406][ T765] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7385'. [ 1816.976808][ T765] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7385'. [ 1817.216639][ T765] syzkaller0: entered promiscuous mode [ 1817.222405][ T765] syzkaller0: entered allmulticast mode [ 1818.886798][ T801] block device autoloading is deprecated and will be removed. [ 1819.629986][T22476] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1819.839524][T22476] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1819.849072][T22476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.858840][T22476] usb 6-1: Product: syz [ 1819.890916][T22476] usb 6-1: Manufacturer: syz [ 1819.896977][T22476] usb 6-1: SerialNumber: syz [ 1819.936201][T22476] usb 6-1: config 0 descriptor?? [ 1819.952555][T22476] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 026 [ 1820.250988][T11727] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1820.415467][T11727] usb 4-1: Using ep0 maxpacket: 32 [ 1820.434311][T11727] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.456393][T11727] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1820.482975][T11727] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1820.498407][T11727] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1820.505491][T11727] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1820.527341][T11727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.579242][T11727] usb 4-1: config 0 descriptor?? [ 1820.594003][ T806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.719793][ T806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.867538][T22476] i2c i2c-1: failure reading functionality [ 1820.876572][T22476] i2c i2c-1: connected i2c-tiny-usb device [ 1820.895870][ T809] trusted_key: encrypted_key: keylen parameter is missing [ 1821.014919][T11727] hid-thrustmaster 0003:044F:B65D.0069: unknown main item tag 0x0 [ 1821.039445][T11727] hid-thrustmaster 0003:044F:B65D.0069: unknown main item tag 0x0 [ 1821.047931][T11727] hid-thrustmaster 0003:044F:B65D.0069: unknown main item tag 0x0 [ 1821.071762][T11727] hid-thrustmaster 0003:044F:B65D.0069: unknown main item tag 0x0 [ 1821.079795][T11727] hid-thrustmaster 0003:044F:B65D.0069: unknown main item tag 0x0 [ 1821.125435][T11727] hid-thrustmaster 0003:044F:B65D.0069: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1821.138362][T11727] hid-thrustmaster 0003:044F:B65D.0069: Unexpected non-int endpoint [ 1821.212384][ C0] hid-thrustmaster 0003:044F:B65D.0069: URB to get model id failed with error -71 [ 1821.213612][T13772] usb 4-1: USB disconnect, device number 63 [ 1821.323484][ T811] fido_id[811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1821.860823][ T813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7397'. [ 1822.754451][ T806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7395'. [ 1822.872208][T11727] usb 6-1: USB disconnect, device number 26 [ 1823.170388][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 1823.170408][ T29] audit: type=1326 audit(1775135726.023:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=833 comm="syz.5.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1823.238575][ T29] audit: type=1326 audit(1775135726.083:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=833 comm="syz.5.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1823.277637][ T29] audit: type=1326 audit(1775135726.083:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=833 comm="syz.5.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1823.303537][ T29] audit: type=1326 audit(1775135726.083:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=833 comm="syz.5.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1823.326479][ T29] audit: type=1326 audit(1775135726.123:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=833 comm="syz.5.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1823.380584][ T29] audit: type=1326 audit(1775135726.123:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=833 comm="syz.5.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1823.460074][ T29] audit: type=1326 audit(1775135726.203:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=833 comm="syz.5.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1823.539699][ T29] audit: type=1326 audit(1775135726.203:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=833 comm="syz.5.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1823.582733][ T29] audit: type=1326 audit(1775135726.203:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=833 comm="syz.5.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1823.608041][ T29] audit: type=1326 audit(1775135726.203:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=833 comm="syz.5.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1824.895696][ T864] kvm: emulating exchange as write [ 1825.040841][T11727] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1825.200332][T11727] usb 4-1: Using ep0 maxpacket: 8 [ 1825.213034][T11727] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1825.231728][T11727] usb 4-1: config 1 has an invalid interface number: 211 but max is 0 [ 1825.241594][T11727] usb 4-1: config 1 has no interface number 0 [ 1825.247733][T11727] usb 4-1: config 1 interface 211 has no altsetting 0 [ 1825.267902][T11727] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54 [ 1825.277304][T22476] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1825.287517][T11727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.297807][T11727] usb 4-1: Product: syz [ 1825.302870][T11727] usb 4-1: Manufacturer: syz [ 1825.307481][T11727] usb 4-1: SerialNumber: syz [ 1825.444657][T22476] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1825.459311][T22476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.468860][T22476] usb 1-1: Product: syz [ 1825.473785][T22476] usb 1-1: Manufacturer: syz [ 1825.478464][T22476] usb 1-1: SerialNumber: syz [ 1825.486479][T22476] usb 1-1: config 0 descriptor?? [ 1825.497344][T22476] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 059 [ 1825.536954][ T862] syzkaller0: entered promiscuous mode [ 1825.544064][ T862] syzkaller0: entered allmulticast mode [ 1825.556877][ T862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1825.840298][T11728] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1825.989986][T11728] usb 6-1: Using ep0 maxpacket: 8 [ 1825.997168][T11728] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1826.012031][T11728] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1826.021867][T11728] usb 6-1: string descriptor 0 read error: -22 [ 1826.028448][T11728] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 1826.038024][T11728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.102617][ T867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.112538][ T867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.123299][ T867] lo: Caught tx_queue_len zero misconfig [ 1826.129158][ T867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7411'. [ 1826.142734][T22476] i2c i2c-1: failure reading functionality [ 1826.149156][ T867] trusted_key: encrypted_key: keylen parameter is missing [ 1826.165086][T22476] i2c i2c-1: connected i2c-tiny-usb device [ 1826.186293][T22476] usb 1-1: USB disconnect, device number 59 [ 1826.843410][ T887] : renamed from vlan0 (while UP) [ 1827.055841][T11728] usbhid 6-1:1.0: can't add hid device: -71 [ 1827.062344][T11728] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1827.076667][T11728] usb 6-1: USB disconnect, device number 27 [ 1827.169988][T22476] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1827.328576][T22476] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1827.338010][T22476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.346522][T22476] usb 1-1: Product: syz [ 1827.355860][T22476] usb 1-1: Manufacturer: syz [ 1827.360904][T22476] usb 1-1: SerialNumber: syz [ 1827.893969][ T897] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1827.903238][ T897] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1828.013665][ T897] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1828.171380][T22476] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1828.184202][T22476] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1828.464539][T11727] usb 4-1: USB disconnect, device number 64 [ 1828.649031][ T909] bridge0: entered promiscuous mode [ 1828.742179][ T912] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7421'. [ 1829.271255][T13772] hid-generic 0008:0091:0009.006A: reserved main item tag 0xd [ 1829.298940][T13772] hid-generic 0008:0091:0009.006A: item fetching failed at offset 28/32 [ 1829.363383][T13772] hid-generic 0008:0091:0009.006A: probe with driver hid-generic failed with error -22 [ 1829.640161][T11727] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1829.801095][T11727] usb 4-1: too many configurations: 30, using maximum allowed: 8 [ 1829.844654][T11727] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1829.902814][T11727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.931134][T11727] usb 4-1: Product: syz [ 1829.950030][T11727] usb 4-1: Manufacturer: syz [ 1829.954921][T11727] usb 4-1: SerialNumber: syz [ 1830.024706][T11727] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1830.083848][T11728] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1830.143642][T22476] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1830.177865][T22476] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1830.200988][T22476] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1830.233195][T22476] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1830.268337][T22476] usb 1-1: USB disconnect, device number 60 [ 1830.426766][T13772] usb 4-1: USB disconnect, device number 65 [ 1830.793893][ T953] input: syz1 as /devices/virtual/input/input135 [ 1831.205039][T11728] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1831.222970][T11728] ath9k_htc: Failed to initialize the device [ 1831.236936][T13772] usb 4-1: ath9k_htc: USB layer deinitialized [ 1831.530052][T13777] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1831.579935][T13772] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1831.611581][T28854] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1831.690075][T13777] usb 1-1: Using ep0 maxpacket: 16 [ 1831.698610][T13777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 146, changing to 11 [ 1831.712442][T13777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26284, setting to 1024 [ 1831.726607][T13777] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1831.743414][T13777] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 1.00 [ 1831.743568][T13772] usb 4-1: config 0 has no interfaces? [ 1831.758294][T13777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.773862][T13772] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1831.787606][T13777] usb 1-1: config 0 descriptor?? [ 1831.793051][T28854] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1831.802207][T13772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.811206][T28854] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.821909][T13772] usb 4-1: Product: syz [ 1831.822024][ T975] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1831.826165][T13772] usb 4-1: Manufacturer: syz [ 1831.838168][T28854] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1831.848350][T13772] usb 4-1: SerialNumber: syz [ 1831.856313][T28854] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.872198][T13772] usb 4-1: config 0 descriptor?? [ 1831.888635][T28854] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1831.914041][T28854] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1831.924502][T28854] usb 6-1: Product: syz [ 1831.928767][T28854] usb 6-1: Manufacturer: syz [ 1831.945641][T28854] cdc_wdm 6-1:1.0: skipping garbage [ 1831.952301][T28854] cdc_wdm 6-1:1.0: skipping garbage [ 1831.957634][T28854] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1832.114529][ T965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7434'. [ 1832.124604][ T965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7434'. [ 1832.168757][T11728] usb 6-1: USB disconnect, device number 28 [ 1832.268550][T22476] usb 4-1: USB disconnect, device number 66 [ 1832.307011][T13777] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.006B/input/input136 [ 1832.723747][T13777] microsoft 0003:045E:07DA.006B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1832.970234][ T986] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7438'. [ 1833.550191][T22476] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1833.700068][T22476] usb 4-1: Using ep0 maxpacket: 32 [ 1833.707217][T22476] usb 4-1: config 247 has an invalid interface number: 177 but max is 0 [ 1833.715785][T22476] usb 4-1: config 247 has no interface number 0 [ 1833.723885][T22476] usb 4-1: config 247 interface 177 altsetting 246 bulk endpoint 0x8 has invalid maxpacket 511 [ 1833.736060][T22476] usb 4-1: config 247 interface 177 altsetting 246 bulk endpoint 0xC has invalid maxpacket 1023 [ 1833.751442][T22476] usb 4-1: config 247 interface 177 has no altsetting 0 [ 1833.762794][T22476] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=58.f4 [ 1833.773749][T22476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.786043][T22476] usb 4-1: Product: syz [ 1833.790319][T22476] usb 4-1: Manufacturer: syz [ 1833.794922][T22476] usb 4-1: SerialNumber: syz [ 1833.803240][ T996] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1833.811957][ T996] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1833.935560][ T999] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:21 [ 1834.033315][T22476] kvaser_usb 4-1:247.177: error -ENODEV: Cannot get usb endpoint(s) [ 1834.065281][T22476] usb 4-1: USB disconnect, device number 67 [ 1834.180027][T32637] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1834.223878][T11728] usb 1-1: USB disconnect, device number 61 [ 1834.321930][T32637] usb 6-1: device descriptor read/64, error -71 [ 1834.570017][T32637] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1834.720581][T32637] usb 6-1: device descriptor read/64, error -71 [ 1834.830489][T32637] usb usb6-port1: attempt power cycle [ 1835.028301][ T1013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1835.037454][ T1013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1835.181989][T32637] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1835.222157][T32637] usb 6-1: device descriptor read/8, error -71 [ 1835.260107][T11728] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1835.412194][T11728] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1835.425938][T11728] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1835.437334][T11728] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.459999][T32637] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1835.468385][T11728] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1835.486805][T11728] usb 1-1: config 1 has no interface number 0 [ 1835.500658][T32637] usb 6-1: device descriptor read/8, error -71 [ 1835.507061][T11728] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1835.530059][T11728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.557929][T11728] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1835.640409][T32637] usb usb6-port1: unable to enumerate USB device [ 1835.755840][T11728] snd_usb_pod 1-1:1.1: set_interface failed [ 1835.772596][T11728] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1835.789541][T11728] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1835.813208][T11728] usb 1-1: USB disconnect, device number 62 [ 1836.448035][ T1046] syz_tun: entered allmulticast mode [ 1837.293645][ T1076] netlink: 'syz.5.7458': attribute type 10 has an invalid length. [ 1837.323243][ T1076] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7458'. [ 1837.904197][ T1091] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3333159381 (13332637524 ns) > initial count (1750453420 ns). Using initial count to start timer. [ 1837.953950][ T1091] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1839.391846][ T1104] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7465'. [ 1839.449482][ T1106] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7465'. [ 1839.490670][ T1104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1839.722931][ T1117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.731865][ T1117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.952084][T32637] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1840.152032][T32637] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1840.192022][T32637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.221273][T32637] usb 4-1: config 0 descriptor?? [ 1840.248676][T32637] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1840.458077][T32637] usb 4-1: USB disconnect, device number 68 [ 1840.641635][ T1137] "syz.6.7473" (1137) uses obsolete ecb(arc4) skcipher [ 1841.660022][T28854] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1841.835054][T28854] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1841.844181][T28854] usb 4-1: not running at top speed; connect to a high speed hub [ 1841.864045][T28854] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 1841.880190][T28854] usb 4-1: config 0 has no interface number 0 [ 1841.887021][T28854] usb 4-1: config 0 interface 205 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1841.900745][T28854] usb 4-1: config 0 interface 205 altsetting 5 endpoint 0xB has invalid maxpacket 1032, setting to 64 [ 1841.920871][T28854] usb 4-1: config 0 interface 205 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 1841.932511][T28854] usb 4-1: config 0 interface 205 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1841.944833][T28854] usb 4-1: config 0 interface 205 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 1023 [ 1841.956478][T28854] usb 4-1: config 0 interface 205 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 1841.980162][T28854] usb 4-1: config 0 interface 205 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 1841.997055][T28854] usb 4-1: config 0 interface 205 has no altsetting 0 [ 1842.007674][T28854] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice= c.af [ 1842.018465][T28854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.028342][T28854] usb 4-1: Product: syz [ 1842.040352][T28854] usb 4-1: Manufacturer: syz [ 1842.045038][T28854] usb 4-1: SerialNumber: syz [ 1842.059183][T28854] usb 4-1: config 0 descriptor?? [ 1842.287080][T28854] ath6kl: Failed to submit usb control message: -71 [ 1842.296135][T28854] ath6kl: unable to send the bmi data to the device: -71 [ 1842.306248][T28854] ath6kl: Unable to send get target info: -71 [ 1842.326143][T28854] ath6kl: Failed to init ath6kl core: -71 [ 1842.334608][T28854] ath6kl_usb 4-1:0.205: probe with driver ath6kl_usb failed with error -71 [ 1842.364292][T28854] usb 4-1: USB disconnect, device number 69 [ 1842.400551][T32637] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1842.562117][T32637] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1842.572542][T32637] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1842.586290][T32637] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1842.595917][T32637] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1842.605805][T32637] usb 1-1: SerialNumber: syz [ 1843.185203][T32637] usb 1-1: skipping empty audio interface (v1) [ 1843.234651][T32637] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1843.246771][T32637] usb 1-1: USB disconnect, device number 63 [ 1843.270724][ T479] udevd[479]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1843.360207][T28854] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1843.509989][T28854] usb 6-1: Using ep0 maxpacket: 16 [ 1843.517140][T28854] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1843.529072][T28854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1843.543770][T28854] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1843.553181][T28854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.561972][T28854] usb 6-1: Product: syz [ 1843.566309][T28854] usb 6-1: Manufacturer: syz [ 1843.571007][T28854] usb 6-1: SerialNumber: syz [ 1843.578377][T28854] usb 6-1: config 0 descriptor?? [ 1843.590249][T28854] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1843.599607][T28854] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1843.858174][ T1215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7492'. [ 1844.197170][ T1211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.208712][ T1211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.220357][T32637] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1844.239565][T28854] em28xx 6-1:0.0: chip ID is em28178 [ 1844.379954][T32637] usb 4-1: Using ep0 maxpacket: 32 [ 1844.391970][T32637] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1844.402758][T32637] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1844.417253][T32637] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1844.428839][T32637] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1844.465125][T32637] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1844.474696][T32637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.485274][ T1211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.519815][T32637] usb 4-1: Product: syz [ 1844.537671][T32637] usb 4-1: Manufacturer: syz [ 1844.543371][T32637] usb 4-1: SerialNumber: syz [ 1844.569263][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1844.578870][T32637] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input137 [ 1844.613913][ T1211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.732581][T28854] usb 6-1: USB disconnect, device number 33 [ 1844.753614][T28854] em28xx 6-1:0.0: Disconnecting em28xx [ 1844.780187][T32637] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1844.795402][T32637] (id 0x00) [ 1844.817577][T28854] em28xx 6-1:0.0: Freeing device [ 1844.920407][T32637] rc_core: IR keymap rc-imon-pad not found [ 1844.927474][T32637] Registered IR keymap rc-empty [ 1844.936251][T32637] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1844.947136][T32637] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1844.971042][T32637] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1844.985065][T32637] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input138 [ 1845.012853][T32637] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:70> initialized [ 1845.629968][T28854] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1845.780129][T28854] usb 6-1: Using ep0 maxpacket: 32 [ 1845.788390][T28854] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1845.797673][T28854] usb 6-1: config 8 has an invalid interface number: 143 but max is 3 [ 1845.806630][T28854] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1845.816904][T28854] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 1845.826796][T28854] usb 6-1: config 8 has no interface number 0 [ 1845.835037][T28854] usb 6-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1845.849970][T28854] usb 6-1: config 8 interface 143 altsetting 193 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1845.865606][T28854] usb 6-1: config 8 interface 143 altsetting 193 bulk endpoint 0x9 has invalid maxpacket 0 [ 1845.878603][T28854] usb 6-1: config 8 interface 143 altsetting 193 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1845.895571][T28854] usb 6-1: config 8 interface 143 has no altsetting 0 [ 1845.896998][T32637] usb 4-1: USB disconnect, device number 70 [ 1845.926711][T28854] usb 6-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 1845.950841][T28854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.963630][T28854] usb 6-1: Product: syz [ 1845.969190][T28854] usb 6-1: Manufacturer: syz [ 1845.974179][T28854] usb 6-1: SerialNumber: syz [ 1846.195994][T28854] io_ti 6-1:8.143: required endpoints missing [ 1846.212194][T28854] usb 6-1: USB disconnect, device number 34 [ 1846.393068][ T1243] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1846.725830][T28854] IPVS: starting estimator thread 0... [ 1846.819965][ T1252] IPVS: using max 33 ests per chain, 79200 per kthread [ 1846.970044][T32637] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1847.090254][T22476] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1847.136313][T32637] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1847.145949][T32637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.154783][T32637] usb 4-1: Product: syz [ 1847.163987][T32637] usb 4-1: Manufacturer: syz [ 1847.174627][T32637] usb 4-1: SerialNumber: syz [ 1847.205419][T32637] usb 4-1: config 0 descriptor?? [ 1847.252185][T22476] usb 1-1: Using ep0 maxpacket: 8 [ 1847.257891][T32637] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1847.266624][T22476] usb 1-1: config 129 has an invalid interface number: 164 but max is 0 [ 1847.275686][T22476] usb 1-1: config 129 has no interface number 0 [ 1847.284545][T22476] usb 1-1: config 129 interface 164 has no altsetting 0 [ 1847.296006][T22476] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16 [ 1847.306229][T22476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.309798][ T1261] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1847.316444][T22476] usb 1-1: Product: syz [ 1847.340020][T22476] usb 1-1: Manufacturer: syz [ 1847.344914][T22476] usb 1-1: SerialNumber: syz [ 1847.584006][T22476] ums_eneub6250 1-1:129.164: USB Mass Storage device detected [ 1847.672783][T22476] usb 1-1: USB disconnect, device number 64 [ 1849.130227][T13777] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1849.299606][T13777] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.311821][T13777] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1849.324053][T13777] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1849.334350][T13777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.344115][T13777] usb 1-1: Product: syz [ 1849.349635][T13777] usb 1-1: Manufacturer: syz [ 1849.355279][T13777] usb 1-1: SerialNumber: syz [ 1849.381510][T13777] usb 1-1: config 0 descriptor?? [ 1849.693681][T13777] usb 4-1: USB disconnect, device number 71 [ 1850.090304][T13777] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1850.212031][ T1319] netlink: 'syz.5.7517': attribute type 21 has an invalid length. [ 1850.224151][ T1319] ip6t_srh: unknown srh invflags 4000 [ 1850.250698][T13777] usb 4-1: Using ep0 maxpacket: 16 [ 1850.261246][T13777] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1850.275319][T13777] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1850.292917][T13777] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1850.303977][T13777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.312418][T13777] usb 4-1: Product: syz [ 1850.316722][T13777] usb 4-1: Manufacturer: syz [ 1850.322352][T13777] usb 4-1: SerialNumber: syz [ 1850.586481][T13777] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1850.604781][T13777] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1850.693360][T13777] usb 4-1: USB disconnect, device number 72 [ 1850.737479][ T479] udevd[479]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1851.020576][T13777] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1851.060307][T13772] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1851.180456][T13777] usb 4-1: Using ep0 maxpacket: 16 [ 1851.195010][T13777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 1851.219961][T13777] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1851.229088][T13777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.258863][T13777] usb 4-1: config 0 descriptor?? [ 1851.534216][T13777] usbhid 4-1:0.0: can't add hid device: -71 [ 1851.540973][T13777] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1851.559353][T13777] usb 4-1: USB disconnect, device number 73 [ 1851.720785][ T1355] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1851.781310][T13777] usb 1-1: USB disconnect, device number 65 [ 1851.810554][ T1356] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7527'. [ 1852.673374][ T1378] xt_TCPMSS: Only works on TCP SYN packets [ 1852.718220][ T1378] sit1: entered allmulticast mode [ 1853.284396][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.296797][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.379973][T32637] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1853.562472][T32637] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1853.601340][T32637] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1853.626952][T32637] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1853.664154][T32637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.699942][T32637] usb 6-1: Product: syz [ 1853.722444][T32637] usb 6-1: Manufacturer: syz [ 1853.732617][T32637] usb 6-1: SerialNumber: syz [ 1854.344634][ T1393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.364417][ T1393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.413214][ T1394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.430648][ T1394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.432837][ T1393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.453731][ T1393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.501088][T13772] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1854.583006][T22476] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1854.682434][T13772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.721830][T13772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1854.759961][T13772] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1854.769080][T13772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.821021][T13772] usb 1-1: config 0 descriptor?? [ 1855.420875][T13772] usbhid 1-1:0.0: can't add hid device: -71 [ 1855.442923][T13772] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1855.483704][T13772] usb 1-1: USB disconnect, device number 66 [ 1855.663680][ T1412] syzkaller0: entered promiscuous mode [ 1855.669238][ T1412] syzkaller0: entered allmulticast mode [ 1856.020590][ T1419] tipc: Enabled bearer , priority 0 [ 1856.045477][ T1419] syzkaller0: entered promiscuous mode [ 1856.063236][ T1419] syzkaller0: entered allmulticast mode [ 1856.111533][T32637] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1856.144404][T32637] usb 6-1: selecting invalid altsetting 0 [ 1856.160479][T32637] usb 6-1: unit 13 not found! [ 1856.176303][ T1420] tipc: Resetting bearer [ 1856.204943][ T1419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1856.226479][ T1419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1856.396350][T32637] usb 6-1: USB disconnect, device number 36 [ 1856.430838][T13772] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1856.482774][ T589] udevd[589]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1856.623913][T13772] usb 1-1: Using ep0 maxpacket: 16 [ 1856.650913][T13772] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.675047][ T1431] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1856.682362][T13772] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1856.729996][T13772] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1856.751819][T13772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.772234][T13772] usb 1-1: Product: syz [ 1856.779980][T13772] usb 1-1: Manufacturer: syz [ 1856.789983][T13772] usb 1-1: SerialNumber: syz [ 1857.012445][T32637] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1857.017946][T13772] usb 1-1: 0:2 : does not exist [ 1857.042311][T13772] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1857.050314][T28854] tipc: Node number set to 2886997007 [ 1857.073480][ T1418] tipc: Resetting bearer [ 1857.134602][ T1418] tipc: Disabling bearer [ 1857.191383][T13772] usb 1-1: USB disconnect, device number 67 [ 1857.192819][T32637] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.215418][T32637] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1857.225216][T32637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.249055][T32637] usb 4-1: config 0 descriptor?? [ 1857.259556][ T1440] netlink: 344 bytes leftover after parsing attributes in process `syz.6.7550'. [ 1857.277829][T32637] pwc: Askey VC010 type 2 USB webcam detected. [ 1857.286608][ T479] udevd[479]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1857.753940][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1857.753961][ T29] audit: type=1800 audit(1775135760.603:6690): pid=1445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7548" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1857.785806][T32637] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1857.793760][T32637] pwc: recv_control_msg error -32 req 02 val 2700 [ 1857.802803][T32637] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1857.810057][T32637] pwc: recv_control_msg error -32 req 04 val 1000 [ 1857.818397][T32637] pwc: recv_control_msg error -32 req 04 val 1300 [ 1857.927907][ T1447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7553'. [ 1858.180145][T22476] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1858.340055][T22476] usb 1-1: Using ep0 maxpacket: 16 [ 1858.347861][T22476] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1858.362782][T22476] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1858.372211][T22476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.380633][T22476] usb 1-1: Product: syz [ 1858.385007][T22476] usb 1-1: Manufacturer: syz [ 1858.389751][T22476] usb 1-1: SerialNumber: syz [ 1858.397899][T22476] usb 1-1: config 0 descriptor?? [ 1858.417474][T22476] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1858.427039][T22476] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1859.116028][T22476] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1859.130413][T22476] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1859.140213][T22476] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1859.148200][T22476] em28xx 1-1:0.0: No AC97 audio processor [ 1859.589499][ T29] audit: type=1326 audit(1775135762.433:6691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1459 comm="syz.5.7556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x0 [ 1859.741532][T32637] pwc: recv_control_msg error -71 req 04 val 1400 [ 1859.748572][T32637] pwc: recv_control_msg error -71 req 02 val 2000 [ 1859.770509][T32637] pwc: recv_control_msg error -71 req 02 val 2100 [ 1859.777659][T32637] pwc: recv_control_msg error -71 req 04 val 1500 [ 1859.790413][T32637] pwc: recv_control_msg error -71 req 02 val 2500 [ 1859.797468][T32637] pwc: recv_control_msg error -71 req 02 val 2400 [ 1859.808259][T32637] pwc: recv_control_msg error -71 req 02 val 2600 [ 1859.819247][T32637] pwc: recv_control_msg error -71 req 02 val 2900 [ 1859.826378][T32637] pwc: recv_control_msg error -71 req 02 val 2800 [ 1859.833391][T32637] pwc: recv_control_msg error -71 req 04 val 1100 [ 1859.840867][T32637] pwc: recv_control_msg error -71 req 04 val 1200 [ 1859.850641][T32637] pwc: Registered as video103. [ 1859.865891][T32637] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input139 [ 1859.901288][T32637] usb 4-1: USB disconnect, device number 75 [ 1859.950488][T13772] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1860.144228][ T29] audit: type=1326 audit(1775135762.993:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1469 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbbd9c819 code=0x7ffc0000 [ 1860.166877][T13772] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1860.177880][T13772] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1860.190152][ T29] audit: type=1326 audit(1775135763.023:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1469 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbbd9c819 code=0x7ffc0000 [ 1860.219450][ T29] audit: type=1326 audit(1775135763.063:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1469 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cbbd9c819 code=0x7ffc0000 [ 1860.245466][T13772] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1860.255117][T13772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.264003][T13772] usb 6-1: Product: syz [ 1860.268618][ T29] audit: type=1326 audit(1775135763.063:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1469 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbbd9c819 code=0x7ffc0000 [ 1860.291966][T13772] usb 6-1: Manufacturer: syz [ 1860.297878][T13772] usb 6-1: SerialNumber: syz [ 1860.307302][T13772] usb 6-1: config 0 descriptor?? [ 1860.315956][ T1461] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1860.331449][ T29] audit: type=1326 audit(1775135763.063:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1469 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbbd9c819 code=0x7ffc0000 [ 1860.378068][ T1470] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7558'. [ 1860.397574][ T29] audit: type=1326 audit(1775135763.073:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1469 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8cbbd9c819 code=0x7ffc0000 [ 1860.421860][ T1461] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1860.459489][ T29] audit: type=1326 audit(1775135763.073:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1469 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbbd9c819 code=0x7ffc0000 [ 1860.485273][ T29] audit: type=1326 audit(1775135763.073:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1469 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbbd9c819 code=0x7ffc0000 [ 1860.806850][ T1461] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1860.951566][ T1461] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1861.464534][ T1461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.556558][ T1461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.821568][ T1495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1861.832084][ T1495] batadv_slave_0: entered promiscuous mode [ 1862.266331][T28854] usb 1-1: USB disconnect, device number 68 [ 1862.322577][T28854] em28xx 1-1:0.0: Disconnecting em28xx [ 1862.383161][T28854] em28xx 1-1:0.0: Freeing device [ 1863.035298][T13772] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1863.078600][T13772] usb 6-1: USB disconnect, device number 37 [ 1863.306977][ T1510] tipc: Failed to remove unknown binding: 66,1,1/0:2365113817/2365113820 [ 1863.330075][ T1511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1863.351292][ T1511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1863.392925][ T1518] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1863.457755][ T1516] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1863.479640][ T1516] bond2 (unregistering): Released all slaves [ 1863.567914][T13772] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1863.660003][T22476] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1863.700583][ T1521] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1863.729956][T13772] usb 4-1: Using ep0 maxpacket: 16 [ 1863.746879][T13772] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.789376][T13772] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.811925][T22476] usb 1-1: Using ep0 maxpacket: 32 [ 1863.831987][T22476] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1863.845415][T13772] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1863.857289][T22476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.870535][T22476] usb 1-1: config 0 descriptor?? [ 1863.894367][T13772] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1863.919488][T22476] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1863.929927][T13772] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1863.957964][T13772] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1864.011840][T13772] usb 4-1: string descriptor 0 read error: -71 [ 1864.027707][T13772] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1864.056313][T13772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.089064][T13772] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1864.130328][T13772] usb 4-1: no configuration chosen from 1 choice [ 1864.171331][T13772] usb 4-1: USB disconnect, device number 76 [ 1864.596468][ T1530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1864.990030][T22476] gspca_sunplus: reg_r err -71 [ 1865.010840][T22476] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1865.090858][T22476] usb 1-1: USB disconnect, device number 69 [ 1865.975833][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1865.975850][ T29] audit: type=1326 audit(1775135768.823:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1557 comm="syz.0.7577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cc939c819 code=0x0 [ 1866.320321][T28854] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1866.499357][T28854] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1866.519491][T28854] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1866.538944][T28854] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1866.548693][T28854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.557664][T28854] usb 1-1: Product: syz [ 1866.570299][T28854] usb 1-1: Manufacturer: syz [ 1866.574932][T28854] usb 1-1: SerialNumber: syz [ 1866.582226][T28854] usb 1-1: config 0 descriptor?? [ 1866.587964][ T1559] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1866.596041][ T1559] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1866.613407][ T1569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7580'. [ 1866.806516][ T1559] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1866.818982][ T1559] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1866.859989][T32637] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1866.971264][ T29] audit: type=1326 audit(1775135769.823:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1570 comm="syz.5.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1866.996952][ T29] audit: type=1326 audit(1775135769.843:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1570 comm="syz.5.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1867.011850][T32637] usb 4-1: Using ep0 maxpacket: 16 [ 1867.024791][ T29] audit: type=1326 audit(1775135769.843:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1570 comm="syz.5.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1867.024865][ T29] audit: type=1326 audit(1775135769.843:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1570 comm="syz.5.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1867.071689][ T29] audit: type=1326 audit(1775135769.863:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1570 comm="syz.5.7581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1867.080547][T32637] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 1867.110504][T32637] usb 4-1: config 6 has no interfaces? [ 1867.117844][T32637] usb 4-1: config 6 has no interfaces? [ 1867.125612][T32637] usb 4-1: config 6 has no interfaces? [ 1867.132997][T32637] usb 4-1: config 6 has no interfaces? [ 1867.140272][T32637] usb 4-1: config 6 has no interfaces? [ 1867.147666][T32637] usb 4-1: config 6 has no interfaces? [ 1867.155099][T32637] usb 4-1: config 6 has no interfaces? [ 1867.162413][T32637] usb 4-1: config 6 has no interfaces? [ 1867.273580][ T1559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1867.282644][ T1559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1867.938023][T28854] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1869.180188][T22476] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1869.320130][T22476] usb 6-1: device descriptor read/64, error -71 [ 1869.557805][T32637] usb 4-1: string descriptor 0 read error: -71 [ 1869.565791][ T1602] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7588'. [ 1869.584785][T22476] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1869.598469][T32637] usb 4-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 1869.617071][ T1602] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7588'. [ 1869.637043][T32637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 1869.656829][ T1602] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7588'. [ 1869.673584][T32637] usb 4-1: rejected 8 configurations due to insufficient available bus power [ 1869.700483][T32637] usb 4-1: no configuration chosen from 8 choices [ 1869.715648][ T29] audit: type=1326 audit(1775135772.563:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1601 comm="syz.6.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1869.748899][ T29] audit: type=1326 audit(1775135772.563:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1601 comm="syz.6.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1869.771523][T22476] usb 6-1: device descriptor read/64, error -71 [ 1869.779882][ T29] audit: type=1326 audit(1775135772.583:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1601 comm="syz.6.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1869.785015][T32637] usb 4-1: USB disconnect, device number 77 [ 1869.805743][ T29] audit: type=1326 audit(1775135772.583:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1601 comm="syz.6.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1869.880488][T22476] usb usb6-port1: attempt power cycle [ 1870.059306][T28854] usb 1-1: USB disconnect, device number 70 [ 1870.243193][T22476] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1870.299269][T22476] usb 6-1: device descriptor read/8, error -71 [ 1870.560240][T22476] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1870.616659][T22476] usb 6-1: device descriptor read/8, error -71 [ 1870.732034][T22476] usb usb6-port1: unable to enumerate USB device [ 1871.110864][T22476] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1871.281819][T22476] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.314064][T22476] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1871.351248][T22476] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1871.368698][T22476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1871.378140][T22476] usb 1-1: SerialNumber: syz [ 1871.605885][T22476] usb 1-1: 0:2 : does not exist [ 1871.709805][T22476] usb 1-1: USB disconnect, device number 71 [ 1871.987955][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1871.987983][ T29] audit: type=1326 audit(1775135774.833:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1635 comm="syz.5.7598" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f593d39c819 code=0x0 [ 1872.030007][T28854] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1872.180166][T28854] usb 4-1: Using ep0 maxpacket: 16 [ 1872.211574][T28854] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1872.229921][T28854] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1872.243013][T28854] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1872.252358][T28854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.263911][T28854] usb 4-1: Product: syz [ 1872.268221][T28854] usb 4-1: Manufacturer: syz [ 1872.273349][T28854] usb 4-1: SerialNumber: syz [ 1872.285046][T28854] usb 4-1: config 0 descriptor?? [ 1872.504978][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1872.516362][T28854] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input140 [ 1872.544786][T28854] imon:send_packet: packet tx failed (-71) [ 1872.580050][T28854] imon 4-1:0.0: panel buttons/knobs setup failed [ 1872.659967][T28854] rc_core: IR keymap rc-imon-pad not found [ 1872.666239][T28854] Registered IR keymap rc-empty [ 1872.672392][T28854] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1872.683296][T28854] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1872.693984][T28854] imon:send_packet: packet tx failed (-71) [ 1872.720099][T28854] imon 4-1:0.0: remote input dev register failed [ 1872.739268][T28854] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1872.779641][T28854] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1872.786461][T28854] imon:imon_probe: failed to initialize context! [ 1872.793320][T28854] imon 4-1:0.0: unable to register, err -19 [ 1872.807023][T28854] usb 4-1: USB disconnect, device number 78 [ 1873.223989][ T1659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7602'. [ 1873.400237][ T1665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7603'. [ 1873.662351][ T29] audit: type=1326 audit(1775135776.513:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1669 comm="syz.5.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1873.781927][ T29] audit: type=1326 audit(1775135776.543:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1669 comm="syz.5.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1873.919127][ T29] audit: type=1326 audit(1775135776.543:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1669 comm="syz.5.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f593d39c582 code=0x7ffc0000 [ 1873.951867][T22476] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1874.060031][ T29] audit: type=1326 audit(1775135776.573:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1669 comm="syz.5.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f593d39c582 code=0x7ffc0000 [ 1874.129995][T22476] usb 1-1: Using ep0 maxpacket: 16 [ 1874.199001][T22476] usb 1-1: config 0 has no interfaces? [ 1874.221019][ T29] audit: type=1326 audit(1775135776.573:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1669 comm="syz.5.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1874.277116][T22476] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1874.306958][T22476] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1874.328883][ T29] audit: type=1326 audit(1775135776.573:6776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1669 comm="syz.5.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1874.359400][T22476] usb 1-1: Manufacturer: syz [ 1874.371161][T22476] usb 1-1: config 0 descriptor?? [ 1874.386097][ T29] audit: type=1326 audit(1775135776.613:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1669 comm="syz.5.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1874.488110][ T29] audit: type=1326 audit(1775135776.613:6778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1669 comm="syz.5.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1874.581406][ T29] audit: type=1326 audit(1775135776.623:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1669 comm="syz.5.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f593d39c819 code=0x7ffc0000 [ 1874.847898][ T1705] trusted_key: encrypted_key: insufficient parameters specified [ 1875.076318][ T1711] tipc: Enabling of bearer rejected, failed to enable media [ 1875.170006][T32637] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1875.350146][T32637] usb 4-1: Using ep0 maxpacket: 16 [ 1875.386553][T32637] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 1875.421190][T32637] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1875.469244][T32637] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1875.543721][T32637] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1875.584358][T32637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.621993][T32637] usb 4-1: Product: syz [ 1875.637475][T32637] usb 4-1: Manufacturer: syz [ 1875.661944][T32637] usb 4-1: SerialNumber: syz [ 1875.734849][T32637] usb 4-1: config 0 descriptor?? [ 1875.896741][ T1718] syzkaller0: entered promiscuous mode [ 1875.913106][ T1718] syzkaller0: entered allmulticast mode [ 1876.469977][T28854] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1876.743654][T28854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1876.822911][T28854] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1876.854693][T28854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.875935][T22476] usb 1-1: USB disconnect, device number 72 [ 1876.916894][T28854] usb 6-1: Product: syz [ 1876.922503][T28854] usb 6-1: Manufacturer: syz [ 1876.927616][T28854] usb 6-1: SerialNumber: syz [ 1877.001777][T28854] usb 6-1: config 0 descriptor?? [ 1877.034434][T28854] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1877.521443][ T1720] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7617'. [ 1877.701186][ T1720] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7617'. [ 1878.121759][T28854] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1878.135026][T28854] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1878.225985][T32637] usb 4-1: USB disconnect, device number 79 [ 1878.227578][T28854] usb 6-1: USB disconnect, device number 42 [ 1878.453851][ T1757] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7628'. [ 1878.468905][ T1757] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7628'. [ 1878.633176][ T1764] syzkaller0: entered promiscuous mode [ 1878.649104][ T1764] syzkaller0: entered allmulticast mode [ 1880.200272][T32637] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1880.390065][T22476] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1880.414160][ T1802] syzkaller0: entered promiscuous mode [ 1880.414180][ T1802] syzkaller0: entered allmulticast mode [ 1880.419938][T32637] usb 6-1: Using ep0 maxpacket: 32 [ 1880.422209][T32637] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1880.422230][T32637] usb 6-1: config 0 has no interface number 0 [ 1880.422258][T32637] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1880.422275][T32637] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1880.422294][T32637] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1880.422312][T32637] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1880.442258][T32637] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1880.442292][T32637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.442315][T32637] usb 6-1: Product: syz [ 1880.442331][T32637] usb 6-1: Manufacturer: syz [ 1880.442348][T32637] usb 6-1: SerialNumber: syz [ 1880.456641][T32637] usb 6-1: config 0 descriptor?? [ 1880.459778][ T1794] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1880.476102][T32637] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input143 [ 1880.593367][T22476] usb 1-1: Using ep0 maxpacket: 16 [ 1880.615067][T22476] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.615116][T22476] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1880.615135][T22476] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1880.617680][T22476] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1880.617716][T22476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1880.617732][T22476] usb 1-1: SerialNumber: syz [ 1880.631938][T22476] hub 1-1:1.0: bad descriptor, ignoring hub [ 1880.631958][T22476] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1880.632712][T22476] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1880.941270][T22476] usb 1-1: USB disconnect, device number 73 [ 1881.121794][ T1808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.122278][ T1808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.995584][T22476] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1882.172164][T22476] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1882.193982][T22476] usb 1-1: not running at top speed; connect to a high speed hub [ 1882.233860][T22476] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 1882.259683][T22476] usb 1-1: config 0 has no interface number 0 [ 1882.275839][T22476] usb 1-1: config 0 interface 230 has no altsetting 0 [ 1882.295147][T22476] usb 1-1: New USB device found, idVendor=06bd, idProduct=0404, bcdDevice=4f.dc [ 1882.306894][T22476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.315131][T22476] usb 1-1: Product: syz [ 1882.319661][T22476] usb 1-1: Manufacturer: syz [ 1882.325541][T22476] usb 1-1: SerialNumber: syz [ 1882.381020][ T1828] fuse: Bad value for 'group_id' [ 1882.386087][ T1828] fuse: Bad value for 'group_id' [ 1882.406911][T22476] usb 1-1: config 0 descriptor?? [ 1882.858229][T32637] usb 6-1: USB disconnect, device number 43 [ 1882.898927][ T1846] syzkaller0: entered promiscuous mode [ 1882.914858][ T1846] syzkaller0: entered allmulticast mode [ 1883.018678][T22476] gspca_main: spca500-2.14.0 probing 06bd:0404 [ 1883.036960][ T1843] kvm: pic: non byte read [ 1883.045010][ T1843] kvm: pic: non byte read [ 1883.057536][T22476] usb 1-1: USB disconnect, device number 74 [ 1883.064944][ T1843] kvm: pic: non byte read [ 1883.094475][ T1843] kvm: pic: non byte read [ 1883.102484][ T1843] kvm: pic: non byte read [ 1883.126432][ T1843] kvm: pic: non byte read [ 1883.138988][ T1843] kvm: pic: non byte read [ 1883.152071][ T1843] kvm: pic: non byte read [ 1883.168345][ T1843] kvm: pic: non byte read [ 1883.187571][ T1843] kvm: pic: non byte read [ 1883.293722][ T1853] netlink: 'syz.7.7654': attribute type 4 has an invalid length. [ 1883.316971][ T1850] netlink: 'syz.7.7654': attribute type 4 has an invalid length. [ 1883.387152][ T1857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7656'. [ 1883.397512][ T1857] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7656'. [ 1883.597227][ T1866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1883.614044][ T1866] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7658'. [ 1883.899918][T13772] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1883.930000][T28854] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1884.030177][T22476] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1884.049961][T13772] usb 6-1: Using ep0 maxpacket: 16 [ 1884.057955][T13772] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.073949][ T1875] batadv_slave_0: entered promiscuous mode [ 1884.093417][T28854] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1884.106184][T13772] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1884.132732][T28854] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.192173][T28854] usb 4-1: config 0 has no interfaces? [ 1884.193586][T22476] usb 1-1: Using ep0 maxpacket: 8 [ 1884.203163][T13772] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1884.217031][T28854] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1884.228210][T22476] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1884.242702][T22476] usb 1-1: config 179 has no interface number 0 [ 1884.242718][T13772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.259294][T22476] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1884.271207][T28854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.282873][T22476] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1884.295328][T22476] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1884.297921][T13772] usb 6-1: Product: syz [ 1884.309138][T22476] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1884.324556][T22476] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1884.328884][T28854] usb 4-1: config 0 descriptor?? [ 1884.339454][T22476] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1884.364810][T22476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.364908][T13772] usb 6-1: Manufacturer: syz [ 1884.388546][T13772] usb 6-1: SerialNumber: syz [ 1884.415676][ T1873] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1884.665057][ T1866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1884.681331][ T1866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.696617][ T1866] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7658'. [ 1884.717892][ T1866] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7658'. [ 1884.859708][T28854] usb 1-1: USB disconnect, device number 75 [ 1884.860055][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1884.874068][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1884.922859][T13772] usb 6-1: 0:2 : does not exist [ 1884.938397][T13772] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1885.053717][T13772] usb 6-1: USB disconnect, device number 44 [ 1885.525991][ T1885] syzkaller0: entered promiscuous mode [ 1885.532083][ T1885] syzkaller0: entered allmulticast mode [ 1885.564848][ T1886] program syz.0.7664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1886.459249][ T1893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7668'. [ 1886.468307][ T1893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7668'. [ 1886.855525][ T1907] binder: 1906:1907 ioctl 8918 2000000005c0 returned -22 [ 1886.949401][ T1901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7670'. [ 1887.147390][T22476] usb 4-1: USB disconnect, device number 80 [ 1887.188976][ T1920] syzkaller0: entered promiscuous mode [ 1887.195399][ T1920] syzkaller0: entered allmulticast mode [ 1887.563160][ T1930] syzkaller1: entered promiscuous mode [ 1887.569004][ T1930] syzkaller1: entered allmulticast mode [ 1888.170624][T32637] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1888.310169][T32637] usb 1-1: device descriptor read/64, error -71 [ 1888.570192][T32637] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1888.709991][T32637] usb 1-1: device descriptor read/64, error -71 [ 1888.831930][T32637] usb usb1-port1: attempt power cycle [ 1889.200384][T32637] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1889.230796][T32637] usb 1-1: device descriptor read/8, error -71 [ 1889.481810][T32637] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1889.524273][T32637] usb 1-1: device descriptor read/8, error -71 [ 1889.652174][T32637] usb usb1-port1: unable to enumerate USB device [ 1889.672938][ T1961] binder: 1960:1961 unknown command 0 [ 1889.679012][ T1961] binder: 1960:1961 ioctl c0306201 200000000080 returned -22 [ 1889.698310][ T1962] binder: 1960:1962 ioctl 40106410 200000001940 returned -22 [ 1889.698316][ T1961] binder: 1960:1961 ioctl 40106410 200000001940 returned -22 [ 1889.749279][ T1962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.771039][ T1962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.792893][ T1962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.815532][ T1962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.980010][T13772] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1890.133906][T13772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1890.158908][T13772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1890.190782][T13772] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 1890.212720][T13772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.245685][T13772] usb 4-1: config 0 descriptor?? [ 1890.463754][T13772] usbhid 4-1:0.0: can't add hid device: -71 [ 1890.474876][T13772] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1890.485629][T13772] usb 4-1: USB disconnect, device number 81 [ 1891.094595][ T1971] ip6gre2: entered promiscuous mode [ 1891.102379][ T1971] ip6gre2: entered allmulticast mode [ 1891.169551][ T1972] fuse: Bad value for 'fd' [ 1891.176473][ T1972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7692'. [ 1891.470072][T22476] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1891.620107][T22476] usb 1-1: Using ep0 maxpacket: 8 [ 1891.627508][T22476] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1891.638013][T22476] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1891.647395][T22476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.661010][T22476] usb 1-1: config 0 descriptor?? [ 1891.713354][T22476] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1891.774709][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1891.774723][ T29] audit: type=1326 audit(1775135794.623:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.6.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1891.807884][ T29] audit: type=1326 audit(1775135794.653:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.6.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1891.833862][ T29] audit: type=1326 audit(1775135794.653:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.6.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1891.864974][ T29] audit: type=1326 audit(1775135794.653:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.6.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1891.888439][ T29] audit: type=1326 audit(1775135794.653:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.6.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1891.915065][ T29] audit: type=1326 audit(1775135794.653:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.6.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1891.941759][ T29] audit: type=1326 audit(1775135794.653:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.6.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1891.975141][T28854] usb 1-1: USB disconnect, device number 80 [ 1891.986374][ T29] audit: type=1326 audit(1775135794.653:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.6.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1892.011493][ T29] audit: type=1326 audit(1775135794.653:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.6.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1892.039322][ T29] audit: type=1326 audit(1775135794.653:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.6.7695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cfb9c819 code=0x7ffc0000 [ 1892.195974][ T1993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.207844][ T1993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1893.393903][ T1999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7700'. [ 1893.570000][T28854] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1893.740209][T28854] usb 6-1: Using ep0 maxpacket: 8 [ 1893.748045][T28854] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1893.757972][T28854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.777119][T28854] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1893.785028][T28854] pvrusb2: ********** [ 1893.789173][T28854] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1893.799565][ T2009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7703'. [ 1893.809999][T28854] pvrusb2: Important functionality might not be entirely working. [ 1893.818068][T28854] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1893.830457][T28854] pvrusb2: ********** [ 1893.976500][ T2349] pvrusb2: Invalid write control endpoint [ 1894.062632][ T2349] pvrusb2: Invalid write control endpoint [ 1894.082829][ T2349] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1894.104547][ T2349] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1894.134753][ T2349] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1894.157883][ T2349] pvrusb2: Device being rendered inoperable [ 1894.176386][ T2349] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1894.190028][ T2349] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1894.208917][ T2349] pvrusb2: Attached sub-driver cx25840 [ 1894.224465][ T2349] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1894.229306][ T1997] pvrusb2: Attempted to execute control transfer when device not ok [ 1894.251174][ T2349] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1894.353324][ T1997] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7699'. [ 1894.415872][ T2023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7699'. [ 1894.452074][T28854] usb 6-1: USB disconnect, device number 45 [ 1895.139319][ T2036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7711'. [ 1895.168213][ T2036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1895.182403][ T2036] bond2: option ad_select: unable to set because the bond device is up [ 1896.253949][ T2053] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1896.799728][ T2048] syz.6.7714 (2048): drop_caches: 1 [ 1896.932367][ T2062] sctp: [Deprecated]: syz.6.7717 (pid 2062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1896.932367][ T2062] Use struct sctp_sack_info instead [ 1897.405348][ T2072] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7720'. [ 1898.004903][ T2101] trusted_key: encrypted_key: insufficient parameters specified [ 1898.018701][ T2101] ip6tnl0: Caught tx_queue_len zero misconfig [ 1898.028194][ T2101] trusted_key: encrypted_key: insufficient parameters specified [ 1898.222402][ T2109] tap0: tun_chr_ioctl cmd 2147767521 [ 1898.459940][T28854] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1898.590007][T28854] usb 4-1: device descriptor read/64, error -71 [ 1898.800133][T32637] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1898.830468][T28854] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1898.966162][T32637] usb 6-1: not running at top speed; connect to a high speed hub [ 1898.980039][T28854] usb 4-1: device descriptor read/64, error -71 [ 1899.002197][T32637] usb 6-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1899.030957][T32637] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1899.052500][T32637] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1899.072663][T32637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.089802][T32637] usb 6-1: Product: Ь [ 1899.099581][T32637] usb 6-1: Manufacturer: ᐄ [ 1899.109409][T32637] usb 6-1: SerialNumber: ᧭ࡕ씌ꍉꞷ姂笕긕⮎뒹젫醺孊朚ﮙཨᗟ⠉顫꼕ﰜ餱鉱쪱볘ව격넄뺪袄㩎脆℗ [ 1899.110745][T28854] usb usb4-port1: attempt power cycle [ 1899.128993][T22476] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1899.157573][ T2113] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1899.301747][T22476] usb 1-1: Using ep0 maxpacket: 16 [ 1899.315380][T22476] usb 1-1: config 0 has no interfaces? [ 1899.330527][T22476] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1899.352054][T22476] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1899.373455][T22476] usb 1-1: Manufacturer: syz [ 1899.397660][T22476] usb 1-1: config 0 descriptor?? [ 1899.480383][T28854] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1899.500988][T28854] usb 4-1: device descriptor read/8, error -71 [ 1899.595116][T32637] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 1899.650227][T32637] usb 6-1: USB disconnect, device number 46 [ 1899.683750][T32637] usblp0: removed [ 1899.750035][T28854] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1899.780670][T28854] usb 4-1: device descriptor read/8, error -71 [ 1899.890442][T28854] usb usb4-port1: unable to enumerate USB device [ 1900.757449][ T2136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1900.841580][ T2138] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7741'. [ 1901.762095][T22476] usb 1-1: USB disconnect, device number 81 [ 1902.980386][T11728] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1903.142577][T11728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.153044][T11728] usb 1-1: config 0 has no interfaces? [ 1903.158570][T11728] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1903.168697][T11728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.190936][T11728] usb 1-1: config 0 descriptor?? [ 1903.370891][T11728] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1903.510050][T11728] usb 4-1: device descriptor read/64, error -71 [ 1903.749995][T11728] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1903.890374][T11728] usb 4-1: device descriptor read/64, error -71 [ 1904.020467][T11728] usb usb4-port1: attempt power cycle [ 1904.158830][ T2192] bond0: (slave bond_slave_1): Releasing backup interface [ 1904.360377][T11728] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1904.381066][T11728] usb 4-1: device descriptor read/8, error -71 [ 1904.620257][T11728] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1904.640926][T11728] usb 4-1: device descriptor read/8, error -71 [ 1904.750562][T11728] usb usb4-port1: unable to enumerate USB device [ 1904.984807][ T2204] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7761'. [ 1904.995285][ T2204] netlink: 'syz.7.7761': attribute type 7 has an invalid length. [ 1905.004622][ T2204] netlink: 'syz.7.7761': attribute type 8 has an invalid length. [ 1905.013007][ T2204] netlink: 'syz.7.7761': attribute type 2 has an invalid length. [ 1905.110468][T28854] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 1905.122146][T28854] hid-generic 0000:0000:0000.006C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1905.724332][T11728] usb 1-1: USB disconnect, device number 82 [ 1905.824701][ T2220] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1906.210267][ T2222] netlink: 'syz.3.7768': attribute type 1 has an invalid length. [ 1906.449945][T28854] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1906.559929][T13772] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1906.609935][T28854] usb 6-1: Using ep0 maxpacket: 16 [ 1906.624456][T28854] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1906.641184][T28854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.659601][T28854] usb 6-1: Product: syz [ 1906.666223][T28854] usb 6-1: Manufacturer: syz [ 1906.671973][T28854] usb 6-1: SerialNumber: syz [ 1906.722568][T13772] usb 4-1: too many configurations: 29, using maximum allowed: 8 [ 1906.731787][T13772] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1906.742833][T13772] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1906.762321][T13772] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1906.774655][T13772] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1906.786799][T13772] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1906.802563][T13772] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1906.814877][T13772] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1906.826061][T13772] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1906.838578][T13772] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1906.850737][T13772] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1906.861968][T13772] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1906.873748][T13772] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1906.890876][T13772] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1906.913115][T28854] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1906.921472][T13772] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1906.938539][T13772] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1906.957322][T13772] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1906.983103][T13772] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 1906.995520][T13772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=207 [ 1907.009769][T28854] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1907.021635][T13772] usb 4-1: Product: syz [ 1907.025954][T13772] usb 4-1: Manufacturer: syz [ 1907.035271][T13772] usb 4-1: SerialNumber: syz [ 1907.045889][T28854] usb 6-1: USB disconnect, device number 47 [ 1907.068419][T13772] usb 4-1: config 0 descriptor?? [ 1907.097701][ T479] udevd[479]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1907.244470][ T2234] sctp: [Deprecated]: syz.6.7771 (pid 2234) Use of int in max_burst socket option. [ 1907.244470][ T2234] Use struct sctp_assoc_value instead [ 1907.343198][ T2227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7769'. [ 1908.469953][T28854] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1908.643711][T28854] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1908.660780][T28854] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1908.685755][T28854] usb 6-1: config 0 has no interface number 0 [ 1908.702907][T28854] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1908.721690][T28854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.741280][T28854] usb 6-1: Product: syz [ 1908.750028][T28854] usb 6-1: Manufacturer: syz [ 1908.758214][T28854] usb 6-1: SerialNumber: syz [ 1908.773819][T28854] usb 6-1: config 0 descriptor?? [ 1908.786282][T28854] uvcvideo 6-1:0.64: probe with driver uvcvideo failed with error -22 [ 1908.941175][ T2276] dlm: no locking on control device [ 1908.947907][ T2277] dlm: no locking on control device [ 1909.003244][ T2271] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1909.017165][ T2271] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1909.033578][T28854] usb 6-1: USB disconnect, device number 48 [ 1909.279684][T11728] usb 4-1: USB disconnect, device number 90 [ 1909.611331][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1909.884152][ T2299] tipc: Enabled bearer , priority 0 [ 1910.250235][T22476] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 1910.384265][ T2305] 8021q: VLANs not supported on ipvlan1 [ 1910.401728][T22476] usb 4-1: Invalid ep0 maxpacket: 16 [ 1910.520137][T28854] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1910.530577][T22476] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 1910.680097][T22476] usb 4-1: Invalid ep0 maxpacket: 16 [ 1910.685725][T22476] usb usb4-port1: attempt power cycle [ 1910.687782][T28854] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1910.702524][T28854] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1910.713252][T28854] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 1910.723264][T28854] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1910.740663][T28854] usb 1-1: config 129 has no interface number 0 [ 1910.747468][T28854] usb 1-1: config 129 has no interface number 1 [ 1910.754069][T28854] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1910.768404][T28854] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1910.780382][T28854] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1910.799981][T28854] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1910.807706][T28854] usb 1-1: config 129 interface 5 has no altsetting 0 [ 1910.818930][T28854] usb 1-1: string descriptor 0 read error: -22 [ 1910.826872][T28854] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1910.837621][T28854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.865399][T28854] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1910.873750][ T2309] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 1910.885487][T28854] usb 1-1: MIDIStreaming interface descriptor not found [ 1911.000706][T32637] tipc: Node number set to 676603629 [ 1911.030394][T22476] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 1911.052234][T22476] usb 4-1: Invalid ep0 maxpacket: 16 [ 1911.114083][T32637] usb 1-1: USB disconnect, device number 83 [ 1911.120268][T11728] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1911.180821][T22476] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 1911.201096][T22476] usb 4-1: Invalid ep0 maxpacket: 16 [ 1911.207034][T22476] usb usb4-port1: unable to enumerate USB device [ 1911.290194][T11728] usb 6-1: Using ep0 maxpacket: 8 [ 1911.296862][T11728] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1911.309589][T11728] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1911.330475][T11728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.338533][T11728] usb 6-1: Product: syz [ 1911.347510][T11728] usb 6-1: Manufacturer: syz [ 1911.352798][T11728] usb 6-1: SerialNumber: syz [ 1911.367867][T11728] usb 6-1: config 0 descriptor?? [ 1911.377050][T11728] usb 6-1: bad CDC descriptors [ 1911.383478][T11728] usb 6-1: unsupported MDLM descriptors [ 1911.395296][T11728] cdc_acm 6-1:0.0: Zero length descriptor references [ 1911.402348][T11728] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 1911.470434][T32637] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 1911.581118][T11728] usb 6-1: USB disconnect, device number 49 [ 1911.621403][T32637] usb 1-1: Invalid ep0 maxpacket: 16 [ 1911.750216][T32637] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 1911.899992][T32637] usb 1-1: Invalid ep0 maxpacket: 16 [ 1911.905800][T32637] usb usb1-port1: attempt power cycle [ 1912.128460][T11728] hid-generic 0000:0003:0001.006D: unknown main item tag 0x0 [ 1912.136740][T11728] hid-generic 0000:0003:0001.006D: unknown main item tag 0x0 [ 1912.148153][T11728] hid-generic 0000:0003:0001.006D: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1912.213431][ T2325] fido_id[2325]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1912.250387][T32637] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 1912.280650][T32637] usb 1-1: Invalid ep0 maxpacket: 16 [ 1912.419923][T32637] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 1912.440791][T32637] usb 1-1: Invalid ep0 maxpacket: 16 [ 1912.446843][T32637] usb usb1-port1: unable to enumerate USB device [ 1913.600016][T32637] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1913.762099][T32637] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1913.779966][T32637] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 1913.780029][T13772] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1913.799000][T32637] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1913.816841][T32637] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1913.834106][T32637] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 1913.874678][T32637] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1913.884401][T32637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.896821][T32637] usb 6-1: Product: syz [ 1913.902077][T32637] usb 6-1: Manufacturer: syz [ 1913.907844][T32637] usb 6-1: SerialNumber: syz [ 1913.928221][ T2343] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1913.946001][T32637] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1913.953143][T32637] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1913.968833][T32637] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1913.979560][T32637] cdc_ncm 6-1:1.1: bind() failure [ 1914.003417][T13772] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1914.021495][T32637] usbtest 6-1:1.1: couldn't get endpoints, -22 [ 1914.028193][T13772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.032184][T32637] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 1914.056246][T13772] usb 1-1: Product: syz [ 1914.063544][T13772] usb 1-1: Manufacturer: syz [ 1914.085023][T13772] usb 1-1: SerialNumber: syz [ 1914.121918][T13772] usb 1-1: config 0 descriptor?? [ 1914.155943][T13772] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 088 [ 1914.311853][T28854] usb 6-1: USB disconnect, device number 50 [ 1914.724036][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.731937][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.752401][ T2354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.805821][ T2354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.866845][ T2354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7803'. [ 1914.927125][T13772] i2c i2c-1: failure reading functionality [ 1914.940267][ T2354] vivid-000: ================= START STATUS ================= [ 1914.957176][T13772] i2c i2c-1: connected i2c-tiny-usb device [ 1914.986156][ T2354] vivid-000: Test Pattern: 75% Colorbar [ 1915.008542][ T2368] trusted_key: encrypted_key: keylen parameter is missing [ 1915.020618][ T2354] vivid-000: Fill Percentage of Frame: 4 [ 1915.045625][ T2354] vivid-000: Horizontal Movement: No Movement [ 1915.068259][ T2354] vivid-000: Vertical Movement: Move Up [ 1915.106685][ T2354] vivid-000: OSD Text Mode: All [ 1915.137040][ T2354] vivid-000: Show Border: false [ 1915.173491][ T2354] vivid-000: Show Square: false [ 1915.198642][ T2354] vivid-000: Sensor Flipped Horizontally: false [ 1915.231120][ T2354] vivid-000: Sensor Flipped Vertically: false [ 1915.269568][ T2354] vivid-000: Insert SAV Code in Image: true [ 1915.299560][ T2354] vivid-000: Insert EAV Code in Image: false [ 1915.331805][ T2354] vivid-000: Insert Video Guard Band: false [ 1915.378268][ T2354] vivid-000: Reduced Framerate: false [ 1915.401024][ T2354] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1915.439961][ T2354] vivid-000: S-Video 000-0 Is Connected To: None [ 1915.468619][ T2354] vivid-000: Enable Capture Cropping: true [ 1915.501022][ T2354] vivid-000: Enable Capture Composing: true [ 1915.532168][ T2354] vivid-000: Enable Capture Scaler: true [ 1915.561094][ T2354] vivid-000: Timestamp Source: End of Frame [ 1915.576364][ T2354] vivid-000: Colorspace: SMPTE 170M [ 1915.590911][T13772] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1915.601873][ T2354] vivid-000: Transfer Function: Rec. 709 [ 1915.631002][ T2354] vivid-000: Y'CbCr Encoding: ITU-R 601 [ 1915.653630][ T2354] vivid-000: HSV Encoding: Hue 0-179 [ 1915.671646][ T2354] vivid-000: Quantization: Limited Range [ 1915.702565][ T2354] vivid-000: Apply Alpha To Red Only: true [ 1915.743413][ T2354] vivid-000: Standard Aspect Ratio: 4x3 [ 1915.772432][ T2364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1915.783902][ T2354] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1915.802325][ T2354] vivid-000: DV Timings: 640x480p59 inactive [ 1915.812590][T13772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1915.843443][T13772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1915.873603][ T2354] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1915.908709][ T2354] vivid-000: Maximum EDID Blocks: 6 [ 1915.924858][ T2354] vivid-000: Limited RGB Range (16-235): true [ 1915.931629][T13772] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1915.979950][ T2354] vivid-000: Rx RGB Quantization Range: Automatic [ 1916.000551][T13772] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1916.026817][ T2354] vivid-000: Power Present: 0x00000001 [ 1916.046123][ T2354] tpg source WxH: 720x576 (Y'CbCr) [ 1916.055872][T13772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.067348][ T2354] tpg field: 3 [ 1916.080490][ T2354] tpg crop: (0,0)/64x36 [ 1916.096613][ T2354] tpg compose: (0,0)/16x8 [ 1916.125374][ T2354] tpg colorspace: 9 [ 1916.127510][T13772] usb 4-1: config 0 descriptor?? [ 1916.144854][ T2354] tpg transfer function: 1/1 [ 1916.171497][ T2354] tpg Y'CbCr encoding: 3/1 [ 1916.201310][ T2354] tpg quantization: 2/2 [ 1916.205970][ T2354] tpg RGB range: 0/1 [ 1916.223283][ T2354] vivid-000: ================== END STATUS ================== [ 1916.292424][T32637] usb 1-1: USB disconnect, device number 88 [ 1916.421986][T13772] plantronics 0003:047F:FFFF.006E: reserved main item tag 0xd [ 1916.495675][T13772] plantronics 0003:047F:FFFF.006E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1916.576297][T13772] usb 4-1: USB disconnect, device number 95 [ 1916.700536][ T2384] fido_id[2384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1916.883860][ T2391] netlink: 'syz.6.7814': attribute type 3 has an invalid length. [ 1916.905866][ T2391] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7814'. [ 1916.943201][ T2395] fuse: Unknown parameter 'nd' [ 1918.410295][T11728] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1918.580474][T11728] usb 6-1: Using ep0 maxpacket: 16 [ 1918.607921][T11728] usb 6-1: config 0 has no interfaces? [ 1918.630477][T11728] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1918.660173][T11728] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1918.709439][T11728] usb 6-1: Manufacturer: syz [ 1918.754474][T11728] usb 6-1: config 0 descriptor?? [ 1919.088798][ T2426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1919.446433][ T2454] fuse: Bad value for 'fd' [ 1919.902689][ T2454] ipip0: entered promiscuous mode [ 1919.908043][ T2454] ipip0: entered allmulticast mode [ 1922.407054][T13772] usb 6-1: USB disconnect, device number 51 [ 1922.810279][T11728] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1922.880296][T13772] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1923.004460][T11728] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1923.014799][T11728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.023804][T11728] usb 1-1: Product: syz [ 1923.029735][T11728] usb 1-1: Manufacturer: syz [ 1923.048338][T11728] usb 1-1: SerialNumber: syz [ 1923.061005][T13772] usb 6-1: Using ep0 maxpacket: 8 [ 1923.079450][T11728] usb 1-1: config 0 descriptor?? [ 1923.089664][T13772] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1923.114576][T13772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.132099][T13772] usb 6-1: Product: syz [ 1923.141326][T13772] usb 6-1: Manufacturer: syz [ 1923.151432][T13772] usb 6-1: SerialNumber: syz [ 1923.171376][T13772] usb 6-1: config 0 descriptor?? [ 1923.183679][T13772] usb 6-1: bad CDC descriptors [ 1923.190158][T13772] usb 6-1: unsupported MDLM descriptors [ 1923.383763][T32637] usb 6-1: USB disconnect, device number 52 [ 1923.847668][ T2548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7848'. [ 1923.992375][ T2548] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1924.016197][ T2548] bond5 (unregistering): Released all slaves [ 1924.059326][ T2552] Cannot find add_set index 0 as target [ 1924.108959][ T2551] team0: entered promiscuous mode [ 1924.120275][ T2552] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7848'. [ 1924.129758][ T2551] team_slave_0: entered promiscuous mode [ 1924.137080][ T2551] team_slave_1: entered promiscuous mode [ 1924.145856][ T2551] batadv1: entered promiscuous mode [ 1924.326049][T11728] usb 1-1: Firmware version (0.0) predates our first public release. [ 1924.342341][T11728] usb 1-1: Please update to version 0.2 or newer [ 1924.590749][T28854] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1924.730010][T28854] usb 4-1: device descriptor read/64, error -71 [ 1924.981469][T28854] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1925.140295][T28854] usb 4-1: device descriptor read/64, error -71 [ 1925.260774][T28854] usb usb4-port1: attempt power cycle [ 1925.594029][ T2567] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1925.611180][T28854] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1925.631610][T28854] usb 4-1: device descriptor read/8, error -71 [ 1925.870052][T28854] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1925.890629][T28854] usb 4-1: device descriptor read/8, error -71 [ 1925.931380][T13772] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1925.942553][T13772] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1925.950546][T13772] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1925.958346][T13772] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1925.965935][T13772] rtc rtc0: __rtc_set_alarm: err=-22 [ 1926.010619][T28854] usb usb4-port1: unable to enumerate USB device [ 1926.089956][T11728] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1926.242803][T11728] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1926.253502][T11728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1926.264921][T11728] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1926.277927][T11728] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1926.287487][T11728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.298262][T11728] usb 6-1: config 0 descriptor?? [ 1926.379114][T28854] usb 1-1: USB disconnect, device number 89 [ 1926.554263][T11728] ath6kl: Failed to submit usb control message: -71 [ 1926.565137][T11728] ath6kl: unable to send the bmi data to the device: -71 [ 1926.574992][T11728] ath6kl: Unable to send get target info: -71 [ 1926.599327][T11728] ath6kl: Failed to init ath6kl core: -71 [ 1926.607116][T11728] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1926.637258][T11728] usb 6-1: USB disconnect, device number 53 [ 1927.180309][T28854] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1927.337725][ T2590] netlink: 27 bytes leftover after parsing attributes in process `syz.5.7858'. [ 1927.392353][T28854] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 1927.400869][T28854] usb 1-1: config 5 has no interface number 0 [ 1927.407287][T28854] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1927.424787][T28854] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 12846, setting to 64 [ 1927.436243][T28854] usb 1-1: config 5 interface 123 has no altsetting 0 [ 1927.446584][T28854] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1927.457130][T28854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.466154][T28854] usb 1-1: Product: syz [ 1927.471246][T28854] usb 1-1: Manufacturer: syz [ 1927.476331][T28854] usb 1-1: SerialNumber: syz [ 1927.492760][ T2584] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1927.731140][T28854] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 1927.747962][T28854] usb 1-1: USB disconnect, device number 90 [ 1928.003534][ T2622] netlink: 'syz.7.7864': attribute type 10 has an invalid length. [ 1928.008774][ T2622] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1929.630769][ T2668] team0: entered promiscuous mode [ 1929.635983][ T2668] team_slave_0: entered promiscuous mode [ 1929.659682][ T2668] team_slave_1: entered promiscuous mode [ 1929.671333][ T2668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1929.690504][T13772] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1929.871904][T13772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.886851][T13772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1929.901015][T13772] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 1929.912557][T13772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.939274][T13772] usb 4-1: config 0 descriptor?? [ 1930.100872][T32637] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1930.185013][T13772] lg-g15 0003:046D:0A07.006F: item fetching failed at offset 2/5 [ 1930.212977][T13772] lg-g15 0003:046D:0A07.006F: probe with driver lg-g15 failed with error -22 [ 1930.292082][T32637] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1930.305998][T32637] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1930.320656][T32637] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1930.337496][T32637] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1930.369713][T32637] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1930.379547][T32637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.388365][T32637] usb 1-1: Product: syz [ 1930.395663][T32637] usb 1-1: Manufacturer: syz [ 1930.401881][T32637] usb 1-1: SerialNumber: syz [ 1930.417160][ T2662] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1930.442400][T32637] cdc_mbim 1-1:1.0: skipping garbage [ 1930.463482][T13772] usb 4-1: USB disconnect, device number 100 [ 1930.565401][ T2683] trusted_key: encrypted_key: insufficient parameters specified [ 1930.662171][ T2662] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1930.691579][ T2662] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1930.906597][ T2709] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7883'. [ 1930.978711][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 1930.978730][ T29] audit: type=1326 audit(1775135833.823:6873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2708 comm="syz.7.7883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cbbd9c819 code=0x0 [ 1931.108241][ T2716] netlink: 'syz.5.7884': attribute type 1 has an invalid length. [ 1931.165336][ T2719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7884'. [ 1931.322248][ T2716] bond3: entered promiscuous mode [ 1931.369065][ T2716] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1931.897659][T32637] cdc_mbim 1-1:1.0: bind() failure [ 1931.932741][T32637] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1931.939628][T32637] cdc_ncm 1-1:1.1: bind() failure [ 1932.007800][T32637] usb 1-1: USB disconnect, device number 91 [ 1934.905047][ T2784] syzkaller0: entered promiscuous mode [ 1934.924533][ T2784] syzkaller0: entered allmulticast mode [ 1935.420444][T22476] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1935.573881][T22476] usb 6-1: config 0 has an invalid interface number: 22 but max is 0 [ 1935.584080][T22476] usb 6-1: config 0 has no interface number 0 [ 1935.591644][T22476] usb 6-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1935.609253][T22476] usb 6-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1935.619652][T22476] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1935.629199][T22476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.641286][T22476] usb 6-1: config 0 descriptor?? [ 1936.116269][T22476] elo 0003:04E7:0030.0070: item fetching failed at offset 6/7 [ 1936.125421][T22476] elo 0003:04E7:0030.0070: parse failed [ 1936.133267][T22476] elo 0003:04E7:0030.0070: probe with driver elo failed with error -22 [ 1937.453783][ T2798] bridge0: port 3(hsr0) entered blocking state [ 1937.461889][ T2798] bridge0: port 3(hsr0) entered disabled state [ 1937.468286][ T2798] hsr0: entered allmulticast mode [ 1937.474177][ T2798] hsr_slave_0: entered allmulticast mode [ 1937.480629][ T2798] hsr_slave_1: entered allmulticast mode [ 1937.492747][ T2798] hsr0: entered promiscuous mode [ 1937.522211][T28854] usb 6-1: USB disconnect, device number 54 [ 1938.219957][T28854] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1938.392192][T28854] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1938.399774][T28854] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1938.419942][T28854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.432860][T28854] usb 1-1: config 0 descriptor?? [ 1939.010032][T13772] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1939.196966][T13772] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1939.208904][T13772] usb 6-1: config 0 has no interfaces? [ 1939.278899][T13772] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1939.288185][T13772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.345269][T13772] usb 6-1: config 0 descriptor?? [ 1939.420219][T22476] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1939.479418][T28854] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 1939.559393][T28854] usb 6-1: USB disconnect, device number 55 [ 1939.570040][T22476] usb 4-1: Using ep0 maxpacket: 16 [ 1939.582116][T22476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1939.594059][T22476] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1939.614267][T22476] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1939.624241][T22476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.635545][T22476] usb 4-1: config 0 descriptor?? [ 1939.646577][T22476] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1939.692448][T22476] usb 1-1: USB disconnect, device number 92 [ 1940.144714][ T2865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7913'. [ 1940.152054][ T2861] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1940.909984][T28854] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1941.082011][T28854] usb 6-1: Using ep0 maxpacket: 16 [ 1941.156092][T28854] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1941.172380][T28854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.210022][T13772] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1941.226231][T28854] usb 6-1: Product: syz [ 1941.240563][T28854] usb 6-1: Manufacturer: syz [ 1941.249530][T28854] usb 6-1: SerialNumber: syz [ 1941.282796][T28854] usb 6-1: config 0 descriptor?? [ 1941.319357][T28854] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 1941.410075][T13772] usb 1-1: Using ep0 maxpacket: 8 [ 1941.494974][T13772] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1941.537251][T13772] usb 1-1: config 0 has no interfaces? [ 1941.562646][T13772] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1941.577051][T13772] usb 1-1: config 0 has no interfaces? [ 1941.606051][T13772] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1941.632396][T13772] usb 1-1: config 0 has no interfaces? [ 1941.653714][T13772] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1941.683107][T13772] usb 1-1: config 0 has no interfaces? [ 1941.703745][T13772] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1941.727395][T13772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.761917][T13772] usb 1-1: config 0 descriptor?? [ 1942.114945][T22476] usb 4-1: USB disconnect, device number 101 [ 1942.161156][ T2920] fuse: Bad value for 'fd' [ 1942.850054][T32637] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1943.027445][T32637] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1943.066500][T32637] usb 4-1: config 0 has no interfaces? [ 1943.089100][T32637] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1943.135678][T32637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.185950][T32637] usb 4-1: config 0 descriptor?? [ 1943.422119][T32637] usb 4-1: USB disconnect, device number 102 [ 1944.103517][T22476] usb 6-1: USB disconnect, device number 56 [ 1944.220438][T13772] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1944.389903][T13772] usb 4-1: Using ep0 maxpacket: 32 [ 1944.397492][T13772] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1944.406838][T13772] usb 4-1: config 0 has no interface number 0 [ 1944.413536][T13772] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1944.424172][T13772] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1944.433769][T13772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.443900][T13772] usb 4-1: Product: syz [ 1944.448199][T13772] usb 4-1: Manufacturer: syz [ 1944.453422][T13772] usb 4-1: SerialNumber: syz [ 1944.464454][T13772] usb 4-1: config 0 descriptor?? [ 1944.872502][T28854] usb 1-1: USB disconnect, device number 93 [ 1945.560019][T28854] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1945.710641][T28854] usb 6-1: Using ep0 maxpacket: 16 [ 1945.719441][T13772] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 1945.728276][T28854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1945.738283][T13772] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1945.746653][T13772] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1945.754881][T13772] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1945.766165][T28854] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1945.780311][T13772] usb 4-1: USB disconnect, device number 103 [ 1945.791628][T28854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.799699][T28854] usb 6-1: Product: syz [ 1945.805458][T28854] usb 6-1: Manufacturer: syz [ 1945.811731][T28854] usb 6-1: SerialNumber: syz [ 1945.825194][T28854] usb 6-1: config 0 descriptor?? [ 1945.837383][T28854] hub 6-1:0.0: bad descriptor, ignoring hub [ 1945.845446][T28854] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1945.856723][T28854] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input145 [ 1946.051595][ T2948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1946.075528][ T2948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1946.840256][T32637] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1946.990159][T32637] usb 1-1: Using ep0 maxpacket: 32 [ 1947.004050][T32637] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.015266][T32637] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1947.033990][T32637] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1947.046495][T32637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.058424][T32637] usb 1-1: Product: syz [ 1947.063331][T32637] usb 1-1: Manufacturer: syz [ 1947.068352][T32637] usb 1-1: SerialNumber: syz [ 1947.294321][T32637] usb 1-1: interface 1 not found [ 1947.305734][T32637] usb 1-1: USB disconnect, device number 94 [ 1947.624033][ T5183] usb 6-1: reset high-speed USB device number 57 using dummy_hcd [ 1947.832857][ T5183] usb 6-1: device firmware changed [ 1947.856233][ T2988] IPVS: Error connecting to the multicast addr [ 1947.864991][T13772] usb 6-1: USB disconnect, device number 57 [ 1948.220456][T13772] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1948.380038][T13772] usb 6-1: Using ep0 maxpacket: 16 [ 1948.396929][T13772] usb 6-1: config index 0 descriptor too short (expected 1810, got 18) [ 1948.430620][T13772] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 1948.466431][T13772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.490849][ T3000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7946'. [ 1948.506558][T13772] usb 6-1: config 0 descriptor?? [ 1948.520675][ T3000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7946'. [ 1948.534010][T13772] gspca_main: etoms-2.14.0 probing 102c:6151 [ 1948.575794][ T3000] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1948.817215][T13772] usb 6-1: USB disconnect, device number 58 [ 1948.999975][T28854] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1949.121535][ T3005] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1949.160066][T28854] usb 4-1: Using ep0 maxpacket: 16 [ 1949.168155][T28854] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1949.179562][T28854] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1949.187250][T28854] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1949.196570][T28854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.211601][T28854] usb 4-1: config 0 descriptor?? [ 1949.620514][T32637] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1949.646557][T28854] nzxt-smart2 0003:1E71:2009.0071: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1949.780208][T32637] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1949.824860][T32637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.868977][T32637] usb 1-1: Product: syz [ 1949.878685][T32637] usb 1-1: Manufacturer: syz [ 1949.891910][T32637] usb 1-1: SerialNumber: syz [ 1949.909084][T32637] usb 1-1: config 0 descriptor?? [ 1949.952842][T32637] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 095 [ 1950.609544][ T3015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.628939][ T3015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.657245][ T3015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7952'. [ 1950.746892][T32637] i2c i2c-1: failure reading functionality [ 1950.763003][ T3029] vivid-000: ================= START STATUS ================= [ 1950.782667][T32637] i2c i2c-1: connected i2c-tiny-usb device [ 1950.814296][ T3015] trusted_key: encrypted_key: keylen parameter is missing [ 1950.845588][ T3029] vivid-000: Test Pattern: 75% Colorbar [ 1950.902853][ T3029] vivid-000: Fill Percentage of Frame: 4 [ 1950.945106][ T3029] vivid-000: Horizontal Movement: No Movement [ 1950.977394][ T3029] vivid-000: Vertical Movement: Move Up [ 1950.998447][ T3029] vivid-000: OSD Text Mode: All [ 1951.011232][ T3029] vivid-000: Show Border: false [ 1951.022822][ T3029] vivid-000: Show Square: false [ 1951.037728][ T3029] vivid-000: Sensor Flipped Horizontally: false [ 1951.058448][ T3029] vivid-000: Sensor Flipped Vertically: false [ 1951.074250][ T3029] vivid-000: Insert SAV Code in Image: true [ 1951.088767][ T3029] vivid-000: Insert EAV Code in Image: false [ 1951.104753][ T3029] vivid-000: Insert Video Guard Band: false [ 1951.115586][ T3029] vivid-000: Reduced Framerate: false [ 1951.128189][ T3029] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1951.136449][ T3029] vivid-000: S-Video 000-0 Is Connected To: None [ 1951.143352][ T3029] vivid-000: Enable Capture Cropping: true [ 1951.149406][ T3029] vivid-000: Enable Capture Composing: true [ 1951.155698][ T3029] vivid-000: Enable Capture Scaler: true [ 1951.162790][ T3029] vivid-000: Timestamp Source: End of Frame [ 1951.168823][ T3029] vivid-000: Colorspace: SMPTE 170M [ 1951.174887][ T3029] vivid-000: Transfer Function: Rec. 709 [ 1951.185388][ T3029] vivid-000: Y'CbCr Encoding: ITU-R 601 [ 1951.199395][ T3029] vivid-000: HSV Encoding: Hue 0-179 [ 1951.214643][ T3029] vivid-000: Quantization: Limited Range [ 1951.228821][ T3029] vivid-000: Apply Alpha To Red Only: true [ 1951.242817][ T3029] vivid-000: Standard Aspect Ratio: 4x3 [ 1951.257557][ T3029] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1951.277459][ T3029] vivid-000: DV Timings: 640x480p59 inactive [ 1951.292709][ T3029] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1951.311362][ T3029] vivid-000: Maximum EDID Blocks: 6 [ 1951.325630][ T3029] vivid-000: Limited RGB Range (16-235): true [ 1951.343369][ T3029] vivid-000: Rx RGB Quantization Range: Automatic [ 1951.357518][ T3029] vivid-000: Power Present: 0x00000001 [ 1951.372338][ T3029] tpg source WxH: 720x576 (Y'CbCr) [ 1951.383435][ T3029] tpg field: 3 [ 1951.392163][ T3029] tpg crop: (0,0)/64x36 [ 1951.402366][ T3029] tpg compose: (0,0)/16x8 [ 1951.414336][ T3029] tpg colorspace: 9 [ 1951.422333][ T3029] tpg transfer function: 1/1 [ 1951.436272][ T3029] tpg Y'CbCr encoding: 3/1 [ 1951.450826][ T3029] tpg quantization: 2/2 [ 1951.469682][ T3029] tpg RGB range: 0/1 [ 1951.481159][ T3029] vivid-000: ================== END STATUS ================== [ 1951.607710][T28854] usb 1-1: USB disconnect, device number 95 [ 1951.627770][ T3025] ------------[ cut here ]------------ [ 1951.634515][ T3025] !rwb [ 1951.634549][ T3025] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#1: syz.7.7953/3025 [ 1951.649127][ T3025] Modules linked in: [ 1951.653703][ T3025] CPU: 1 UID: 0 PID: 3025 Comm: syz.7.7953 Tainted: G L syzkaller #0 PREEMPT(full) [ 1951.664762][ T3025] Tainted: [L]=SOFTLOCKUP [ 1951.669141][ T3025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1951.679440][ T3025] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 1951.685921][ T3025] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 fd c9 24 fd eb 18 e8 f6 c9 24 fd eb 0d e8 ef c9 24 fd 4c 89 ff e8 e7 fb 82 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 1951.705762][ T3025] RSP: 0018:ffffc9000523fa70 EFLAGS: 00010282 [ 1951.711970][ T3025] RAX: f9f3fe318c995100 RBX: 1ffff1100b069704 RCX: 0000000000000046 [ 1951.720323][ T3025] RDX: 0000000000000006 RSI: ffffffff8defa72d RDI: ffffffff8c27d100 [ 1951.728400][ T3025] RBP: dffffc0000000000 R08: ffffffff9011ccb7 R09: 1ffffffff2023996 [ 1951.736529][ T3025] R10: dffffc0000000000 R11: fffffbfff2023997 R12: ffff88805834b820 [ 1951.744587][ T3025] R13: 0000000000000000 R14: ffff888028c69000 R15: ffff88805834b800 [ 1951.752671][ T3025] FS: 00007f8cbcc626c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 1951.761739][ T3025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1951.768484][ T3025] CR2: 000000110c3b1968 CR3: 00000000928aa000 CR4: 00000000003526f0 [ 1951.776557][ T3025] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009951 [ 1951.784602][ T3025] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1951.792655][ T3025] Call Trace: [ 1951.796065][ T3025] [ 1951.799032][ T3025] blk_register_queue+0x382/0x430 [ 1951.804260][ T3025] __add_disk+0x677/0xd50 [ 1951.808712][ T3025] ? down_read+0x272/0x2e0 [ 1951.813218][ T3025] add_disk_fwnode+0xfb/0x480 [ 1951.817965][ T3025] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1951.824023][ T3025] loop_add+0x85e/0xb40 [ 1951.828381][ T3025] ? __pfx_loop_add+0x10/0x10 [ 1951.833153][ T3025] ? irqentry_exit+0x59e/0x620 [ 1951.837972][ T3025] ? rcu_is_watching+0x15/0xb0 [ 1951.843077][ T3025] loop_control_ioctl+0x2f8/0x5a0 [ 1951.848162][ T3025] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1951.853825][ T3025] ? security_file_ioctl+0xcf/0x2a0 [ 1951.859160][ T3025] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1951.864178][ T3025] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1951.869777][ T3025] __se_sys_ioctl+0xfc/0x170 [ 1951.874521][ T3025] do_syscall_64+0x14d/0xf80 [ 1951.879153][ T3025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.885292][ T3025] ? clear_bhb_loop+0x40/0x90 [ 1951.890066][ T3025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.896079][ T3025] RIP: 0033:0x7f8cbbd9c819 [ 1951.900703][ T3025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1951.920488][ T3025] RSP: 002b:00007f8cbcc62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1951.928981][ T3025] RAX: ffffffffffffffda RBX: 00007f8cbc016180 RCX: 00007f8cbbd9c819 [ 1951.937023][ T3025] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000009 [ 1951.945064][ T3025] RBP: 00007f8cbbe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1951.953195][ T3025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1951.961260][ T3025] R13: 00007f8cbc016218 R14: 00007f8cbc016180 R15: 00007f8cbc13fa48 [ 1951.969289][ T3025] [ 1951.972409][ T3025] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1951.979700][ T3025] CPU: 1 UID: 0 PID: 3025 Comm: syz.7.7953 Tainted: G L syzkaller #0 PREEMPT(full) [ 1951.990594][ T3025] Tainted: [L]=SOFTLOCKUP [ 1951.994923][ T3025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1952.004997][ T3025] Call Trace: [ 1952.008300][ T3025] [ 1952.011247][ T3025] vpanic+0x56c/0xa60 [ 1952.015334][ T3025] ? __pfx__printk+0x10/0x10 [ 1952.019954][ T3025] ? __pfx_vpanic+0x10/0x10 [ 1952.024594][ T3025] ? is_bpf_text_address+0x292/0x2b0 [ 1952.029917][ T3025] ? is_bpf_text_address+0x26/0x2b0 [ 1952.035165][ T3025] panic+0xc5/0xd0 [ 1952.038946][ T3025] ? __pfx_panic+0x10/0x10 [ 1952.043396][ T3025] __warn+0x315/0x4f0 [ 1952.047398][ T3025] ? wbt_init_enable_default+0x18a/0x220 [ 1952.053047][ T3025] ? wbt_init_enable_default+0x18a/0x220 [ 1952.058694][ T3025] __report_bug+0x29a/0x540 [ 1952.063321][ T3025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.069434][ T3025] ? wbt_init_enable_default+0x18a/0x220 [ 1952.075168][ T3025] ? __pfx___report_bug+0x10/0x10 [ 1952.080272][ T3025] ? wbt_init_enable_default+0x18a/0x220 [ 1952.085941][ T3025] report_bug+0x16a/0x220 [ 1952.090289][ T3025] ? wbt_init_enable_default+0x18a/0x220 [ 1952.095942][ T3025] ? wbt_init_enable_default+0x18c/0x220 [ 1952.101590][ T3025] handle_bug+0x9c/0x200 [ 1952.105877][ T3025] exc_invalid_op+0x1a/0x50 [ 1952.110396][ T3025] asm_exc_invalid_op+0x1a/0x20 [ 1952.115259][ T3025] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 1952.121509][ T3025] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 fd c9 24 fd eb 18 e8 f6 c9 24 fd eb 0d e8 ef c9 24 fd 4c 89 ff e8 e7 fb 82 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 1952.141161][ T3025] RSP: 0018:ffffc9000523fa70 EFLAGS: 00010282 [ 1952.147252][ T3025] RAX: f9f3fe318c995100 RBX: 1ffff1100b069704 RCX: 0000000000000046 [ 1952.155229][ T3025] RDX: 0000000000000006 RSI: ffffffff8defa72d RDI: ffffffff8c27d100 [ 1952.163217][ T3025] RBP: dffffc0000000000 R08: ffffffff9011ccb7 R09: 1ffffffff2023996 [ 1952.171295][ T3025] R10: dffffc0000000000 R11: fffffbfff2023997 R12: ffff88805834b820 [ 1952.179317][ T3025] R13: 0000000000000000 R14: ffff888028c69000 R15: ffff88805834b800 [ 1952.187335][ T3025] blk_register_queue+0x382/0x430 [ 1952.192399][ T3025] __add_disk+0x677/0xd50 [ 1952.196754][ T3025] ? down_read+0x272/0x2e0 [ 1952.201193][ T3025] add_disk_fwnode+0xfb/0x480 [ 1952.205917][ T3025] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1952.211744][ T3025] loop_add+0x85e/0xb40 [ 1952.215926][ T3025] ? __pfx_loop_add+0x10/0x10 [ 1952.220654][ T3025] ? irqentry_exit+0x59e/0x620 [ 1952.225449][ T3025] ? rcu_is_watching+0x15/0xb0 [ 1952.230238][ T3025] loop_control_ioctl+0x2f8/0x5a0 [ 1952.235299][ T3025] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1952.240875][ T3025] ? security_file_ioctl+0xcf/0x2a0 [ 1952.246127][ T3025] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1952.251121][ T3025] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1952.256719][ T3025] __se_sys_ioctl+0xfc/0x170 [ 1952.261351][ T3025] do_syscall_64+0x14d/0xf80 [ 1952.265961][ T3025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.272039][ T3025] ? clear_bhb_loop+0x40/0x90 [ 1952.276727][ T3025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1952.282627][ T3025] RIP: 0033:0x7f8cbbd9c819 [ 1952.287080][ T3025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1952.306830][ T3025] RSP: 002b:00007f8cbcc62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1952.315283][ T3025] RAX: ffffffffffffffda RBX: 00007f8cbc016180 RCX: 00007f8cbbd9c819 [ 1952.323272][ T3025] RDX: 0000000000000000 RSI: 0000000000004c82 RDI: 0000000000000009 [ 1952.331276][ T3025] RBP: 00007f8cbbe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1952.339271][ T3025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1952.347254][ T3025] R13: 00007f8cbc016218 R14: 00007f8cbc016180 R15: 00007f8cbc13fa48 [ 1952.355254][ T3025] [ 1952.358907][ T3025] Kernel Offset: disabled [ 1952.363286][ T3025] Rebooting in 86400 seconds..