last executing test programs: 3m59.642913078s ago: executing program 2 (id=2353): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x6) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 3m59.562302302s ago: executing program 2 (id=2354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wg1\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x44, 0x2e, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x6, 0xffff}, {0xffff, 0xffe0}, {0xfff1, 0x10}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x621a}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r12, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3m59.350407998s ago: executing program 2 (id=2356): r0 = io_uring_setup(0x77bb, &(0x7f0000000140)={0x0, 0x5cd9, 0x2, 0x1, 0x21b}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000540)={&(0x7f0000004000)={[{&(0x7f0000000380)="169b087d0e82f43d57131c13d82218225f69d356db7fb9acf288ff657681afff646a7d6ab3d353b150074a0304a5652ef31f07b01cb64ed4342d073217225701d624022804e616a74f77a3650c6cc6243d71b41a15297f4d019b700edf48d37e2c4f92d06295fc157461f6c353e22ae10f3869b5b17be022", 0x78}, {&(0x7f0000000200)="8e1827afbc5e5d2ae894e85b4d68fb6d5f3b076811627d83024cab1c4e420dbbbe247bbdaf03d5c772f7e8fd12df1e838ab7b53578c7670008f8e63f", 0x3c, 0x1}, {&(0x7f0000000400)="ecf8b05a2085b7fc", 0x8, 0x2}, {&(0x7f0000002380)="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", 0x1000, 0x3}, {&(0x7f0000000440)="0a85dfcc8b9ac3569e4ba282a301724181ddbf1261e2f322b093deb8b69723fb5e9d24e950d2d419481a01dc98e95cf582f487c8e8135a", 0x37}, {&(0x7f0000000480)="dd30c889cdd335c7a3f99e295e035264198c0905fc6c8b2f52557c1149a2cc24516079c34167f92c962331a6970e5e6faf5da866ae3716d96bc85e30cbe19405dc9a6cc36e12addd659438ce41c063129321c0828bcf569b663e957a6c7ceae7dea09240b5070ee5daed3f6904685d1204143f3815346528c77a7aa1c7c1fc27f532c09e35ab1d9d9b13e1a92ef5c711", 0x90, 0x1}, {&(0x7f0000000600)="89da101f42c8e903170d296551511fb9e38c4e9d370e8f8d901de4bcbf6d03b8322fa96434d2cfe05a90824e0c8f3eb4bb4ae03d2516b967ce7451f1f79ba66ad316c4bf5f188c4fea1333194eb8570dd894f4b800be2cf9bd003c589ad422650874a60294849dd12f26c20f781f9c1b4cac9495420efec8ef0bb053bbfdeb7d21ecb278d5cd935fe6d9361f316a1a63f5830684f9c00a75f910b34c8b18", 0x9e, 0x1}, {&(0x7f00000006c0)="8431898e155ceeab66882c87663244d0a9e4f6291b924ac374e4835a64d37c63e7a6beab2057ca0553c1b56e88ca9f888f749bcfca3ee9e1b7b1546ba38948ca17da4cf3b39be1d332b9c0b4ce41d531e43cd2d671f0c0ccac53075cb154092b3246a367885eb8ca2ef0a58c9da0c31fc4", 0x71, 0x2}, {&(0x7f0000000740)="4550611bdda6d5b1616d8ee8084410dfeb132da00d89b5462ed1cd118e56362ba90130750d2a4e3d35a6c2c94257b0ae776b096e5e405453b5f35542555c3d178bb8c3a1f83bb4003e6cabec8fcf109eeb0138b7a91fb63a7594a1e2dcdb0136cca0c7edca5389ce07f2069f6e20235ff4f9b28ca6c1c9", 0x77, 0x1}]}, 0x9}, 0x1) (async) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902880003010990060904000000010100000a240105080000de"], 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = syz_io_uring_setup(0x147e, &(0x7f0000000080)={0x0, 0x1010b6, 0x80, 0x400002, 0x403ae}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x2, @random="c8feae7965a8", 'veth1_to_team\x00'}}, 0x80, 0x0}, 0x0, 0x20040000}) io_uring_enter(r7, 0x1ae0, 0x4, 0x48, 0x0, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x20) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=r1) (async, rerun: 64) r12 = fanotify_init(0x200, 0x0) (rerun: 64) fanotify_mark(r12, 0x121, 0x0, r11, 0x0) write$usbip_server(r10, &(0x7f0000000200)=ANY=[], 0x51) socket(0x400000000010, 0x3, 0x0) 3m59.278067787s ago: executing program 2 (id=2357): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee", 0x3}], 0x1) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040207fe056406200c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x610000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') close_range(r4, 0xffffffffffffffff, 0x0) 3m59.034865698s ago: executing program 2 (id=2358): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0x65c, &(0x7f00000002c0)={0x0, 0x4200002f, 0x10000, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m58.910599277s ago: executing program 2 (id=2359): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x101400, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x98, 0x70, 0x31, 0x8, 0x681, 0x10, 0xabe9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xaf, 0x7}}]}}]}}, 0x0) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x4048000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = dup(r1) ioctl$I2C_TENBIT(r4, 0x704, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r3, 0x80047437, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000040)={0x10201, 0x3c0, 0x3c0, 0x0}) openat$kvm(0x0, &(0x7f0000000000), 0x101400, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x98, 0x70, 0x31, 0x8, 0x681, 0x10, 0xabe9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xaf, 0x7}}]}}]}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x4048000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) dup(r1) (async) ioctl$I2C_TENBIT(r4, 0x704, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TIOCSSOFTCAR(r3, 0x80047437, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000040)={0x10201, 0x3c0, 0x3c0, 0x0}) (async) 3m58.650108505s ago: executing program 32 (id=2359): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x101400, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x98, 0x70, 0x31, 0x8, 0x681, 0x10, 0xabe9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xaf, 0x7}}]}}]}}, 0x0) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x4048000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = dup(r1) ioctl$I2C_TENBIT(r4, 0x704, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r3, 0x80047437, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000040)={0x10201, 0x3c0, 0x3c0, 0x0}) openat$kvm(0x0, &(0x7f0000000000), 0x101400, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x98, 0x70, 0x31, 0x8, 0x681, 0x10, 0xabe9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xaf, 0x7}}]}}]}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x4048000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) dup(r1) (async) ioctl$I2C_TENBIT(r4, 0x704, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TIOCSSOFTCAR(r3, 0x80047437, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000040)={0x10201, 0x3c0, 0x3c0, 0x0}) (async) 3m50.467449936s ago: executing program 5 (id=2399): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r2, 0x407, 0xc000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, 0x51}) syz_emit_ethernet(0x7e, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00483c0020010000000000000000000000000000ff0200000000002200000000000000012c0500000000000007180000000104bf07000000000000000000090000000000000007100000000102030104020000000000000000000000000000008eb576b92ff82491001d00005318c3b30c6f9a7c6c2232ca2ace1bcb27f9910fb4a9d8cc87e19313112163d7096fef5132011e6a2bca914356a6eb7b0d5bde23f4b60567ebffdc43db072208a9c442403e17c0ac3b789e198684bbd3e43cea37917e3089f735d2d3395087e579ade712e974ec0b20275fa4f595dfcea0dbe10827f40b353270de52e1f2f80e4da600ccf15a966d2cef6587000000"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a0000000400000008ed42be534bd65700000008fda7a34f1b17824c62be0d04bd1358b518cbc14eb670d9dd6d863ae2ce3410dbc55dcdf21a8614d9f15c36fa319fb88d3d3d2b91ca3202ca5b5714896b435636e9e85514cd3ace209943cca658888b8b096251baa07f2eb9c532575bf231d9939515d9e85a676230830620034bd2aa39d695ea9d188a32bf4d018e1c496ebe8fa8483cf9428d0f0a5f55ee8273", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r4], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES16, @ANYRES32=r5, @ANYRESOCT=r6], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) read$hiddev(r12, &(0x7f0000000600)=""/98, 0x62) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYRESHEX=r11, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000c80}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) r15 = openat$kvm(0x0, &(0x7f0000000080), 0x2200, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r16, &(0x7f0000c00000/0x400000)=nil) 3m48.906291183s ago: executing program 5 (id=2406): r0 = socket(0x28, 0x5, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x2b, 0x1, 0x100) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)) r3 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x22, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x20, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x68, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}}, 0x44000) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa000, 0x1da) 3m47.003965692s ago: executing program 5 (id=2411): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x6e2f, 0x11f9, 0xfff8}, 0x4c, [0x8, 0x8, 0xfffffff7, 0x7f, 0x5, 0x9, 0x7fffffff, 0x0, 0x46, 0x838, 0xffffff0c, 0x3, 0x101, 0x9, 0x2, 0x4, 0x3, 0x4, 0x3, 0x2, 0x0, 0x800, 0x6, 0x6, 0x5, 0x10001, 0x7, 0x4, 0x77, 0x8000, 0x7, 0xd, 0x401, 0x7, 0x8, 0xc687, 0x200, 0xff, 0x1, 0x0, 0xfffffe01, 0x0, 0x59e6, 0x101, 0x2, 0xdb, 0x1, 0xe, 0x9, 0xf, 0x4, 0x1, 0xffffffff, 0x800, 0x7f, 0x9, 0x6, 0x23c2, 0x0, 0xc10d, 0x7, 0x8, 0x2, 0x3], [0x2, 0xc, 0xff, 0x7, 0xa, 0x9, 0x1000, 0x100, 0x3, 0x6, 0x9, 0x2, 0x4, 0x7, 0x2c85, 0xf77, 0x60, 0xb, 0x1, 0x8, 0x71e4, 0x1, 0x10000, 0x3, 0x9f3, 0x800, 0x0, 0xe842, 0xff6, 0xca, 0x9, 0x7, 0x7, 0x6, 0x9, 0x6, 0xc7, 0x2ff, 0xf, 0x1, 0x550, 0x2, 0x3, 0x8, 0x80000001, 0x0, 0x3d, 0x13d, 0x101, 0x9, 0x10001, 0x9f, 0xe2d9, 0x783, 0x5, 0x0, 0x4, 0x8, 0x3460, 0xffff, 0x8a42, 0x4000, 0x100, 0x1], [0x62e2adfb, 0x9f57, 0x4, 0x3, 0x9e, 0x8, 0x1, 0xfffffff7, 0x1, 0x2, 0x4, 0x4, 0x6, 0x4800000, 0x0, 0x9, 0x7, 0x9, 0x5, 0x5, 0x1, 0x7, 0xffff8000, 0x8, 0x3, 0x6, 0x10001, 0xfff, 0x0, 0x8, 0xffff2f9e, 0x9, 0x6, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0x3, 0x690bd85f, 0x7, 0x3, 0x9, 0x200, 0xb3, 0xcf, 0x2, 0x6, 0x0, 0x7fff, 0xc8, 0x8, 0x2, 0x5, 0x100, 0x7ff, 0x2, 0x5, 0x6, 0x4, 0x5, 0xa0, 0x1, 0x7825], [0x3, 0x0, 0x4, 0x6, 0x2, 0xf, 0x5, 0xfffffffd, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x9, 0x7fffffff, 0x3, 0x2, 0x7, 0x9, 0x5, 0x5, 0x2, 0xffffff7f, 0x0, 0x1, 0x5, 0x8, 0xc6d9, 0x631, 0x200, 0x4, 0x1, 0x4, 0x5, 0xe, 0xffff, 0x5, 0x7ff, 0x6, 0x10, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x3, 0x10000, 0x9, 0x2, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8001, 0x0, 0x5, 0xb9, 0xfff, 0x400, 0x22, 0x2, 0x75, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) restart_syscall() (async) restart_syscall() r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) (async) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) 3m45.588492425s ago: executing program 5 (id=2421): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x8, 0x0, 0x7, 0xdb51, 0x8001, 0x8, 0x1ff, 0x2, 0x0, 0xa, 0x1e, 0x18, 0x7, 0x1d0fa844, 0xf1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x8, 0x0, 0x7, 0xdb51, 0x8001, 0x8, 0x1ff, 0x2, 0x0, 0xa, 0x1e, 0x18, 0x7, 0x1d0fa844, 0xf1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async) pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0xffffffffffffffff, 0x0, 0x80}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0xffffffffffffffff, 0x0, 0x80}}}, 0xb8}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) (async) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) (async) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000580)={'gretap0\x00', r5, 0x1, 0x20, 0x2, 0x9, {{0x1f, 0x4, 0x2, 0x3f, 0x7c, 0x68, 0x0, 0x4, 0x6, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0xd1, 0x3, 0x2, [{@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}]}, @cipso={0x86, 0x54, 0x0, [{0x6, 0xd, "bf052c9f730360d98800ab"}, {0x2, 0x11, "61146c184b46000010a530dd1704ed"}, {0x5, 0x10, "be18413a4fe0c74dfb3d1987776f"}, {0x0, 0x11, "a9c4084a0d37149dc0abce13bd18ad"}, {0x7, 0xf, "203382a138813cd42edd6f8292"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r6}], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, &(0x7f0000000340), 0x0, 0x4b9aab4a97224906, '\x00', r9, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xb, 0x7, 0x80}, 0x10, 0xffffffffffffffff, r6, 0x8, &(0x7f0000000680)=[r0], &(0x7f00000006c0)=[{0x1, 0x1, 0x5, 0x6}, {0x2, 0x4, 0xb, 0x6}, {0x0, 0x3, 0xa, 0x7}, {0x5, 0x5, 0x8, 0x8}, {0x1, 0x2, 0x3, 0x2}, {0x3, 0x3, 0x2, 0x5}, {0x2, 0x1, 0x7, 0x4}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x80}, 0x94) 3m44.862866746s ago: executing program 5 (id=2426): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xc, 0xfe, 0x8, 0x9, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_x_sec_ctx={0x7, 0x18, 0x2, 0x3, 0x2f, "cdb54e226937f39b40bb7895c8a18a8308cb43f6661dc5ca75795413cb9a3f122849eb142dec179110f658a49bf35c"}]}, 0x48}}, 0x820) 3m44.683439243s ago: executing program 5 (id=2428): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) socket$inet(0xa, 0x5, 0x0) (async) r3 = socket$inet(0xa, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1], 0x1, 0x400}) listen(r3, 0x1) (async) listen(r3, 0x1) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) (async) listen(r5, 0x8) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) (async) listen(r6, 0x8) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) 3m44.018499852s ago: executing program 33 (id=2428): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) socket$inet(0xa, 0x5, 0x0) (async) r3 = socket$inet(0xa, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1], 0x1, 0x400}) listen(r3, 0x1) (async) listen(r3, 0x1) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) (async) listen(r5, 0x8) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) (async) listen(r6, 0x8) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) 3m7.788552425s ago: executing program 3 (id=2611): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x0, 0x0, 0x1}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x6}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000000)=0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 3m7.527513872s ago: executing program 3 (id=2612): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0d4, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 3m7.330688773s ago: executing program 3 (id=2613): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x25, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20048080) prlimit64(0x0, 0x4350ef72700bc7e4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) listxattr(0x0, &(0x7f0000000640)=""/194, 0xc2) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100", @ANYRES8], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000180a03000000000000000000020000020c00038008000040000000000900020073797a30000000000900010073797a3000000000140000001100010000000000000000000300000ad187585c219febe141e9c31a9e4862c4decb483affe15ceb6305b0db7dac63e45ea53885"], 0x60}}, 0x20008040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) eventfd(0x37724106) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, 0x0) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000000)={0x1}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4008000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x97fb9274d915386d}) socket$nl_route(0x10, 0x3, 0x0) 3m5.598776788s ago: executing program 3 (id=2623): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x3c}, 0x1, 0x11, 0x0, 0x4000011}, 0x4000) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) pselect6(0x40, &(0x7f0000002a80)={0x7, 0x10000, 0x7, 0x5, 0x1, 0x8, 0x3, 0xfffffffffffffffc}, &(0x7f0000002ac0)={0x5, 0x7, 0x10000, 0x5, 0xff, 0x3, 0xdd, 0x2}, &(0x7f0000002b00)={0x9, 0xfffffffffffffff9, 0x10, 0x9, 0x4, 0x0, 0x2, 0x2}, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x8e, 0x58, 0x54, 0x8, 0x12d1, 0x3f03, 0xbc2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x10, 0x20, 0x8, [{{0x9, 0x4, 0x30, 0x7, 0x1, 0xff, 0x2, 0x6d, 0x4, [], [{{0x9, 0x5, 0xa, 0x3, 0x200, 0xd, 0x6, 0x5}}]}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc6, &(0x7f0000000340)=ANY=[@ANYBLOB="c603450c9271f24786b8c99f0fb473094c38311e009b6605e2deca54d5d38a14d9f916592cb9e028cba6c836cf514959dac3a1ca9b727a03bc51d3a0fff70fc902a4e0e6affc43bd27cdda257e2d330194f6be827bda4563891f0d8e778a1861adacc458b7a5d98723320e1fc1aeeb71be1cf6e3af9ca4443ba1d9fe5f1ff937f74dd6184aad21090b57364785ebf553ea56ce5a02f46cb9fc3efc742e2875c09de0fbdf50dbc5bce00c8ac2ca70e12f9d16e4f17b7740cc594de64c7fbbf38f430e2b000000"]}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, 0x0, 0x0) sched_yield() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x3c}, 0x1, 0x11, 0x0, 0x4000011}, 0x4000) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) (async) pselect6(0x40, &(0x7f0000002a80)={0x7, 0x10000, 0x7, 0x5, 0x1, 0x8, 0x3, 0xfffffffffffffffc}, &(0x7f0000002ac0)={0x5, 0x7, 0x10000, 0x5, 0xff, 0x3, 0xdd, 0x2}, &(0x7f0000002b00)={0x9, 0xfffffffffffffff9, 0x10, 0x9, 0x4, 0x0, 0x2, 0x2}, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x8e, 0x58, 0x54, 0x8, 0x12d1, 0x3f03, 0xbc2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x10, 0x20, 0x8, [{{0x9, 0x4, 0x30, 0x7, 0x1, 0xff, 0x2, 0x6d, 0x4, [], [{{0x9, 0x5, 0xa, 0x3, 0x200, 0xd, 0x6, 0x5}}]}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc6, &(0x7f0000000340)=ANY=[@ANYBLOB="c603450c9271f24786b8c99f0fb473094c38311e009b6605e2deca54d5d38a14d9f916592cb9e028cba6c836cf514959dac3a1ca9b727a03bc51d3a0fff70fc902a4e0e6affc43bd27cdda257e2d330194f6be827bda4563891f0d8e778a1861adacc458b7a5d98723320e1fc1aeeb71be1cf6e3af9ca4443ba1d9fe5f1ff937f74dd6184aad21090b57364785ebf553ea56ce5a02f46cb9fc3efc742e2875c09de0fbdf50dbc5bce00c8ac2ca70e12f9d16e4f17b7740cc594de64c7fbbf38f430e2b000000"]}]}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, 0x0, 0x0) (async) sched_yield() (async) 3m4.576405578s ago: executing program 3 (id=2630): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) (async, rerun: 64) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) (async, rerun: 64) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="93c5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xff, 0x0, 0x60}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x81, 0x0, 0x7}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0xe, 0x5, 0x7, 0x10, 0xff}, 0x13e, &(0x7f0000000580)={0x5, 0xf, 0x13e, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x80, 0x5, 0x8, 0xf, 0x9d, [0xc0c0, 0xc0, 0x9f30, 0x3f00, 0x3fff]}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x8, 0xf00f, 0x1, [0x3f00, 0x3f00, 0xd9eeb38e83b9d7f9, 0xc00f, 0xff00, 0x3f00]}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x80, 0xff0f, 0xc, [0xc00f, 0xf, 0x0, 0x3fcf, 0x3f00]}, @generic={0xb2, 0x10, 0x1, "1cfeb8579d98f3ec78a85732d081f91010896f7d9ea9c6df562e36b02a870f5609d08a68eb7a6a5edcd1d4cfc5b7e04ea82a30ff5d916f2f93a4c183dd33f29414a91be06a80d60818486903b472a734bc4b21b6aee4e2553681da509aea028573ad5b2155a87be71732cc26f310d544aff37d170c715ee2d0c15ef4fa207f3693e2259d061c412b7e59d369924cf130287c1a43458fc608c4de04f1a1f132d836f16fb7541ea3de93e0155d704fcb"}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0xde1, 0xf0f, 0x0, [0x0, 0xf, 0xc0, 0xc0, 0x3f0f]}]}, 0x4, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x411}}, {0x61, &(0x7f0000000700)=@string={0x61, 0x3, "2aca74e348ed3bdad8d5fad65512b93f2d13129a1dbef8dad6d2b5e0afb25154680857eb459959f4d9d7c65c24564ea856d38cb44931684aa76d1b12a6a43373c429637ab1332849d2609d6c625934793cc5d5fe5104002dccf8267b9af2a0"}}, {0x74, &(0x7f0000000780)=@string={0x74, 0x3, "1836651d965cec346b11016b1769f2c7fd2d80664a3d0fadc642237e4342f6e1001cecef32c89538e97b1c12bccbf10ad9d0b0fdaddd4bf4276f8777cf46c0ce486aa54b992ae49adbdb2b9090920f497768db0e1e20b34f932229b0df5bc7eeca912bf0a715745728aaca80f7917438e9f9"}}, {0x79, &(0x7f0000000800)=@string={0x79, 0x3, "dceb623b39f9ae3f6ddcf2ec70b62aae3948f838f2a90743ffdb5d044e0fdc44de1b123e7d2dfc701e5997ca45f870aa444ac8aeef67f4eb122daaa71449afbbdbc9509443ee13a34300b8340fa63f8f6e367cebc36fa46ca90fe7dd52e12dbbda314dc571ed2b85110e52c3b75d99c302b2877d540905"}}]}) (async) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x27d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0x8, 0xe, 0x1, {0x22, 0x61c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0x7, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x8e126244b084b501, 0x0, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xfb, 0x3, 0xdc, 0x40, 0x3}, 0x90, &(0x7f00000000c0)={0x5, 0xf, 0x90, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "0c25398dd9f6e97b9194f256e09f2b4d"}, @generic={0x70, 0x10, 0x1, "2c1d1e4d1e1609c0c61fc618cf395f3968692f5170ea59538247154a903c326d9dd758be47f766f9749b1ab3e3490d6b85b641fc7b96a673f5c84f817df525f985d337c664b3fe6c722424cd1292f442747cba625957ff0c15b8b28285a6891a5185052456fa3fb201393448f2"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x0, 0x9}]}, 0x4, [{0x11, &(0x7f0000000180)=@string={0x11, 0x3, "227f0f609d341dffbd71a289760fd9"}}, {0xcc, &(0x7f00000001c0)=ANY=[@ANYBLOB="cc038d3094d3dfbc339d236170be43cf894f12cb9b5606379d439c24f49e48c3b9631be593e1197bd43b385694defbc45fdbc3d03537ba2436a853fb72606479391b19ef8c47bc62922be97c7417a2f0fe2a8ca55f4f9032e2b2a86f07c6e39c3bd75b6eb8b267009da7f965ba0edc6aa38947de6164c73218f5b432400bdb2bcfcd16f96f6e73b74338f6b30aeaa33e9862fcb96caee3069284eddb4c3d10f1737b37a6b4fd6e73fca68c687917cb4c163cab9714246674052ed70d961b27c27b077878bea8b18b70c63b99"]}, {0xd9, &(0x7f00000002c0)=@string={0xd9, 0x3, "6c71d2bc6472a49699ea1bd2f81697314e43d999e12289f525b0bd7800136fdd6d0a46e31f28bdc3991fb990441b83964cad6eb9ebee39f37f63b61fe38ef336cd770e80fa2c5a4aeb1e049f0796b098ff775b5f8bf856818ecb0304be68feda2dbe21c2bd4e8e679139c9330b3a338bd1cb434523028766af5f1ef9fb3fd6573ae9a81d2ab1c5d11098337b1415e258b32fdfdaf7fe786f2c55ca43ca04582cb687a02cec5f42dec4071202af2bea68193a6a7ff8f72b809fa509df0ff67b15fb614fe7ce11ae8a3c331e9c6dfc8a76d5df32d1ae8be1"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x444}}]}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000440)={0x40, 0x17, 0x4, "3ec019dd"}, 0x0, 0x0}) 3m4.166671997s ago: executing program 3 (id=2634): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3m3.672719446s ago: executing program 34 (id=2634): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 7.067909362s ago: executing program 6 (id=3293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff}, {0x0, 0xc}}}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, @in6={0xa, 0x4e23, 0x0, @loopback, 0xfe4}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}], 0x58) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0x100}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}, {{&(0x7f0000000400), 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)=""/141}], 0x0, &(0x7f0000000740)=""/163}, 0xac10}], 0x2, 0x10101, 0x0) syz_usb_connect(0x0, 0x5b, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109024900020000000009047f00022513bf000a240100000002010205240400001d050000000000000007250100000000072501000000000905000000000000000904", @ANYRES32], 0x0) 5.52277325s ago: executing program 6 (id=3304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000100)={0x20, r3, 0xffffff96, 0x0, 0x0}) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x503, 0x0, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 5.338687273s ago: executing program 0 (id=3305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) socket$netlink(0x10, 0x3, 0x5) 5.042898101s ago: executing program 6 (id=3307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f687372000000000800030003000000180003801400038010000180040003000500020076"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) (fail_nth: 1) 4.667921909s ago: executing program 6 (id=3308): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x6, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0xffffffff, 0x0, {0x5, 0x0, 0x7, 0x80000001, 0x26, 0xffffffffffffff0c, 0x2, 0x35741060, 0x9, 0x8000, 0x9ea, 0xffffffffffffffff, 0xee01, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x4, {0x3, 0x4, 0x0, {0x3, 0x8000000000000000, 0x3, 0x2, 0x8, 0x7, 0x2, 0xfffffff9, 0x3, 0x8000, 0x7, 0x0, 0xffffffffffffffff, 0x9, 0x408}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500", 0x1e}], 0x1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e0010300052406000005240000000d240f"], 0x0) 4.665679362s ago: executing program 4 (id=3309): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="100005000000fddbdf25bb7a40d2b1eff307ceffff07"], 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4080) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x21) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000240)=ANY=[], 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.487097101s ago: executing program 0 (id=3310): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xfd, 0x4, &(0x7f0000000400)={0x1e, "810556c721393f4084cc9efcdbe76f42b91f7abe35df2a1f63ef8df4079e040b00"}}) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x84a2adb8d03e41c4, 0x11, {0x11, 0x6, "dafd82ec0a56c8006524276f5221ab"}}, &(0x7f0000000080)={0x0, 0x3, 0x19, @string={0x19, 0x3, "93668ff2e5ad84fa87ed0c65ca48b34894e340ce5c18a2"}}}, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x20, 0x17, 0xc7, "34788675e52941bd314e54a30c401e9db7435ee5d8550cac092ee54e5caa0b7dfa2984e11dddedd3cb53fdd963ad052932b62916bc919aa9101957bfdd5913c0b480532dc7a184313575fcd6ec19bde79d9a3188d93e1aa22129aef5e5ec2177874dc51d49089663f1857d79fac67e8bb654a7fda205e7f4cdae05513f7f8a85fc8d4199c90702bbd79b80173ec1d7ad4609e57ae5fec48195338651f9d140d2af86110d6b20e154a563533e520b0b2425b50333de6a3beb99de37074c8cf2eb65c3046c01c7bb"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x20da3332}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0xd1f}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "21b56afad0efc6e767a355f16d18ddd29a7be97e5448be2b20327ab4a8ee36121ed76ea036a4702cebc15409451cf6"}}) 4.194735932s ago: executing program 7 (id=3311): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0005000000da7b728b635a58ca582e0d5300ffdbdf2502000000060801004e2400009092e8f53d9476487a50704213bd2c7404c109d33576f741a12763493bb7e9fc328345e20bd94c04877ab8c67755945d95860106d0f8634aa7fa3a276f42e0e5b19d79bcf9f2b2ab030ad291b173236cd2981b"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="4886947ff21ee31eeb3f4351d85a54dd95f1d8d9ee8b53d7e2e1d1e9e4b6e2ed4a4e45033304cda1f99d63ea310d38260f5a24957bdc84db9cd5bd52e9d961fa5369c4d4360acc3a7d01945c9937e3c01d5d9080d886f7b8af56bfccc7c90ab8a8a9d1db1a8c243b75cd1c384bf362cf450d3300", 0x74) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = syz_open_procfs(0x0, 0x0) fchdir(r5) sendmmsg$unix(r4, &(0x7f0000000c40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0x187142f2) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x24004090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'team_slave_1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="fdff0001", @ANYRES16=r8, @ANYBLOB="050000000000fbdbdf250600000008000300", @ANYRES32=r13, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r14 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000088f0e0300000000000001090224000100007000090400000103000000092100000078220200091d81030000000000"], 0x0) syz_usb_control_io$hid(r14, 0x0, 0x0) syz_usb_control_io(r14, &(0x7f00000002c0)={0x2c, &(0x7f0000002140)=ANY=[@ANYBLOB='@#\f\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r12, @ANYRES32=r1, @ANYBLOB="000000002006000000000200", @ANYRES32=r2, @ANYBLOB="1c0012802400010062726964676500000cf27d46e1b55fb88438313120c742c363cc5f1e09b13d603760", @ANYRES8], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.788489622s ago: executing program 4 (id=3313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') fchdir(r3) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x2c, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xa}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7a}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64043}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x4, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x4, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x1, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x0, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x4, 0xd7, 0x0, 0x9, 0x4, 0x4, 0x6, 0xe8, 0x69, 0x5, 0x8, 0x0, 0x856c, 0x2, 0xd4, 0x4, 0x9, 0x0, '\x00', 0x9, 0xffffffffffff8001}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e0100000905", @ANYRES64], 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f00000003c0)) 3.586448881s ago: executing program 1 (id=3314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0xf, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000890}, 0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x41) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000280)={0x6, 0x4, {}, {0xee01}, 0x0, 0x3}) sendmsg$nl_xfrm(r1, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)=@polexpire={0x37c, 0x1b, 0x400, 0x70bd2b, 0x25dfdbff, {{{@in=@private=0xa010100, @in=@rand_addr=0x64010101, 0x4e23, 0x100, 0x4e24, 0xb, 0xa, 0x20, 0x20, 0x84, 0x0, r2}, {0x21, 0x7fff, 0x1, 0x2, 0x0, 0x1, 0x4, 0x5}, {0xa, 0x3ff, 0x8000000000000000, 0x3}, 0x401, 0x6e6bb1, 0x1, 0x1, 0x3, 0x2}, 0x9}, [@lifetime_val={0x24, 0x9, {0x9f, 0x0, 0x3, 0x7c6}}, @algo_auth={0xb1, 0x1, {{'sm3-ce\x00'}, 0x348, "53364d76a569d6c1bbd98547db5299120672b4d2b0e1df51829f60e09e7d856cd296715862fc5e7dd267bef42ef3d2d4153f4afadd9629dc5fc5c9e5af0d159d0104ebcf0f7160dcbf11d893cb5969b18d5f0dff4b779c6f0e1d4973307c7851f12e984ed97ca09cae"}}, @lastused={0xc, 0xf, 0x2}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd2d, 0x5}}, @sec_ctx={0xea, 0x8, {0xe6, 0x8, 0x1, 0x91, 0xde, "3c8f2b7eb7f167d499ecd85617a3edc564550b0fbaebcbff958f6c7d9b64960c9b1c8f2bb20c7933e2117409519a13a8d377acf1fae932c7baaccc67dfaa23e9608d12eaa05d13d0c1c60b46c65ff9b6fe926ca7f5b77638cb10fa61dfdc2c644bc8fb690747435345656fb8a4e9da402f80ce443385c0b99842777417030b511d03bc891c245d0745438e895bee6faf706a00a474f01fbf60db8233a2e757bd332130eddb69e38bc28f3a9be6aacd835652660b229da4b80afa68387746d5de2401e34aa384cb134941c87554a51685ac6b3600a2b578e8c513c11973b6"}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}, @sec_ctx={0xaf, 0x8, {0xab, 0x8, 0x0, 0x8, 0xa3, "e8b03ed55f490d1cae4282600971ce91b317079e4393a58d464009b8593348aecaff7fed316eb817a3c171355e93425f91f218004ae9cbbbee4819ffefaa4a91b953c704a1169586ec06d63a6baa369e41454e0d61deb652a3b104edee30db5f8a5b588b649d9aa59f24c089b022f44b303c009d8ee23ee5dd2e0952b8b95f8a850954b40709c2ba50d67a6567bfda4deadb92ada224328e0963b050eefc84d2544247"}}]}, 0x37c}}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r4) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xab0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x20000084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffff0000, 0x4a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a80)={0x0, @empty, @dev}, &(0x7f0000000ac0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000b80)={'ip6_vti0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x29, 0x51, 0xd, 0x9, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x40, 0x8000, 0xc}}) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000bc0)={@rand_addr, 0x0}, &(0x7f0000000c00)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={r1, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0xc, 0x7, 0x19, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7, 0x2, 0x1}}) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000e40)={@dev, 0x0}, &(0x7f0000000e80)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000ec0)={@mcast2, 0x0}, &(0x7f0000000f00)=0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000f40)={0x0, @private, @private}, &(0x7f0000000f80)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001040)={r1, 0x58, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(r4, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000010c0)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000001100)={@dev, 0x0}, &(0x7f0000001140)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001180)={'veth1_macvtap\x00', 0x0}) getpeername$packet(r4, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000012c0)={'ip6gre0\x00', &(0x7f0000001240)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0xf9, 0x3, 0x50, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x8000, 0x0, 0xdc, 0xfffffffe}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000001bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001300)={0x878, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf1ff886}}}]}}, {{0x8, 0x1, r12}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}]}}, {{0x8, 0x1, r13}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r16}}}]}}, {{0x8}, {0x204, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xfffd, 0x0, 0x9, 0x7}, {0x8001, 0x8, 0x3, 0x2}, {0xb0a8, 0x9, 0x8, 0xffffffff}, {0xce7, 0x9, 0x8, 0x1}, {0xa, 0x40, 0x5, 0x8d}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x2, 0xe8, 0x40cd}, {0x0, 0x11, 0x9, 0x3}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6789ea4d}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r23}}}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x40090}, 0x40000) 3.496724967s ago: executing program 1 (id=3315): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8898, @mcast2, 0x7}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121300, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000000)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r8, 0x40047452, &(0x7f0000000300)=0x5) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r9, 0x29, 0x21, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES16=r3, @ANYRESDEC=r7], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a58000000060a010402000000000000000a0000010900010073797a31000000002c000480280001800a00010072616e67650000001800028004000380080002400000000008000140000000000900020073797a3200000000140000001100010000000000000000000200000a"], 0x80}}, 0x24000000) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000000c0)=0x2000000, 0x4) 3.166842792s ago: executing program 6 (id=3316): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f00000010c0)=[{r1, 0x2}], 0x1, 0x0, 0x0, 0x0) close(0x3) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r2, 0x406, r2) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0) 2.986590378s ago: executing program 1 (id=3317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000c4000007008209", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x800}}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x5d, 0x0, 0x48, 0x4}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x3}, @restrict={0xb}, @restrict={0x9, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x0, 0x2e, 0x30, 0x5f]}}, &(0x7f00000005c0)=""/227, 0x72, 0xe3, 0x1, 0x6c6}, 0x28) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/163, 0x98}, {&(0x7f00000004c0)=""/191, 0xbd}, {&(0x7f00000001c0)=""/51}, {&(0x7f0000000200)=""/145}, {&(0x7f00000002c0)=""/219}], 0x1, 0x2000, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8) fchdir(r7) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x0, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x20000, 0xda, &(0x7f00000004c0)=""/218, 0x40f00, 0x1, '\x00', r2, @cgroup_skb=0x1, r3, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x4, 0x2, 0x7}, 0x10, 0x0, r4, 0x6, &(0x7f00000007c0)=[r5, r7, 0x1, r8, 0xffffffffffffffff], &(0x7f0000000800)=[{0x4, 0x2, 0xe, 0xc}, {0x4, 0x3, 0x9, 0x7}, {0x2, 0x3, 0xb}, {0x0, 0x4, 0xd, 0x2}, {0x0, 0x3, 0xb, 0x8}, {0x1, 0x5, 0x5, 0x1}], 0x10, 0x1}, 0x94) syz_io_uring_setup(0x2841, &(0x7f0000000240)={0x0, 0x2972, 0x100, 0x40000, 0x1cc}, &(0x7f0000000040), &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r9, 0x3, 0x0) getdents64(r9, &(0x7f0000003440)=""/92, 0x5c) 2.800724348s ago: executing program 1 (id=3318): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r4, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f0000080000000000000000000000000000000400000000000000000000000900000000000000000000000000000002000100030000000000000008001f0004000000480003006465666c61"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r5 = socket$inet6(0xa, 0x3, 0x4) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r6, 0x0, &(0x7f0000000140)) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d5, 0x32}, 0x2, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000380)=""/100, &(0x7f00000001c0)=0x64) connect$inet6(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x10) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/10, 0xa}, 0x40000010) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) 2.714869394s ago: executing program 0 (id=3319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f687372000000000800030003000000180003801400038010000180040003000500020076"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) (fail_nth: 2) 2.414629988s ago: executing program 0 (id=3320): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'lc\x00', 0xd, 0xa, 0x45}, {@remote, 0x4e20, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, 0x0, 0x0) 2.368731626s ago: executing program 0 (id=3321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f687372000000000800030003000000180003801400038010000180040003000500020076"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 2.318410039s ago: executing program 0 (id=3322): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast2}], 0x20) close(r0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000180)={0x80, 0x1, 'client0\x00', 0x1, "896c81dd59ff28d2", "e5dbc741536b0e2fbb12e9338ec8dcb3e07c903fc30e8a11d477e3fb04eb2f74", 0x3, 0x4}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_usb_connect$uac1(0x6, 0x97, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x3, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa1, 0x5}, [@extension_unit={0xb, 0x24, 0x8, 0x6, 0x7, 0x5, "7d644c82"}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x5, 0x2, [0x8, 0x5], 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x7, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xd, 0x6, 0x2, {0x7, 0x25, 0x1, 0x1, 0x7, 0xd97}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x5, 'z'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x9, 0x5, {0x7, 0x25, 0x1, 0x0, 0xff, 0x1}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x40, 0x8, 0x8, 0x10, 0x44}, 0xaa, &(0x7f0000000180)={0x5, 0xf, 0xaa, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x3, 0xa, 0xecab, 0x7}, @generic={0x9a, 0x10, 0xb, "b0b3be89c9f0f237761cf03a384b01e952870cd455bd35f95ec4e7f2f6ecd339ae8c2285222e74e9dc8853858eeb14421f06599d2a8f341d5ebef8d6138b78b657e58143d101bd8243bfd8a3455457069d178ae4c1780f2d8206bfdbdcac8d6ed152753fb3f23bc4ed8efcdcf70bc3ea02741893da9a9c5914da90a23560c7dd9339bed4797ee535ece913a2b8d4f37a684c7d5a0059fb"}]}, 0x5, [{0x6b, &(0x7f0000000240)=@string={0x6b, 0x3, "212d2be371ea2ee36775ed21b4cd14d98e83159fa6d33e309e4916c99417211429850dc2ab031be2c01e71f01f0597a8233b1272215b26d3726d6593657335e80d50216ba0f0fbddb2f9ee6647709303bf18e3649505aab8aa1c7e440fff10e23e2ca8a610153f57d0"}}, {0xe9, &(0x7f0000000580)=@string={0xe9, 0x3, "37f84bd5e22826976cac36bf365cc1870f75a359fae3effd89a37aa98b0171c3e1f4062b13692336ed264eae583146226a540327804c45527f618cd6adbee80d9ba7721ce67d5b869ee36e224f650a046fb7338078e50cca4c15ee287a193e1f7076b7dd02673d3daaba6b911c6f05fe12bcb566dbfdae1610570da837f3d43d945f1bce100bc977e0c1b4b33e6ea421d22a7e5de11caf0f71bd72f1c4b8b6b9765c3c8bd9a49f5777968f7632be635b118ab961c06e269b803bfeb7955e741a717c13c8005e3154697627aa4c7d5b9d9941830ffb5e73d4b2eaa368fa75a7339c174490026569"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x4ff}}, {0x7d, &(0x7f00000006c0)=@string={0x7d, 0x3, "3f2997015dfc2ccce3e2d34bcef20e37b5b17e5008419bf68eb3b83a1bb4f38ad4ce43dfcf431f3f26bd729fae578c021d23bae27ddd17d8a4d97d4a0943358c7375229280da19db76643f252fe84badda7874fab650213f2771a04780089a87b0feb6db5aea2e0f4527ad5e1486dc26f4a9f07e82623793d6206b"}}, {0xce, &(0x7f0000000740)=@string={0xce, 0x3, "0307636ca3b03b15c96030dd9905064b8d52984aa17a1e1db570ae819cdc555293356b73a646c763aef82492b570c0b163fa7570d3b5e7b9c799557eeb00f23bbd785138e9184775f1cdb64982b1f7abf157ee81c425aa719bb413159854ef724eab14b2738fdef16a133defa68f826944b13cfa580276c7bf520deafc644b27f4035b3972bbe6d75301c385dc939f69c7f318b81b17fda2ff0a14801c6298862658cada045ecaec9f117073d7ac0bd3f9217df17ef142647a66f930df0541bdff3706300b04e97d08d3818c"}}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006000806"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_usb_control_io$uac1(r4, &(0x7f0000000a40)={0x14, &(0x7f00000008c0)={0x20, 0x24, 0xce, {0xce, 0x10, "74f84bbdbdb7a1a35d61377e7e414c91d2bad27ffbd4990380829bbc7be7e3bbd60deb9b9803ea62715fc13650caf7adcf3658f80e8f800cd37203f0aedf35cb4b28b6e156bfcbeebf709d16fd852f5bc462ed3aa7875a24a24e01916646e21b7ac5211b2df6e8b8c1b105dc887df8043f12ab332f2e3a50568520ac384766f1b7f6beae0d545dc2d3c182f2c1bb4d8c282d07aec7e2c37f5855d22bc8f02e1433a33b6f3099db74b286387dc4feafb51a049d5040e712175a3d4eea9139b89af7fa7b51ac7a788a3d99233a"}}, &(0x7f00000009c0)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "b2f8a36c92db628f1e5515381ac05407a96d3aa48ceddd6416176409622b55ac755a177c9733716dbc5d2539270a2c324ecbcfb6789237a2b15301597bdd4eb2abadfc3c0dbfe23e53efeb37b95d00845c8ea0c3dba3dc23c0a8592e1b953b47d82b0e567a80c77949039ab49b"}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a80)={0x0, 0x10, 0x89, "afe96830d30e1e17f8032e5650761c10ff970eb7440537f54b13ebf083e24553b193293ec55b68f7a0b9cb0bac784bf05488264833db6c7b421a0fa0d3de766620e55189d24c6c3d454856f8aecf7be0883231745e98a2debb6272216e298ae2074df6be7e61efc6979db1df034ec22e791f8dfcb0fea2f0d77cef882a005a8d4c0a043414ebaf46e9"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000b80)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, "ed"}, &(0x7f0000000c00)={0x20, 0x82, 0x3, "e022b9"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, "04deaa"}, &(0x7f0000000c80)={0x20, 0x84, 0x4, "a934fd8f"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "244f06"}}) syz_usb_control_io$uac1(r3, 0x0, 0x0) memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x95RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0fx\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7', 0x1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000dc0)=0x8) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 1.754048778s ago: executing program 1 (id=3323): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x6}, 0x76e0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0xa, {0x28}, {}, @result={0x0, 0x4}}], 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.117902941s ago: executing program 7 (id=3324): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x2, 0x80, 0x9, 0x2, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 971.780665ms ago: executing program 7 (id=3325): r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a05000000000000000000070000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f"], 0xc0}}, 0x4000000) (async, rerun: 32) unshare(0x2040400) (rerun: 32) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x0, {}, 0x2}, 0x0) (async, rerun: 32) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x0, 0x2, 0x10000000}}) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000140)=0x4) (async, rerun: 32) shutdown(r7, 0x0) (async, rerun: 32) splice(r6, 0x0, r6, 0x0, 0x10000000fea8, 0xa) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000040)) (async) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001200add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) splice(r5, &(0x7f0000000080)=0x8000000000000000, r7, &(0x7f0000000100)=0x3, 0x7, 0x9) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) 826.424751ms ago: executing program 1 (id=3326): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xff, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) close(r1) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x5) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r5, &(0x7f00000001c0)='\\', 0x1) gettid() r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x14, &(0x7f0000000080), 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000680)="7ba238396915b2a92cd22da81359cdd936b19fe775ae2a096c2a906ec55808d3b679e7e8e782689110e95971e3c7a34cea71f7b79fd0e7aedd955dba811d40fa1fce5bda4d6b5ce0190cbb8176232b1ab917871ab4caf64bc56fa353f5faf0c7cfb533be45f56cb4d555c1dde7db8f3d55b8d7f2b5c026bdfd975771f38dc0499dda4ff7982cb9b5b3a4b5e44f00a23c0efdbe5d6e191415c3d5960de987f63a9b8a699db55bbc2941afafe5076906fae9896cd6ab1cade764b8d43ffaf332f1", &(0x7f0000000740)="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"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0xf2ffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'bridge_slave_0\x00', {0x2}, 0xff}) syz_usb_connect$uac1(0x5, 0xe1, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x7, 0x50, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x300, 0x1, 0x4, 0x7}, @mixer_unit={0x8, 0x24, 0x4, 0x5, 0x1, "ebeccf"}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0xb54d, 0x2f, "aa79"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x304, 0x3, 0x6, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x1, 0x6, 0x4}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x3, "0d04789e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0x2, {0x7, 0x25, 0x1, 0x2, 0x1, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x9, 0x2}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xd9, 0x4, 0x3, 0x2, "2e34bafe983c51"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0x7, 0x20, "88"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x9, 0x9, "2cea7d1d4818c9"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf7, 0x2, 0x40, 0x5, "", "5f9368"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x4, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7, 0x7f}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xd, 0x26, 0xe8, 0x10, 0x45}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42d}}, {0x9f, &(0x7f0000000280)=@string={0x9f, 0x3, "a3bd2f55d2f27e8243b66dd3f7978912c5fe8f3a4fcab70befd88dbf2365111bcf5d046dc7435d5e89832b045187bfee9052f5d574baaa0c16956700138b0c0f5aa943a4be1aeea5a2b8f260e45845e527f65f5dc09f1f350f6beefee46b800d6316aec217a8348162338f9b4c7a21bf85c2837896765df586bad66e7efa57bf687b7f15787c4ada71679ebe029e5817cbab3f17702df4ded4efb3d506"}}, {0xd4, &(0x7f0000000580)=@string={0xd4, 0x3, "20e863337fae49d1645568038613cba459a4c1d31f9247b13f807bdc977ccedb71aa4e10587d28badf700b294c45e9aabf57199ea10c191165a1c60f9d7087e7ff42ac4dc1be37f81e383ff344570c59cba21534ba3cc35447935b5aceb70ba17ce988cd12d6adb6a4a9ff194afb9d3dfa9fe9eff4bcbe67539a7aad6acdabe2a7646a73d149e42526f21372c7be84fa54f170d03c963c90c8b413e1b5f8083bdc6b599dc4fa15f7d7fb7d8dcc3caa0aa0cd8391b7ab0d5500d8589d22c1ca623b13b8a980cf084af3b045ae7f0fbe4e9bea"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x9, "dbc79ef4"}, @local=@item_4={0x3, 0x2, 0x2, "b6879791"}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) 826.070241ms ago: executing program 7 (id=3327): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8898, @mcast2, 0x7}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000740)={0xc, 0xc00000, "fd3cd93fd6c01e8f2e1ac2895736a9950aaf6d1ed4696093", {0x2, 0x80}, 0x4}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121300, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000000)) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r9, 0x40047452, &(0x7f0000000300)=0x5) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r10, 0x29, 0x21, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES16=r4, @ANYRESDEC=r8], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a58000000060a010402000000000000000a0000010900010073797a31000000002c000480280001800a00010072616e67650000001800028004000380080002400000000008000140000000000900020073797a3200000000140000001100010000000000000000000200000a"], 0x80}}, 0x24000000) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000000c0)=0x2000000, 0x4) 629.381468ms ago: executing program 4 (id=3328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x8) (async) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback={0xfc}, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="19c4", 0x4d0}], 0x1}}], 0x1, 0x3404c8d4) 570.684209ms ago: executing program 4 (id=3329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xe, &(0x7f0000000140)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@generic={0x8035}}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x130, 0x13, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x102, 0x8, "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"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x4001080) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4040090) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040003001a000200", 0x33a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r7 = dup(r3) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r8}) 285.237601ms ago: executing program 4 (id=3330): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0x59}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40005}, 0x2008c014) 246.766949ms ago: executing program 7 (id=3331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f687372000000000800030003000000180003801400038010000180040003000500020076"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) (fail_nth: 3) 199.273193ms ago: executing program 4 (id=3332): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = syz_io_uring_setup(0x5671, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1bd}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) r5 = syz_open_dev$vim2m(&(0x7f0000000280), 0x47e, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f012, 0x6}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000140), 0x3000, 0x0) ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000000180)={0x2, 0x202, 0x5}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x28, 0x0, r3, 0x0, 0x0, 0xa4}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$admmidi(&(0x7f0000000000), 0xfffffffffffffffe, 0x1a1882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x1000, r7, 0x1}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000000019d77b70344e6106b703e51f98e977e4260eb07b8de47b628e30dd44f326a47d22959d17ea03", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close_range(r7, r9, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) clock_getres(0x4, 0x0) 10.771312ms ago: executing program 7 (id=3333): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ac, 0x2, &(0x7f0000006680)) restart_syscall() mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 0s ago: executing program 6 (id=3334): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f}, 0x16) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x4}, 0x38) (async, rerun: 64) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x3, [@fwd={0x8}, @enum64={0x2, 0x5, 0x0, 0x13, 0x1, 0x4, [{0x4, 0x7, 0x4}, {0x8, 0x3, 0xd}, {0x7, 0x44, 0x7}, {0x7, 0x7, 0x9}, {0xe, 0x101, 0x9}]}, @volatile={0x2, 0x0, 0x0, 0x9, 0x1}, @enum64={0xc, 0x3, 0x0, 0x13, 0x1, 0x0, [{0x2, 0xfffffc00, 0x7}, {0x7, 0x8, 0x2}, {0xd, 0x1, 0xfff}]}]}, {0x0, [0x0]}}, &(0x7f0000000cc0)=""/4096, 0xab, 0x1000, 0x0, 0x4}, 0x28) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x10, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xba7, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000400)='GPL\x00', 0x1, 0x9c, &(0x7f0000000580)=""/156, 0x41100, 0x23, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000700)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xd, 0x1ff, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0x1], &(0x7f00000007c0)=[{0x4, 0x3, 0x4, 0x9}, {0x1, 0x3, 0x6, 0x1}, {0x1, 0x1, 0x0, 0x5}, {0x1, 0x1, 0xe}, {0x4, 0x1, 0x2}, {0x0, 0x5, 0x7, 0x3}, {0x5, 0x5, 0x0, 0x2}], 0x10, 0x3}, 0x94) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e24, 0xfe000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) ioctl$KVM_CAP_VM_TYPES(r4, 0x4068aea3, &(0x7f0000001d80)={0xeb, 0x0, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001f00)=@newlink={0x1f0, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_VFINFO_LIST={0x1d0, 0x16, 0x0, 0x1, [{0x80, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xd5, 0x4d83}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffffffe, 0xfd6, 0x27cf1f3e, 0x8100}}, {0x14, 0x1, {0x1, 0x3b2, 0x200, 0x8100}}, {0x14, 0x1, {0xf, 0x190, 0xb762}}, {0x14, 0x1, {0x9, 0x419, 0xf, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0xfffffffffffffffa}}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0xa}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8001, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0xff38}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x1, 0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0xa84, @broadcast}}, @IFLA_VF_VLAN_LIST={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0xd}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x1}}, @IFLA_VF_TX_RATE={0x2, 0x3, {0x6, 0x40}}, @IFLA_VF_VLAN={0x10, 0x2, {0x9, 0x1f7, 0xfffffd6d}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x2}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x40, 0x7, 0x611}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x200002, 0x1e4, 0xbf49, 0x8100}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x345, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3482, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x25000000, @random="65f795805568"}}]}]}]}, 0x1f0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x18, 0x0, 0x6, 0xf, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x100, @private1, 0xe}}, @sadb_address={0x3, 0x12, 0x3c, 0x80, 0x80ff, @in={0x2, 0x4e21, @private=0xa010102}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0xc, @loopback, 0x74}}]}, 0x78}}, 0x0) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x20, r8, 0x1, 0x0, 0xfffffffc, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async, rerun: 32) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getpeername(r9, &(0x7f0000001e00)=@ethernet={0x0, @multicast}, &(0x7f0000000840)=0x80) (async) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) (rerun: 32) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r14, 0x69e, 0xffff}, &(0x7f0000000040)=0xc) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0xf, 0x7, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x1, 0x7800, 0x7, 0x8}}) (rerun: 64) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r8, @ANYBLOB="00022abd7000fbdbdf25070000003000018008000700", @ANYRES32=r10, @ANYBLOB="08000300ac14143c14000400fe8000000000000000000000000000bb060005004e2400004c00018006000100020000001400040000000000000000000000000000000001080006000c000000080006001000000014000400fe8000000000000000000000000000bb08000700", @ANYRES32=r15, @ANYBLOB="0800020003000000080021000300000008000200010002000800030003000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8050}, 0x4004) kernel console output (not intermixed with test programs): endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.979873][ T874] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 774.001757][ T874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.043831][ T874] usb 5-1: config 0 descriptor?? [ 774.247476][T17440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.284041][T17440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.302050][ T874] smartjoyplus 0003:0925:8866.0036: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.4-1/input0 [ 774.385205][ T874] smartjoyplus 0003:0925:8866.0036: Force feedback for SmartJoy PLUS PS2/USB adapter [ 774.491531][ T874] usb 5-1: USB disconnect, device number 63 [ 774.549781][T17440] team0: Port device team_slave_0 added [ 774.596041][T17440] team0: Port device team_slave_1 added [ 774.667238][T17553] fido_id[17553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 774.746937][T17440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.757287][T17440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.787146][T17440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.805949][T17440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.815574][T17440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.843092][T17440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.914630][T17440] hsr_slave_0: entered promiscuous mode [ 774.922347][T17440] hsr_slave_1: entered promiscuous mode [ 774.927873][T12288] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 774.932321][T17440] debugfs: 'hsr0' already exists in 'hsr' [ 774.943021][T17440] Cannot create hsr debugfs directory [ 775.091338][T12288] usb 7-1: device descriptor read/64, error -71 [ 775.097974][T12682] Bluetooth: hci2: command tx timeout [ 775.127168][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 775.127186][ T30] audit: type=1800 audit(1764071074.151:451): pid=17577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2999" name="memory.events" dev="tmpfs" ino=135 res=0 errno=0 [ 775.168295][ T874] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 775.333292][ T874] usb 2-1: unable to get BOS descriptor or descriptor too short [ 775.348455][T12288] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 775.373670][ T874] usb 2-1: config 3 has an invalid interface number: 8 but max is 3 [ 775.393355][ T874] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 775.435159][ T874] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 775.463462][ T874] usb 2-1: config 3 has no interface number 0 [ 775.476008][ T874] usb 2-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 52, changing to 9 [ 775.490075][T12288] usb 7-1: device descriptor read/64, error -71 [ 775.513651][ T874] usb 2-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid maxpacket 8241, setting to 1024 [ 775.526441][ T874] usb 2-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 775.540149][ T874] usb 2-1: config 3 interface 8 has no altsetting 0 [ 775.550352][ T874] usb 2-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 775.573914][ T874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.602117][T12288] usb usb7-port1: attempt power cycle [ 775.603945][ T874] usb 2-1: Product: syz [ 775.612295][ T874] usb 2-1: Manufacturer: syz [ 775.617502][ T874] usb 2-1: SerialNumber: syz [ 775.754780][T17440] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 775.772787][T17440] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 775.795306][T17440] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 775.821784][T17440] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 775.852830][T17570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.890812][T17570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.922313][T17570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.948193][T12288] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 775.980195][ T874] appledisplay 2-1:3.8: Error while getting initial brightness: -71 [ 776.006465][T12288] usb 7-1: device descriptor read/8, error -71 [ 776.014673][ T874] appledisplay 2-1:3.8: probe with driver appledisplay failed with error -71 [ 776.049209][ T874] usb 2-1: USB disconnect, device number 64 [ 776.060234][T17596] could not allocate digest TFM handle sha384-arm [ 776.125932][T17440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.167041][T17440] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.208811][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.216040][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.225989][ T30] audit: type=1326 audit(1764071075.261:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17611 comm="syz.0.3002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32dad8f749 code=0x0 [ 776.247815][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.270136][T12288] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 776.329482][T12288] usb 7-1: device descriptor read/8, error -71 [ 776.337587][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.344834][ T8744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.439502][T12288] usb usb7-port1: unable to enumerate USB device [ 776.511000][T17440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.569315][T17625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.614807][T17625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.750315][T17440] veth0_vlan: entered promiscuous mode [ 776.778618][ T5885] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 776.788622][T12274] hid-generic 0002:0009:0101.0037: unknown main item tag 0x0 [ 776.796095][T12274] hid-generic 0002:0009:0101.0037: unknown main item tag 0x0 [ 776.823048][T12274] hid-generic 0002:0009:0101.0037: unknown main item tag 0x0 [ 776.856299][T12274] hid-generic 0002:0009:0101.0037: unknown main item tag 0x0 [ 776.865950][T12274] hid-generic 0002:0009:0101.0037: unknown main item tag 0x0 [ 776.875012][T12274] hid-generic 0002:0009:0101.0037: unknown main item tag 0x0 [ 776.885048][T12274] hid-generic 0002:0009:0101.0037: unknown main item tag 0x0 [ 776.893730][T12274] hid-generic 0002:0009:0101.0037: unknown main item tag 0x0 [ 776.905038][T12274] hid-generic 0002:0009:0101.0037: unknown main item tag 0x0 [ 776.912803][T12274] hid-generic 0002:0009:0101.0037: unknown main item tag 0x0 [ 776.925061][T17440] veth1_vlan: entered promiscuous mode [ 776.941227][T12274] hid-generic 0002:0009:0101.0037: hidraw0: HID v5c.43 Device [syz1] on syz1 [ 776.958093][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 776.981539][ T5885] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 777.007583][ T5885] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 777.032258][T17632] fido_id[17632]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 777.047563][ T5885] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.066762][ T5885] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 777.086726][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 777.110818][ T5885] usb 1-1: Product: syz [ 777.115131][ T5885] usb 1-1: Manufacturer: syz [ 777.131723][ T5885] usb 1-1: SerialNumber: syz [ 777.176555][ T5885] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input110 [ 777.252159][T17440] veth0_macvtap: entered promiscuous mode [ 777.305548][T17440] veth1_macvtap: entered promiscuous mode [ 777.361350][T17625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.394586][T17625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.422488][T17440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.513596][T17440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.537944][T17640] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3007'. [ 777.577575][ T1098] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.645534][ T1098] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.685025][ T1098] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.731406][T12269] usb 1-1: USB disconnect, device number 63 [ 777.767856][ T1098] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.801165][T12269] appletouch 1-1:1.0: input: appletouch disconnected [ 778.066589][T11178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.096331][T11178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.180407][T11178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.189533][T11178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.397979][ T5885] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 778.578025][T12269] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 778.579686][ T5885] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 778.679568][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.723687][ T5885] usb 5-1: config 0 has no interface number 0 [ 778.754102][ T5885] usb 5-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 778.773577][T12269] usb 7-1: unable to get BOS descriptor or descriptor too short [ 778.785457][T12269] usb 7-1: config 255 has an invalid interface number: 119 but max is 0 [ 778.793742][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.805299][T12269] usb 7-1: config 255 has no interface number 0 [ 778.837850][T12269] usb 7-1: config 255 interface 119 has no altsetting 0 [ 778.846279][ T5885] usb 5-1: Product: syz [ 778.853879][T12269] usb 7-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=d4.8c [ 778.878804][ T5885] usb 5-1: Manufacturer: syz [ 778.894548][T12269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.895823][ T5885] usb 5-1: SerialNumber: syz [ 778.933337][T12269] usb 7-1: Product:   [ 778.937540][T12269] usb 7-1: Manufacturer: ë—¼å§ç‹â¥á¬¼ï±ŒèŒ±Ã¸é¯ºä˜¬å‰ç¡°ï›¦á‚¯á­æ ¬å“㊳â»á»œã‡æºç¢ŠéŠ•ã€¤î¨˜é™§âˆìŸ­à¬è‡›è·•稼៓㦸䷴㑈뉮뽚ꨤé“Ɀଳࠀ [ 778.987228][ T5885] usb 5-1: config 0 descriptor?? [ 779.019363][T12269] usb 7-1: SerialNumber: ï¥¦ã¯‰ã¶¦â¯¢î²–î«¯áº–ì¦±î…æ‰ï½¾å¾›á««ì²¤î¦”å™à©³é­ç ƒá†‹à¬˜ï˜“Ṳ虧㺿ﱤê î¡ê‚‹Ë„á奷脱鴄骷솵꾌ᙌ螌㦠쵾⮴庰ꓹì½ï„®çƒçŽ ï¸¹å¬¾íš¯çƒ–âŒ¹è¿æ‰ì»¿ïŸ‘ₔﬧ [ 779.268596][ T5885] qmi_wwan 5-1:0.207: probe with driver qmi_wwan failed with error -22 [ 779.353840][T12269] rndis_host 7-1:255.119: invalid descriptor buffer length [ 779.356050][ T5885] usb 5-1: USB disconnect, device number 64 [ 779.379876][T12269] usb 7-1: bad CDC descriptors [ 779.412818][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 779.424439][T12269] cdc_acm 7-1:255.119: invalid descriptor buffer length [ 779.434006][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 779.446850][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 779.458333][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 779.468695][T12269] usb 7-1: USB disconnect, device number 55 [ 779.478345][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 779.530509][ T5200] Dev loop7: unable to read RDB block 7 [ 779.538522][ T5200] loop7: unable to read partition table [ 779.554694][ T5200] loop7: partition table beyond EOD, truncated [ 779.805770][T17678] team0 (unregistering): Port device team_slave_0 removed [ 779.836261][T17678] team0 (unregistering): Port device team_slave_1 removed [ 779.981533][T12269] IPVS: starting estimator thread 0... [ 780.090792][T17698] IPVS: using max 26 ests per chain, 62400 per kthread [ 780.167039][T17703] netlink: 'syz.6.3018': attribute type 10 has an invalid length. [ 780.334435][T11170] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.350331][T11170] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.454135][T11170] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.467476][T11170] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.550211][T11170] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.564275][T11170] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.722116][T11170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.742413][T11170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.766782][T17687] chnl_net:caif_netlink_parms(): no params data found [ 780.906596][T17733] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.3021'. [ 781.010641][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3021'. [ 781.109729][T11170] bridge_slave_1: left allmulticast mode [ 781.116697][T11170] bridge_slave_1: left promiscuous mode [ 781.125610][T11170] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.135444][T11170] bridge_slave_0: left allmulticast mode [ 781.150941][T11170] bridge_slave_0: left promiscuous mode [ 781.156893][T11170] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.186186][T11170] bond_slave_0: left promiscuous mode [ 781.198253][T11170] bond_slave_1: left promiscuous mode [ 781.218768][T11170] batadv0: left promiscuous mode [ 781.298338][T12269] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 781.432508][T11170] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 781.441208][T11170] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 7e:80:5d:0c:38:07 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 781.481868][T12269] usb 2-1: unable to get BOS descriptor or descriptor too short [ 781.491864][T12269] usb 2-1: not running at top speed; connect to a high speed hub [ 781.501328][T12269] usb 2-1: config 3 has an invalid interface number: 98 but max is 0 [ 781.509819][T12269] usb 2-1: config 3 has no interface number 0 [ 781.517192][T12269] usb 2-1: config 3 interface 98 altsetting 10 endpoint 0x2 has invalid wMaxPacketSize 0 [ 781.528059][T12269] usb 2-1: config 3 interface 98 has no altsetting 0 [ 781.537294][T12269] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=b9.a8 [ 781.546910][T12269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.554984][T12269] usb 2-1: Product: syz [ 781.559385][T12269] usb 2-1: Manufacturer: syz [ 781.563996][T12269] usb 2-1: SerialNumber: syz [ 781.571885][ T5916] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 781.580687][T12682] Bluetooth: hci4: command tx timeout [ 781.725450][ T5916] usb 7-1: device descriptor read/64, error -71 [ 781.775826][T17733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.786026][T17733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.805793][T12269] usb 2-1: USB disconnect, device number 65 [ 781.967980][ T5916] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 781.968182][T11170] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 781.986975][T11170] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 782.001636][T11170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.012603][T11170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.024270][T11170] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 782.036379][T11170] bond0 (unregistering): Released all slaves [ 782.051395][T11170] bond1 (unregistering): Released all slaves [ 782.101647][ T5916] usb 7-1: device descriptor read/64, error -71 [ 782.186300][T11170] bond2 (unregistering): Released all slaves [ 782.198882][T11170] bond3 (unregistering): Released all slaves [ 782.219751][ T5916] usb usb7-port1: attempt power cycle [ 782.331045][T11170] bond4 (unregistering): Released all slaves [ 782.348817][T11170] bond5 (unregistering): Released all slaves [ 782.365150][T17687] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.372844][T17687] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.384499][T17687] bridge_slave_0: entered allmulticast mode [ 782.392797][T17687] bridge_slave_0: entered promiscuous mode [ 782.402204][T17687] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.409787][T17687] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.417177][T17687] bridge_slave_1: entered allmulticast mode [ 782.438823][T17687] bridge_slave_1: entered promiscuous mode [ 782.504421][T17752] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 782.525312][T17752] bond1 (unregistering): Released all slaves [ 782.553740][T11170] : left promiscuous mode [ 782.577870][ T5916] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 782.606688][T17687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.621569][ T5916] usb 7-1: device descriptor read/8, error -71 [ 782.636474][T17687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.694643][T11170] tipc: Left network mode [ 782.783597][T17687] team0: Port device team_slave_0 added [ 782.801465][T17687] team0: Port device team_slave_1 added [ 782.879559][ T5916] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 782.933196][ T5916] usb 7-1: device descriptor read/8, error -71 [ 782.970944][T17687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.982463][T17687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.008362][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.061718][ T5916] usb usb7-port1: unable to enumerate USB device [ 783.078481][T17687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.215241][T17687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.297989][T17687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.360712][T17687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.658067][T12682] Bluetooth: hci4: command tx timeout [ 783.977455][T17687] hsr_slave_0: entered promiscuous mode [ 783.996697][T17687] hsr_slave_1: entered promiscuous mode [ 784.058597][T17687] debugfs: 'hsr0' already exists in 'hsr' [ 784.064348][T17687] Cannot create hsr debugfs directory [ 784.078941][T17799] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3028'. [ 784.716660][T11170] hsr_slave_0: left promiscuous mode [ 784.737928][ T5885] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 784.788862][T11170] hsr_slave_1: left promiscuous mode [ 784.808544][T11170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.818012][T11170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.856236][T11170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.888088][T11170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.888121][ T5885] usb 7-1: device descriptor read/64, error -71 [ 784.913795][T11170] batman_adv: batadv0: Removing interface: macvtap1 [ 784.971373][T11170] veth1_macvtap: left promiscuous mode [ 784.977024][T11170] veth0_macvtap: left promiscuous mode [ 784.982963][T11170] veth1_vlan: left promiscuous mode [ 784.989471][T11170] veth0_vlan: left promiscuous mode [ 785.110482][ T30] audit: type=1326 audit(1764071084.141:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17806 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a93f8f749 code=0x50000 [ 785.160827][ T30] audit: type=1326 audit(1764071084.141:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17806 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a93f8f749 code=0x50000 [ 785.168945][ T5885] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 785.212530][ T30] audit: type=1326 audit(1764071084.141:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17806 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a93f8f749 code=0x50000 [ 785.234875][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.242683][ T30] audit: type=1326 audit(1764071084.141:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17806 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a93f8f749 code=0x50000 [ 785.275855][ T30] audit: type=1326 audit(1764071084.141:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17806 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a93f8f749 code=0x50000 [ 785.314595][ T30] audit: type=1326 audit(1764071084.141:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17806 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a93f8f749 code=0x50000 [ 785.337156][ T30] audit: type=1326 audit(1764071084.141:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17806 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a93f8f749 code=0x50000 [ 785.360771][ T30] audit: type=1326 audit(1764071084.141:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17806 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a93f8f749 code=0x50000 [ 785.383156][ T30] audit: type=1326 audit(1764071084.141:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17806 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a93f8f749 code=0x50000 [ 785.398959][ T5885] usb 7-1: device descriptor read/64, error -71 [ 785.407066][ T30] audit: type=1326 audit(1764071084.141:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17806 comm="syz.4.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a93f8f749 code=0x50000 [ 785.528217][ T5885] usb usb7-port1: attempt power cycle [ 785.745495][T12682] Bluetooth: hci4: command tx timeout [ 785.902891][ T5885] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 785.932359][ T5885] usb 7-1: device descriptor read/8, error -71 [ 786.188170][ T5885] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 786.210039][ T5885] usb 7-1: device descriptor read/8, error -71 [ 786.329725][ T5885] usb usb7-port1: unable to enumerate USB device [ 786.421403][T11170] team0 (unregistering): Port device team_slave_1 removed [ 786.566776][T11170] team0 (unregistering): Port device team_slave_0 removed [ 787.828267][T12682] Bluetooth: hci4: command tx timeout [ 787.833952][ T5916] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 788.037903][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 788.058197][ T5916] usb 7-1: too many configurations: 14, using maximum allowed: 8 [ 788.115243][ T5916] usb 7-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 788.168886][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.176924][ T5916] usb 7-1: Product: syz [ 788.230118][ T5916] usb 7-1: Manufacturer: syz [ 788.246441][ T5916] usb 7-1: SerialNumber: syz [ 788.292994][ T5916] usb 7-1: config 0 descriptor?? [ 788.609086][ T5916] usb 7-1: USB disconnect, device number 64 [ 789.031771][T11170] IPVS: stop unused estimator thread 0... [ 789.356531][T17687] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 789.368384][T17687] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 789.386738][T17687] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 789.415741][T17687] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 789.474283][T17851] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3040'. [ 789.712999][T17687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.921496][T17687] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.074873][T11168] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.082100][T11168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.146402][T11168] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.153580][T11168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.425920][T17687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.513378][T17687] veth0_vlan: entered promiscuous mode [ 790.564899][T17687] veth1_vlan: entered promiscuous mode [ 790.665733][T17687] veth0_macvtap: entered promiscuous mode [ 790.687847][ T897] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 790.709270][T17687] veth1_macvtap: entered promiscuous mode [ 790.888755][T17687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.899080][ T897] usb 5-1: Using ep0 maxpacket: 8 [ 790.940467][T17687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.958139][ T897] usb 5-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.40 [ 790.967302][ T897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.989654][T11177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.035210][T11177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.071041][ T897] usb 5-1: Product: Ñ— [ 791.135648][ T897] usb 5-1: Manufacturer: Ч [ 791.149005][ T897] usb 5-1: SerialNumber: à § [ 791.208475][T11177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.226528][T11177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.458109][ T5885] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 791.475022][T11170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.497158][T11170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.555734][T17902] vlan0: left promiscuous mode [ 791.576025][T11174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.595889][T11174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.618465][ T5885] usb 2-1: device descriptor read/64, error -71 [ 791.878386][ T5885] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 792.017958][ T5885] usb 2-1: device descriptor read/64, error -71 [ 792.149316][ T5885] usb usb2-port1: attempt power cycle [ 792.540481][ T5885] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 792.658625][ T5885] usb 2-1: device descriptor read/8, error -71 [ 792.911914][ T5885] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 792.942985][ T5885] usb 2-1: device descriptor read/8, error -71 [ 793.058266][ T5885] usb usb2-port1: unable to enumerate USB device [ 793.258018][T12271] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 793.329782][ T897] usbhid 5-1:1.0: can't add hid device: -71 [ 793.347934][ T897] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 793.378652][ T897] usb 5-1: USB disconnect, device number 65 [ 793.410250][T12271] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 793.429602][T12271] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 793.443527][T12271] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.02 [ 793.456926][T12271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.478219][T12271] usb 1-1: config 0 descriptor?? [ 793.897241][T17927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.910151][T17927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.920470][T12271] usb 1-1: string descriptor 0 read error: -71 [ 793.938901][T12271] usb 1-1: USB disconnect, device number 64 [ 794.117921][ T5885] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 794.267852][ T5885] usb 7-1: device descriptor read/64, error -71 [ 794.527878][ T5885] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 794.553525][T12271] hid (null): invalid report_count 348029770 [ 794.580835][T12271] hid-generic 0004:0009:0006.0038: invalid report_count 348029770 [ 794.610556][T12271] hid-generic 0004:0009:0006.0038: item 0 4 1 9 parsing failed [ 794.623624][T12271] hid-generic 0004:0009:0006.0038: probe with driver hid-generic failed with error -22 [ 794.668065][ T5885] usb 7-1: device descriptor read/64, error -71 [ 794.829186][ T5885] usb usb7-port1: attempt power cycle [ 795.187929][ T5885] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 795.284832][ T5885] usb 7-1: device descriptor read/8, error -71 [ 795.578163][ T874] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 795.586099][ T5885] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 795.608433][ T5885] usb 7-1: device descriptor read/8, error -71 [ 795.718488][ T5885] usb usb7-port1: unable to enumerate USB device [ 795.751241][ T874] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 795.760207][ T874] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 795.804601][ T874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 795.838129][ T874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 795.857789][ T874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 795.889718][ T874] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 795.902385][ T874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.918427][ T874] usb 5-1: config 0 descriptor?? [ 795.928962][T17983] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 796.208952][T17997] kAFS: unable to lookup cell 'Þ({^ú@' [ 796.372081][ T874] plantronics 0003:047F:FFFF.0039: reserved main item tag 0xd [ 796.414192][ T874] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 796.640099][ T5885] usb 5-1: USB disconnect, device number 66 [ 797.267928][ T897] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 797.527543][ T897] usb 7-1: Using ep0 maxpacket: 32 [ 797.612036][ T897] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 797.628898][ T897] usb 7-1: config 0 has no interface number 0 [ 797.670408][ T897] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 797.697968][ T897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.706147][ T897] usb 7-1: Product: syz [ 797.717902][ T897] usb 7-1: Manufacturer: syz [ 797.722558][ T897] usb 7-1: SerialNumber: syz [ 797.738856][ T897] usb 7-1: config 0 descriptor?? [ 797.746534][ T897] smsc95xx v2.0.0 [ 798.390633][T18009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.459052][ T5885] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 798.461699][T18009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.623040][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 798.649320][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.797886][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.956652][ T5885] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 798.984177][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.017515][ T5885] usb 5-1: config 0 descriptor?? [ 799.340896][ T897] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 799.374787][ T897] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 799.385495][ T897] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 799.397484][ T897] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 799.411452][ T897] usb 7-1: USB disconnect, device number 69 [ 799.903577][T18034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 799.909912][T18034] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 799.975820][T18034] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 800.004520][T18034] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 800.184264][T18034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 800.190450][T18034] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 800.397165][T18034] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 800.404447][T12274] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 800.412454][T18034] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 800.612503][T12274] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.663387][ T5916] IPVS: starting estimator thread 0... [ 800.686670][T18034] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 800.702274][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 800.712281][T12274] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.723915][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 800.734765][T12274] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 800.753961][ T5885] usb 5-1: USB disconnect, device number 67 [ 800.760741][T12274] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.797330][T12274] usb 7-1: config 0 descriptor?? [ 800.798014][T18042] IPVS: using max 31 ests per chain, 74400 per kthread [ 800.854904][T18034] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 801.031889][T12274] hid-led 0003:1D34:000A.003A: item fetching failed at offset 0/3 [ 801.078393][T12274] hid-led 0003:1D34:000A.003A: probe with driver hid-led failed with error -22 [ 801.206641][T18050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 801.258057][T12271] usb 7-1: USB disconnect, device number 70 [ 801.804161][T18067] netlink: 'syz.6.3091': attribute type 3 has an invalid length. [ 801.824679][T18067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.143187][T18076] binder: 18075:18076 ioctl c0189376 200000000040 returned -22 [ 802.418091][T12271] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 802.579997][T12271] usb 5-1: unable to get BOS descriptor or descriptor too short [ 802.589429][T12271] usb 5-1: config 3 has an invalid interface number: 8 but max is 3 [ 802.619515][T12271] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 802.677943][ T5885] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 802.686777][T12271] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 802.767061][T12271] usb 5-1: config 3 has no interface number 0 [ 802.767122][T12271] usb 5-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 52, changing to 9 [ 802.767147][T12271] usb 5-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid maxpacket 8241, setting to 1024 [ 802.767172][T12271] usb 5-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 802.767196][T12271] usb 5-1: config 3 interface 8 has no altsetting 0 [ 802.797885][T12269] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 802.821256][T12271] usb 5-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 802.821304][T12271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.821324][T12271] usb 5-1: Product: syz [ 802.821340][T12271] usb 5-1: Manufacturer: syz [ 802.821355][T12271] usb 5-1: SerialNumber: syz [ 802.878196][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 802.898506][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.898541][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.898564][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 802.898602][ T5885] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 802.898622][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.921102][ T5885] usb 7-1: config 0 descriptor?? [ 803.040700][T18078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.058369][T18078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.153263][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3094'. [ 803.316872][T12271] appledisplay 5-1:3.8: Error while getting initial brightness: -71 [ 803.321825][T12271] appledisplay 5-1:3.8: probe with driver appledisplay failed with error -71 [ 803.332665][T12271] usb 5-1: USB disconnect, device number 68 [ 803.471601][ T5885] microsoft 0003:045E:07DA.003B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 803.471636][ T5885] microsoft 0003:045E:07DA.003B: no inputs found [ 803.471651][ T5885] microsoft 0003:045E:07DA.003B: could not initialize ff, continuing anyway [ 803.563773][ T5916] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 803.749016][ T5916] usb 2-1: not running at top speed; connect to a high speed hub [ 803.750302][ T5916] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 803.750327][ T5916] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 803.750345][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 803.754249][ T5916] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 803.754278][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.754297][ T5916] usb 2-1: Product: ä’”è»¶â¬¼å·ºç¿æ†•惴쳯垒ꦇƗ⹹ꨟ嘈씆뢚誹Ᲊ熛蹬첩㬶ꦦâcåµï«„äƒœà£¿â‘†ã˜—ïž«íˆ’ã¼æ¨·æ¡‡êŸ”ḅ괶⫅蒃њ㖖༞慺鵔㜎ᯑ첷è—艗îˆä·´è¶£çŽ™è¸°ã¨‘ãž›ï„⎼죪ʗãƒî§¹ç¦›â¯¢ï…‘ã²ì–˜ãµì°¦á½ Ý¸í‡—틻Ȭ粓ê¨Ó·ë»ƒå—­à¼…ގ [ 803.754323][ T5916] usb 2-1: Manufacturer: Ð [ 803.754337][ T5916] usb 2-1: SerialNumber: á [ 804.038555][T12269] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 804.232935][T12269] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 804.232963][T12269] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 804.232978][T12269] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 804.233022][T12269] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.233047][T12269] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 804.233069][T12269] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 804.240958][T12269] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 804.240976][T12269] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 804.240987][T12269] usb 1-1: Product: syz [ 804.240995][T12269] usb 1-1: Manufacturer: syz [ 804.254455][T18108] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 804.257127][T12269] cdc_wdm 1-1:1.0: skipping garbage [ 804.257148][T12269] cdc_wdm 1-1:1.0: skipping garbage [ 804.259671][T12269] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 804.259689][T12269] cdc_wdm 1-1:1.0: Unknown control protocol [ 804.626332][T18108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.626738][T18108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.642210][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 804.642239][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 804.642421][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 804.642432][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 804.642612][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 804.642630][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 804.642833][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 804.642851][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 804.643084][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 804.643105][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 804.643319][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 804.643330][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 804.643498][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 804.643509][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 804.643520][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 804.643548][T12269] usb 1-1: USB disconnect, device number 66 [ 805.060964][T18122] team_slave_0: entered promiscuous mode [ 805.061034][T18122] team_slave_1: entered promiscuous mode [ 805.062582][T18122] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 805.063494][T18122] team0: Device macvtap1 is already an upper device of the team interface [ 805.064834][T18122] team_slave_0: left promiscuous mode [ 805.064888][T18122] team_slave_1: left promiscuous mode [ 805.970661][ T874] usb 7-1: USB disconnect, device number 71 [ 806.358513][ T874] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 806.519990][ T874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 806.520015][ T874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.520037][ T874] usb 7-1: New USB device found, idVendor=05f6, idProduct=3201, bcdDevice= 0.00 [ 806.520050][ T874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.526351][ T874] usb 7-1: config 0 descriptor?? [ 806.740889][T18139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.741130][T18139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.897902][ T5920] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 807.050846][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 807.060203][ T5920] usb 5-1: config 3 has an invalid interface number: 8 but max is 3 [ 807.086811][ T5920] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 807.138387][ T5920] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 807.147845][ T5920] usb 5-1: config 3 has no interface number 0 [ 807.158082][ T5920] usb 5-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 52, changing to 9 [ 807.185948][ T874] hid-generic 0003:05F6:3201.003C: hidraw0: USB HID v1.01 Device [HID 05f6:3201] on usb-dummy_hcd.6-1/input0 [ 807.209545][ T5920] usb 5-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid maxpacket 8241, setting to 1024 [ 807.251983][ T5920] usb 5-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 807.268017][T12274] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 807.297910][ T5920] usb 5-1: config 3 interface 8 has no altsetting 0 [ 807.307293][ T5920] usb 5-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 807.316629][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.324725][ T5920] usb 5-1: Product: syz [ 807.329012][ T5920] usb 5-1: Manufacturer: syz [ 807.333633][ T5920] usb 5-1: SerialNumber: syz [ 807.390355][ T897] usb 7-1: USB disconnect, device number 72 [ 807.417980][T12274] usb 1-1: Using ep0 maxpacket: 16 [ 807.425040][T12274] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 807.435374][T12274] usb 1-1: config 0 has no interface number 0 [ 807.441719][T12274] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 807.453684][T12274] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 807.463211][T12274] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 807.471509][T12274] usb 1-1: Manufacturer: syz [ 807.476160][T12274] usb 1-1: SerialNumber: syz [ 807.513296][T12274] usb 1-1: config 0 descriptor?? [ 807.555319][T18149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.565704][T18149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.582209][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3112'. [ 807.681703][ T5920] appledisplay 5-1:3.8: Error while getting initial brightness: -71 [ 807.694498][ T5920] appledisplay 5-1:3.8: probe with driver appledisplay failed with error -71 [ 807.716971][ T5920] usb 5-1: USB disconnect, device number 69 [ 807.775446][ T5916] usb 2-1: 0:2 : does not exist [ 807.808086][ T5916] usb 2-1: USB disconnect, device number 70 [ 807.828391][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.965385][T18152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.987142][T18152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.996276][T12274] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 808.022106][T12274] usb 1-1: USB disconnect, device number 67 [ 808.073129][T18155] fuse: Bad value for 'rootmode' [ 808.387847][ T10] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 808.422845][T18172] program syz.7.3119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 808.498032][T12271] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 808.558247][ T10] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 808.621843][ T10] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 808.636085][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 808.657925][T12271] usb 2-1: device descriptor read/64, error -71 [ 808.658770][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 808.690304][ T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 808.725896][ T10] usb 7-1: Product: syz [ 808.740710][ T10] usb 7-1: Manufacturer: syz [ 808.757199][ T10] usb 7-1: SerialNumber: syz [ 808.782853][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.789450][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.805911][ T10] usb 7-1: config 0 descriptor?? [ 808.833964][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 808.858258][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 808.879981][ T10] usb 7-1: selecting invalid altsetting 0 [ 808.937970][T12271] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 809.112187][T12271] usb 2-1: device descriptor read/64, error -71 [ 809.279677][T12271] usb usb2-port1: attempt power cycle [ 809.381514][T12269] usb 7-1: USB disconnect, device number 73 [ 809.627974][T12271] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 809.678566][T12271] usb 2-1: device descriptor read/8, error -71 [ 809.927951][T12271] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 809.983103][T12271] usb 2-1: device descriptor read/8, error -71 [ 810.055829][T18186] xt_TPROXY: Can be used only with -p tcp or -p udp [ 810.086804][T18186] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3123'. [ 810.124122][T12271] usb usb2-port1: unable to enumerate USB device [ 811.659010][T12269] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 811.823732][T12269] usb 2-1: Using ep0 maxpacket: 32 [ 811.832951][T12269] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 811.842012][T12269] usb 2-1: config 0 has no interface number 0 [ 811.849936][T12269] usb 2-1: config 0 interface 12 has no altsetting 0 [ 811.860644][T12269] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 811.871414][T12269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.880743][T12269] usb 2-1: Product: syz [ 811.885106][T12269] usb 2-1: Manufacturer: syz [ 811.895269][T12269] usb 2-1: SerialNumber: syz [ 811.917839][ T897] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 811.936762][T12269] usb 2-1: config 0 descriptor?? [ 812.038250][T12274] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 812.093054][ T897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 812.125156][T18203] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3129'. [ 812.143250][ T897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.182595][ T897] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 812.208008][ T897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.226100][T12274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.249949][T12274] usb 5-1: config 0 has no interfaces? [ 812.255509][T12274] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 812.266152][ T897] usb 7-1: config 0 descriptor?? [ 812.284671][T12274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.320168][T12274] usb 5-1: config 0 descriptor?? [ 812.848459][T18197] random: crng reseeded on system resumption [ 812.887035][T18196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.900470][T18196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.919680][T12271] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 813.039653][ T897] usbhid 7-1:0.0: can't add hid device: -71 [ 813.077619][ T897] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 813.109858][T12271] usb 1-1: not running at top speed; connect to a high speed hub [ 813.160179][ T897] usb 7-1: USB disconnect, device number 74 [ 813.178569][T12271] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 813.201743][T12271] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 813.214319][T12271] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 813.227564][T12271] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 813.238963][T12271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.256528][T12271] usb 1-1: Product: ä’”ä¼ºâ¬¼å·ºç¿æ†•惴쳯垒ꦇƗ⹹ꨟ嘈씆뢚誹Ᲊ熛蹬첩㬶ꦦâcåµï«„äƒœà£¿â‘†ã˜—ïž«íˆ’ã¼æ¨·æ¡‡êŸ”ḅ괶⫅蒃њ㖖༞慺鵔㜎ᯑ첷è—艗îˆä·´è¶£çŽ™è¸°ã¨‘ãž›ï„⎼죪ʗãƒî§¹ç¦›â¯¢ï…‘ã²ì–˜ãµì°¦á½ Ý¸í‡—틻Ȭ粓ê¨Ó·ë»ƒå—­à¼…ގ [ 813.283815][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.297536][T12271] usb 1-1: Manufacturer: Ð [ 813.305628][T12271] usb 1-1: SerialNumber: á [ 813.983802][T12269] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 814.011794][T12269] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 814.031967][T12269] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 814.054588][T12269] f81534 2-1:0.12: probe with driver f81534 failed with error -32 [ 814.333507][T18225] bond0: option arp_validate: invalid value (18446744073491447809) [ 814.341948][T11170] bond0: (slave bond_slave_0): interface is now down [ 814.411968][T11170] bond0: (slave bond_slave_1): interface is now down [ 814.429144][T18227] tipc: Enabling of bearer rejected, failed to enable media [ 814.471677][T11170] bond0: now running without any active interface! [ 814.730365][T18235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 814.738152][T18235] IPv6: NLM_F_CREATE should be set when creating new route [ 814.754446][T18235] lo: entered allmulticast mode [ 814.763088][T18235] tunl0: entered allmulticast mode [ 814.772246][T18235] gre0: entered allmulticast mode [ 814.833010][T18235] gretap0: entered allmulticast mode [ 814.910886][T18235] erspan0: entered allmulticast mode [ 814.933344][T18235] ip_vti0: entered allmulticast mode [ 814.943498][T18235] ip6_vti0: entered allmulticast mode [ 814.957551][T18235] sit0: entered allmulticast mode [ 814.970242][T18235] ip6tnl0: entered allmulticast mode [ 814.984287][T18235] ip6gre0: entered allmulticast mode [ 815.027459][T18235] syz_tun: entered allmulticast mode [ 815.082107][T18235] ip6gretap0: entered allmulticast mode [ 815.095355][T18235] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.103275][T18235] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.113257][T18235] bridge0: entered allmulticast mode [ 815.122888][T18235] vcan0: entered allmulticast mode [ 815.134278][T18235] bond0: entered allmulticast mode [ 815.140091][T18235] bond_slave_0: entered allmulticast mode [ 815.146128][T18235] bond_slave_1: entered allmulticast mode [ 815.161383][T18235] team0: entered allmulticast mode [ 815.166788][T18235] team_slave_0: entered allmulticast mode [ 815.173772][T18235] team_slave_1: entered allmulticast mode [ 815.185478][T18235] dummy0: entered allmulticast mode [ 815.216325][T18235] nlmon0: entered allmulticast mode [ 815.233993][T18235] caif0: entered allmulticast mode [ 815.242314][T18235] batadv0: entered allmulticast mode [ 815.257378][T18235] vxcan0: entered allmulticast mode [ 815.266463][T18235] vxcan1: entered allmulticast mode [ 815.275747][T18235] veth0: entered allmulticast mode [ 815.289977][T18235] veth1: entered allmulticast mode [ 815.310521][T18235] wg0: entered allmulticast mode [ 815.353199][T18235] wg1: entered allmulticast mode [ 815.428350][T18235] wg2: entered allmulticast mode [ 815.451118][T18235] veth0_to_bridge: entered allmulticast mode [ 815.532660][ T5916] usb 2-1: USB disconnect, device number 75 [ 815.596388][T18235] veth1_to_bridge: entered allmulticast mode [ 815.641471][T18235] veth0_to_bond: entered allmulticast mode [ 815.653218][T18235] veth1_to_bond: entered allmulticast mode [ 815.675134][T18235] veth0_to_team: entered allmulticast mode [ 815.697678][T18235] veth1_to_team: entered allmulticast mode [ 815.712804][T18235] veth0_to_batadv: entered allmulticast mode [ 815.723902][T18235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.735776][T18235] batadv_slave_0: entered allmulticast mode [ 815.751771][T18235] veth1_to_batadv: entered allmulticast mode [ 815.767435][T18235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.777639][T18235] batadv_slave_1: entered allmulticast mode [ 815.791789][T18235] xfrm0: entered allmulticast mode [ 815.804802][T18235] veth0_to_hsr: entered allmulticast mode [ 815.815685][T18235] hsr_slave_0: entered allmulticast mode [ 815.817676][T12269] usb 5-1: USB disconnect, device number 70 [ 815.837443][T18235] veth1_to_hsr: entered allmulticast mode [ 815.854253][T18235] hsr_slave_1: entered allmulticast mode [ 815.860779][ T10] usb 7-1: new low-speed USB device number 75 using dummy_hcd [ 815.876564][T18235] hsr0: entered allmulticast mode [ 815.888233][T18235] veth1_virt_wifi: entered allmulticast mode [ 815.899891][T18235] veth0_virt_wifi: entered allmulticast mode [ 815.911901][T18235] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 815.921980][T18235] veth1_vlan: entered allmulticast mode [ 815.934171][T18235] veth0_vlan: entered allmulticast mode [ 815.956358][T18235] vlan0: entered allmulticast mode [ 815.962318][T18235] vlan1: entered allmulticast mode [ 815.974397][T18235] macvlan0: entered allmulticast mode [ 815.992961][T18235] macvlan1: entered allmulticast mode [ 815.996750][T18246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3137'. [ 816.002457][T18235] ipvlan0: entered allmulticast mode [ 816.018151][T18235] ipvlan1: entered allmulticast mode [ 816.024450][T18235] veth1_macvtap: entered allmulticast mode [ 816.033780][T18235] veth0_macvtap: entered allmulticast mode [ 816.043197][T18235] macvtap0: entered allmulticast mode [ 816.052698][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 816.054495][T18235] macsec0: entered allmulticast mode [ 816.068808][ T10] usb 7-1: config 7 has an invalid interface number: 29 but max is 0 [ 816.077465][ T10] usb 7-1: config 7 has no interface number 0 [ 816.088451][ T10] usb 7-1: config 7 interface 29 altsetting 1 endpoint 0x1 has invalid maxpacket 112, setting to 8 [ 816.099921][ T10] usb 7-1: config 7 interface 29 has no altsetting 0 [ 816.107310][T18235] geneve0: entered allmulticast mode [ 816.109973][ T10] usb 7-1: string descriptor 0 read error: -22 [ 816.120400][ T10] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=a2.36 [ 816.129653][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.145618][ T10] i2c-tiny-usb 7-1:7.29: version a2.36 found at bus 007 address 075 [ 816.162799][T18235] geneve1: entered allmulticast mode [ 816.176250][T18235] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 816.196320][T18235] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 816.210281][T18235] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 816.229462][T18235] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 816.249047][T18235] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 816.258094][T18235] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 816.331280][T11168] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.362342][T11168] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.386400][T11168] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.400814][T11168] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.763330][T12271] usb 1-1: 0:2 : does not exist [ 816.792222][T12271] usb 1-1: USB disconnect, device number 68 [ 816.851835][T16620] udevd[16620]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 816.934453][ T30] kauditd_printk_skb: 15377 callbacks suppressed [ 816.934470][ T30] audit: type=1326 audit(1764071115.961:15840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c018f749 code=0x7ffc0000 [ 816.985301][ T30] audit: type=1326 audit(1764071116.001:15841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c018f749 code=0x7ffc0000 [ 817.071904][ T30] audit: type=1326 audit(1764071116.001:15842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2c018f749 code=0x7ffc0000 [ 817.153155][ T30] audit: type=1326 audit(1764071116.001:15843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c018f749 code=0x7ffc0000 [ 817.175875][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.185502][ T30] audit: type=1326 audit(1764071116.001:15844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c018f749 code=0x7ffc0000 [ 817.185896][ T10] (null): failure reading functionality [ 817.208127][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.209645][ T30] audit: type=1326 audit(1764071116.001:15845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe2c018f749 code=0x7ffc0000 [ 817.243345][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.266828][ T10] i2c i2c-4: failure reading functionality [ 817.275462][ T30] audit: type=1326 audit(1764071116.001:15846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c018f749 code=0x7ffc0000 [ 817.299034][ T30] audit: type=1326 audit(1764071116.001:15847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c018f749 code=0x7ffc0000 [ 817.325014][ T10] i2c i2c-4: connected i2c-tiny-usb device [ 817.331904][ T30] audit: type=1326 audit(1764071116.001:15848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe2c018f749 code=0x7ffc0000 [ 817.355139][ T30] audit: type=1326 audit(1764071116.001:15849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.7.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c018f749 code=0x7ffc0000 [ 817.391933][ T10] usb 7-1: USB disconnect, device number 75 [ 817.517819][ T5920] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 817.547564][T18287] syzkaller0: entered promiscuous mode [ 817.549877][T18289] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3151'. [ 817.553635][T18287] syzkaller0: entered allmulticast mode [ 817.573708][T18287] syzkaller0: tun_net_xmit 14 [ 817.698057][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 817.716055][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 817.729559][ T5920] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.9c [ 817.740426][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.749173][ T5920] usb 1-1: Product: syz [ 817.753350][ T5920] usb 1-1: Manufacturer: syz [ 817.759192][ T5920] usb 1-1: SerialNumber: syz [ 817.770349][ T5920] usb 1-1: config 0 descriptor?? [ 817.779549][ T5920] usb 1-1: selecting invalid altsetting 1 [ 817.785327][ T5920] snd-usb-caiaq 1-1:0.0: can't set alt interface. [ 817.791868][ T5920] usb 1-1: unable to init card! (ret=-5) [ 817.799464][ T5920] snd-usb-caiaq 1-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 817.947886][T12288] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 817.980368][T18279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.989330][T18279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.005038][T18304] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.3155'. [ 818.010043][T12271] usb 1-1: USB disconnect, device number 69 [ 818.014533][T18304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3155'. [ 818.099489][T12288] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 818.110787][T12288] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 818.121983][T12288] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 818.133272][T12288] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64 [ 818.146689][T12288] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 818.164345][T12288] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.181780][T12288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 818.190077][T12288] usb 7-1: SerialNumber: syz [ 818.201775][T18298] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 818.220687][T18298] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 818.233945][T18298] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 818.281560][T18311] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.289339][T18311] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.372736][T18314] netlink: 'syz.1.3157': attribute type 21 has an invalid length. [ 818.444591][T18298] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 818.452180][T18298] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 818.468560][T18298] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 818.557890][ T5920] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 818.727856][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 818.767925][T12271] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 818.890004][ T5920] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 818.908488][T12271] usb 2-1: device descriptor read/64, error -71 [ 818.920767][T12288] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 818.976680][ T5920] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 819.078410][ T5920] usb 1-1: config 127 has no interface number 1 [ 819.109352][ T5920] usb 1-1: config 127 interface 171 has no altsetting 0 [ 819.140153][ T5920] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 819.167937][T12271] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 819.206759][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.221501][ T5920] usb 1-1: Product: syz [ 819.226003][ T5920] usb 1-1: Manufacturer: syz [ 819.237607][ T5920] usb 1-1: SerialNumber: syz [ 819.340504][T11168] ip6gretap0 (unregistering): left promiscuous mode [ 819.347959][T12271] usb 2-1: device descriptor read/64, error -71 [ 819.467329][T12271] usb usb2-port1: attempt power cycle [ 819.772306][T11168] tipc: Disabling bearer [ 819.857865][T12271] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 819.908560][T12271] usb 2-1: device descriptor read/8, error -71 [ 820.155387][T11168] bridge0 (unregistering): left promiscuous mode [ 820.168136][T12271] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 820.222364][T12271] usb 2-1: device descriptor read/8, error -71 [ 820.350618][T12271] usb usb2-port1: unable to enumerate USB device [ 820.630100][T11168] bond0 (unregistering): Released all slaves [ 820.640190][T18352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 820.683883][T11168] bond1 (unregistering): Released all slaves [ 820.724226][T11168] bond2 (unregistering): Released all slaves [ 820.753270][ T5885] usb 7-1: USB disconnect, device number 76 [ 820.843849][ T5885] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 821.295102][ T5920] xr_serial 1-1:127.171: xr_serial converter detected [ 821.327283][T11168] bond3 (unregistering): (slave batadv1): Releasing active interface [ 821.340228][T11168] bond3 (unregistering): Released all slaves [ 821.399509][ T5920] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 821.416671][ T5920] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 821.444883][T18359] xt_TCPMSS: Only works on TCP SYN packets [ 821.476450][ T5920] usb 1-1: USB disconnect, device number 70 [ 821.500454][ T5920] xr_serial 1-1:127.171: device disconnected [ 821.774508][T11168] bond4 (unregistering): Released all slaves [ 821.815505][T11168] bond5 (unregistering): Released all slaves [ 821.982974][T11168] bond6 (unregistering): Released all slaves [ 821.996189][T11168] bond7 (unregistering): Released all slaves [ 822.009319][T11168] bond8 (unregistering): Released all slaves [ 822.215917][T11168] tipc: Left network mode [ 822.271636][T11168] IPVS: stopping backup sync thread 16986 ... [ 822.417911][ T5885] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 822.598324][T12274] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 822.606669][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 822.643364][ T5885] usb 7-1: config 0 has an invalid interface number: 77 but max is 0 [ 822.662199][ T5885] usb 7-1: config 0 has no interface number 0 [ 822.680680][ T5885] usb 7-1: config 0 interface 77 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 822.717788][ T5885] usb 7-1: config 0 interface 77 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 822.743303][ T5885] usb 7-1: New USB device found, idVendor=093a, idProduct=260f, bcdDevice=31.a7 [ 822.772894][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.808515][T12274] usb 1-1: Using ep0 maxpacket: 8 [ 822.818841][ T5885] usb 7-1: Product: syz [ 822.823044][ T5885] usb 7-1: Manufacturer: syz [ 822.827654][ T5885] usb 7-1: SerialNumber: syz [ 822.841412][T12274] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 822.868993][T12274] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 822.897324][ T5885] usb 7-1: config 0 descriptor?? [ 822.910631][T12274] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 822.927374][T11168] hsr_slave_0: left promiscuous mode [ 822.940566][T18356] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 822.948165][T11168] hsr_slave_1: left promiscuous mode [ 822.948287][ T5916] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 822.963143][T12274] usb 1-1: config 250 has no interface number 0 [ 822.994949][T18399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3170'. [ 823.004494][T12274] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 823.004551][T12274] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 823.004577][T12274] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 823.004600][T12274] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 823.004625][T12274] usb 1-1: config 250 interface 228 has no altsetting 0 [ 823.007507][T12274] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 823.017591][T18356] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 823.125529][T11168] pimreg3 (unregistering): left allmulticast mode [ 823.169405][T12274] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 823.179978][T18399] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3170'. [ 823.256472][T12274] usb 1-1: Product: syz [ 823.273254][T12274] usb 1-1: SerialNumber: syz [ 823.278064][ T5916] usb 5-1: device descriptor read/64, error -71 [ 823.301704][T12274] hub 1-1:250.228: bad descriptor, ignoring hub [ 823.329620][T12274] hub 1-1:250.228: probe with driver hub failed with error -5 [ 823.343120][T11168] pim6reg (unregistering): left allmulticast mode [ 823.514031][T12274] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 71 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 823.538020][ T5916] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 823.718231][ T5916] usb 5-1: device descriptor read/64, error -71 [ 823.842854][T18406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.861631][T18406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.974758][ C1] usblp0: nonzero read bulk status received: -71 [ 823.990314][ T5916] usb usb5-port1: attempt power cycle [ 823.999716][ T897] usb 1-1: USB disconnect, device number 71 [ 824.010023][ T897] usblp0: removed [ 824.419553][ T5916] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 824.468834][ T5916] usb 5-1: device descriptor read/8, error -71 [ 824.586983][ T5885] gspca_main: pac7311-2.14.0 probing 093a:260f [ 824.610213][ T5885] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 824.622721][ T5885] pac7311 7-1:0.77: probe with driver pac7311 failed with error -71 [ 824.665186][ T5885] usb 7-1: USB disconnect, device number 77 [ 824.737902][ T5916] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 824.768511][T18423] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3173'. [ 824.788522][ T5916] usb 5-1: device descriptor read/8, error -71 [ 824.943229][ T5916] usb usb5-port1: unable to enumerate USB device [ 825.028058][ T5885] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 825.207872][ T5885] usb 7-1: Using ep0 maxpacket: 8 [ 825.215350][ T5885] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 825.227294][ T5885] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 825.238061][ T5885] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 825.249434][ T5885] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 825.263198][ T5885] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 825.273749][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.327857][ T5916] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 825.357928][ T897] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 825.484146][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 825.493720][ T5916] usb 1-1: config 8 has an invalid interface number: 55 but max is 0 [ 825.515711][ T5916] usb 1-1: config 8 has no interface number 0 [ 825.517819][ T897] usb 2-1: Using ep0 maxpacket: 8 [ 825.527413][ T5916] usb 1-1: config 8 interface 55 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 825.539868][ T5916] usb 1-1: config 8 interface 55 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 825.554233][ T897] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 825.558265][ T5885] usb 7-1: GET_CAPABILITIES returned 0 [ 825.562773][ T897] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 825.581868][ T5885] usbtmc 7-1:16.0: can't read capabilities [ 825.589347][ T5916] usb 1-1: config 8 interface 55 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 825.610527][ T897] usb 2-1: config 127 has no interface number 1 [ 825.622478][ T5916] usb 1-1: config 8 interface 55 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 825.635146][ T5916] usb 1-1: config 8 interface 55 altsetting 0 endpoint 0x8C has an invalid bInterval 47, changing to 7 [ 825.650556][ T897] usb 2-1: config 127 interface 171 has no altsetting 0 [ 825.666050][ T5916] usb 1-1: config 8 interface 55 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 825.680031][ T5916] usb 1-1: New USB device found, idVendor=134c, idProduct=0003, bcdDevice=b6.8d [ 825.690349][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.710352][ T5916] usb 1-1: Product: syz [ 825.714626][ T5916] usb 1-1: Manufacturer: syz [ 825.721572][ T897] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 825.731178][ T897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.731832][ T5916] usb 1-1: SerialNumber: syz [ 825.761751][ T897] usb 2-1: Product: syz [ 825.777855][ T897] usb 2-1: Manufacturer: syz [ 825.782507][ T897] usb 2-1: SerialNumber: syz [ 825.784345][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 825.798673][T18422] usbtmc 7-1:16.0: Unable to send data, error -71 [ 825.921078][T18422] kvm: apic: phys broadcast and lowest prio [ 826.044870][ T5916] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.55/input/input114 [ 826.131254][T12271] usb 7-1: USB disconnect, device number 78 [ 826.157386][ T5916] usb 1-1: USB disconnect, device number 72 [ 826.356216][T18424] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.363999][T18424] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.843503][T11168] IPVS: stop unused estimator thread 0... [ 827.011159][T18443] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.3180'. [ 827.026375][T12271] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 827.026817][T18443] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 827.157679][T18447] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 827.202634][T12271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 827.214180][T12271] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 827.225597][T12271] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 827.236616][T12271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.251179][T12271] usb 1-1: config 0 descriptor?? [ 827.257107][T18437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 828.130978][ T897] xr_serial 2-1:127.171: xr_serial converter detected [ 828.178612][ T897] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 828.185035][ T897] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 828.289057][ T897] usb 2-1: USB disconnect, device number 80 [ 828.329251][ T897] xr_serial 2-1:127.171: device disconnected [ 828.537915][ T5885] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 828.852985][ T5885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.907942][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.967608][ T5885] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.982258][T18479] netlink: 'syz.0.3192': attribute type 1 has an invalid length. [ 829.007355][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.037892][ T5885] usb 5-1: Product: syz [ 829.042198][ T5885] usb 5-1: Manufacturer: syz [ 829.069983][ T5885] usb 5-1: SerialNumber: syz [ 829.117144][ T5885] cdc_mbim 5-1:1.0: skipping garbage [ 829.123954][T18479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 829.165951][ T5885] usb 5-1: selecting invalid altsetting 1 [ 829.215625][T18481] bond1: (slave geneve2): making interface the new active one [ 829.238100][T12274] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 829.267069][T18481] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 829.318695][ T5885] cdc_mbim 5-1:1.0: bind() failure [ 829.384184][ T5885] usb 5-1: USB disconnect, device number 75 [ 829.408632][T12274] usb 2-1: Using ep0 maxpacket: 32 [ 829.433245][T12274] usb 2-1: config 0 has an invalid interface number: 36 but max is 0 [ 829.474249][T12274] usb 2-1: config 0 has no interface number 0 [ 829.516889][T12274] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=1b.c4 [ 829.558799][T12274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.575230][T12274] usb 2-1: Product: syz [ 829.583599][T12274] usb 2-1: Manufacturer: syz [ 829.602129][T12274] usb 2-1: SerialNumber: syz [ 829.619632][T12274] usb 2-1: config 0 descriptor?? [ 829.851616][T18478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.893286][T18478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.925834][T12274] cx82310_eth 2-1:0.36: probe with driver cx82310_eth failed with error -71 [ 829.944424][T12274] cxacru 2-1:0.36: usbatm_usb_probe: bind failed: -19! [ 829.975037][T12274] usb 2-1: USB disconnect, device number 81 [ 830.073817][T18495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3197'. [ 830.119432][T18495] vlan3: entered allmulticast mode [ 830.124850][T18495] bridge0: entered allmulticast mode [ 830.131917][T18495] bridge2: port 1(vlan3) entered blocking state [ 830.141410][T18495] bridge2: port 1(vlan3) entered disabled state [ 830.152234][T18495] vlan3: entered promiscuous mode [ 830.157345][T18495] bridge0: entered promiscuous mode [ 830.267905][T12269] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 830.454266][T12269] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 830.487924][T12269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.496045][T12269] usb 7-1: Product: syz [ 830.527873][T12269] usb 7-1: Manufacturer: syz [ 830.532510][T12269] usb 7-1: SerialNumber: syz [ 830.560207][T12269] usb 7-1: config 0 descriptor?? [ 830.573086][T12271] ath6kl: Failed to submit usb control message: -71 [ 830.580099][T12271] ath6kl: unable to send the bmi data to the device: -71 [ 830.587213][T12271] ath6kl: Unable to send get target info: -71 [ 830.598735][T12271] ath6kl: Failed to init ath6kl core: -71 [ 830.605830][T12271] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 830.616259][T18501] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 830.620063][T12682] Bluetooth: hci0: urb ffff8880315ff300 submission failed (2) [ 830.624979][T18501] syzkaller1: linktype set to 823 [ 830.641908][T12271] usb 1-1: USB disconnect, device number 73 [ 830.805677][ T5916] usb 7-1: USB disconnect, device number 79 [ 831.120561][T12271] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 831.279853][T12271] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 831.288557][T12271] usb 1-1: config 1 has no interface number 0 [ 831.295102][T12271] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 831.305672][T12271] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 831.320066][T12271] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 831.330067][T12271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.342093][T12271] usb 1-1: Product: syz [ 831.346356][T12271] usb 1-1: Manufacturer: syz [ 831.353514][T12271] usb 1-1: SerialNumber: syz [ 831.364244][T18506] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 831.374874][T18506] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 831.386184][T12271] usb 1-1: Expected 3 endpoints, found: 2 [ 831.563266][T18517] IPVS: ip_vs_edit_dest(): server weight less than zero [ 831.571840][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 831.571857][ T30] audit: type=1326 audit(1764071130.591:15857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.6.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaef38f749 code=0x7ffc0000 [ 831.600732][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.770928][ T30] audit: type=1326 audit(1764071130.591:15858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.6.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaef38f749 code=0x7ffc0000 [ 831.830374][T18501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.843385][T18501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.875021][T12271] usb 1-1: USB disconnect, device number 74 [ 831.916520][ T30] audit: type=1326 audit(1764071130.591:15859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.6.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7feaef38f749 code=0x7ffc0000 [ 832.007916][T12274] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 832.068090][ T30] audit: type=1326 audit(1764071130.591:15860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.6.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaef38f749 code=0x7ffc0000 [ 832.121166][ T30] audit: type=1326 audit(1764071130.591:15861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.6.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaef38f749 code=0x7ffc0000 [ 832.223371][T12274] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 832.240265][ T30] audit: type=1326 audit(1764071130.591:15862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.6.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feaef38f749 code=0x7ffc0000 [ 832.265347][T12274] usb 2-1: can't read configurations, error -61 [ 832.277972][ T30] audit: type=1326 audit(1764071130.601:15863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.6.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaef38f749 code=0x7ffc0000 [ 832.300776][ T30] audit: type=1326 audit(1764071130.601:15864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.6.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaef38f749 code=0x7ffc0000 [ 832.328554][ T30] audit: type=1326 audit(1764071130.601:15865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.6.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feaef38f749 code=0x7ffc0000 [ 832.351468][ T30] audit: type=1326 audit(1764071130.601:15866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.6.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaef38f749 code=0x7ffc0000 [ 832.438010][T12274] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 832.616151][T12274] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 832.627183][T12274] usb 2-1: can't read configurations, error -61 [ 832.689025][T12274] usb usb2-port1: attempt power cycle [ 832.922527][T18531] Set syz0 is full, maxelem 0 reached [ 833.007841][ T5885] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 833.061782][T18537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.077506][T18537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.078490][T12274] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 833.130886][T12274] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 833.138878][T12274] usb 2-1: can't read configurations, error -61 [ 833.181847][T18540] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3209'. [ 833.197834][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 833.211734][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 833.224503][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 833.239441][ T5885] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 833.272046][T12274] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 833.288025][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.332697][ T5885] usb 7-1: Product: syz [ 833.347874][ T5885] usb 7-1: Manufacturer: syz [ 833.352646][T12274] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 833.360440][ T5885] usb 7-1: SerialNumber: syz [ 833.365096][T12274] usb 2-1: can't read configurations, error -61 [ 833.374395][ T5885] usb 7-1: config 0 descriptor?? [ 833.379578][T12274] usb usb2-port1: unable to enumerate USB device [ 833.394980][ T5885] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 833.425652][ T5885] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 834.005365][ T5885] em28xx 7-1:0.0: chip ID is em28174 [ 834.127904][T12274] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 834.224181][T18528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.248217][T18528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.264234][ T5920] usb 7-1: USB disconnect, device number 80 [ 834.275052][ T5920] em28xx 7-1:0.0: Disconnecting em28xx [ 834.314228][ T5920] em28xx 7-1:0.0: Freeing device [ 834.327008][T12274] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 834.339685][T12274] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 834.352057][T12274] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 834.366651][T12274] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.391554][T12274] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 834.405094][T12274] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 834.420988][T12274] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 834.435114][T12274] usb 1-1: config 168 interface 0 has no altsetting 0 [ 834.443093][T12274] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 834.450662][T12274] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 834.462700][T12274] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 834.474000][T12274] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.486015][T12274] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 834.499754][T12274] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 834.513559][T12274] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 834.533674][T12274] usb 1-1: config 168 interface 0 has no altsetting 0 [ 834.543747][T12274] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 834.551552][T12274] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 834.563212][T12274] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 834.575532][T12274] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 834.588674][T12274] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 834.600685][T12274] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 834.613905][T12274] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 834.628054][T12274] usb 1-1: config 168 interface 0 has no altsetting 0 [ 834.639483][T12274] usb 1-1: string descriptor 0 read error: -22 [ 834.645853][T12274] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 834.655544][T12274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.679066][T12274] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 835.127847][T12269] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 835.210794][T18576] netlink: 'syz.7.3218': attribute type 1 has an invalid length. [ 835.244591][T12289] usb 1-1: USB disconnect, device number 75 [ 835.292728][T12269] usb 2-1: unable to get BOS descriptor set [ 835.304443][T12269] usb 2-1: not running at top speed; connect to a high speed hub [ 835.323622][T12269] usb 2-1: too many configurations: 230, using maximum allowed: 8 [ 835.360815][T12269] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 835.373420][T12269] usb 2-1: can't read configurations, error -61 [ 835.411482][T18578] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 835.517830][T12269] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 835.684383][T12269] usb 2-1: unable to get BOS descriptor set [ 835.697187][T12269] usb 2-1: not running at top speed; connect to a high speed hub [ 835.706337][T12269] usb 2-1: too many configurations: 230, using maximum allowed: 8 [ 835.721943][T12269] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 835.738285][T12269] usb 2-1: can't read configurations, error -61 [ 835.745457][T12269] usb usb2-port1: attempt power cycle [ 836.097525][T12269] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 836.139519][T12269] usb 2-1: unable to get BOS descriptor set [ 836.147116][T12269] usb 2-1: not running at top speed; connect to a high speed hub [ 836.155140][T12269] usb 2-1: too many configurations: 230, using maximum allowed: 8 [ 836.179562][T12269] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 836.187596][T12269] usb 2-1: can't read configurations, error -61 [ 836.297898][T12274] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 836.356623][T12269] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 836.449210][T12269] usb 2-1: unable to get BOS descriptor set [ 836.456725][T12269] usb 2-1: not running at top speed; connect to a high speed hub [ 836.487918][T12274] usb 1-1: Using ep0 maxpacket: 16 [ 836.493333][T12269] usb 2-1: too many configurations: 230, using maximum allowed: 8 [ 836.514978][T12269] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 836.527946][T12269] usb 2-1: can't read configurations, error -61 [ 836.535831][T12269] usb usb2-port1: unable to enumerate USB device [ 836.547894][T12274] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 836.801390][T18603] netlink: set zone limit has 4 unknown bytes [ 836.817526][T12274] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 836.885109][T12274] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 836.991385][T12274] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 837.015638][T12274] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 837.029066][T12274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.039809][T12274] usb 1-1: Product: syz [ 837.054689][T12274] usb 1-1: Manufacturer: syz [ 837.087920][T12274] usb 1-1: SerialNumber: syz [ 837.317621][T18588] netlink: 'syz.0.3222': attribute type 6 has an invalid length. [ 837.450644][T18623] dlm: no locking on control device [ 837.503515][T12274] usb 1-1: USB disconnect, device number 76 [ 837.589405][T16620] udevd[16620]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 837.837582][T18634] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3233'. [ 837.855509][T18634] bond0: entered promiscuous mode [ 837.860940][T18634] bond_slave_0: entered promiscuous mode [ 837.866860][T18634] bond_slave_1: entered promiscuous mode [ 837.899777][T18634] bond0: left promiscuous mode [ 837.911679][T18634] bond_slave_0: left promiscuous mode [ 837.919939][T18634] bond_slave_1: left promiscuous mode [ 838.156382][T18649] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3235'. [ 838.307827][T12271] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 838.474241][T12271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.501006][ T5916] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 838.506470][T12271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.698271][T12271] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 838.707551][T12271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.749969][ T5916] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 838.783864][ T5916] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 838.814949][ T5916] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 838.856083][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.872295][T12271] usb 5-1: config 0 descriptor?? [ 839.123218][T18649] syz.0.3235 (18649): drop_caches: 2 [ 839.485538][T12271] usbhid 5-1:0.0: can't add hid device: -71 [ 839.512807][T12271] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 839.561635][T12271] usb 5-1: USB disconnect, device number 76 [ 839.827846][T12269] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 839.990657][T12269] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 840.001929][T12269] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 840.013796][T12269] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 840.032634][T12269] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 840.042148][T12269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.050325][T12269] usb 7-1: Product: syz [ 840.054697][T12269] usb 7-1: Manufacturer: syz [ 840.061014][T12269] usb 7-1: SerialNumber: syz [ 840.067483][T12269] usb 7-1: config 0 descriptor?? [ 840.076337][T18668] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 840.084080][T18668] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 840.093489][T12269] usb 7-1: ucan: probing device on interface #0 [ 840.922133][T12289] usb 2-1: USB disconnect, device number 90 [ 841.110332][T18678] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 841.338427][T12269] usb 7-1: ucan: failed to retrieve device info [ 841.344869][T12269] usb 7-1: ucan: probe failed; try to update the device firmware [ 843.123412][T12269] usb 7-1: USB disconnect, device number 81 [ 843.760241][T18723] loop5: detected capacity change from 0 to 7 [ 843.767309][T18723] Dev loop5: unable to read RDB block 7 [ 843.773850][T18723] loop5: unable to read partition table [ 843.780220][T18723] loop5: partition table beyond EOD, truncated [ 843.786557][T18723] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 844.628117][ T5916] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 844.793948][ T5916] usb 5-1: unable to get BOS descriptor or descriptor too short [ 844.822975][ T5916] usb 5-1: config 0 has an invalid interface number: 242 but max is 0 [ 844.843776][ T5916] usb 5-1: config 0 has no interface number 0 [ 844.850287][ T5916] usb 5-1: config 0 interface 242 altsetting 64 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 844.861810][ T5916] usb 5-1: config 0 interface 242 has no altsetting 0 [ 844.871232][ T5916] usb 5-1: New USB device found, idVendor=15eb, idProduct=0001, bcdDevice=36.02 [ 844.907833][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.926270][ T5916] usb 5-1: Product: syz [ 844.931267][ T5916] usb 5-1: Manufacturer: syz [ 844.936028][ T5916] usb 5-1: SerialNumber: syz [ 844.956737][ T5916] usb 5-1: config 0 descriptor?? [ 845.089956][T18742] netlink: 'syz.0.3264': attribute type 1 has an invalid length. [ 845.101326][T18742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.180342][ T5916] option 5-1:0.242: GSM modem (1-port) converter detected [ 845.189965][T12274] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 845.201578][ T5916] usb 5-1: USB disconnect, device number 77 [ 845.215440][ T5916] option 5-1:0.242: device disconnected [ 845.357832][T12274] usb 7-1: Using ep0 maxpacket: 8 [ 845.365274][T12274] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 845.374081][T12274] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 845.385912][T12274] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 845.398880][T12274] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 845.410809][T12274] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 845.419084][T12274] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 845.430642][T12274] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 845.442619][T12274] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 845.457958][T12274] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 845.465521][T12274] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 845.476942][T12274] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 845.488941][T12274] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 845.501482][T12274] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 845.510780][T12274] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.518826][T12274] usb 7-1: Product: syz [ 845.523105][T12274] usb 7-1: Manufacturer: syz [ 845.527694][T12274] usb 7-1: SerialNumber: syz [ 845.743795][T12274] adutux 7-1:168.0: interrupt endpoints not found [ 845.765431][T12274] usb 7-1: USB disconnect, device number 82 [ 846.392640][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3272'. [ 846.454452][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3272'. [ 846.473672][T18766] fuse: Bad value for 'rootmode' [ 846.528261][T12274] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 846.687357][T12274] usb 1-1: Using ep0 maxpacket: 16 [ 846.715296][T12274] usb 1-1: config 132 has an invalid interface number: 4 but max is 0 [ 846.717933][T12271] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 846.724076][T12274] usb 1-1: config 132 has no interface number 0 [ 846.738074][T12274] usb 1-1: config 132 interface 4 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 846.757565][T12274] usb 1-1: config 132 interface 4 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 431 [ 846.768448][T12274] usb 1-1: config 132 interface 4 altsetting 0 endpoint 0xF has an invalid bInterval 241, changing to 11 [ 846.784384][T12274] usb 1-1: New USB device found, idVendor=34ef, idProduct=202b, bcdDevice=36.09 [ 846.793746][T12274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.804909][T12274] usb 1-1: Product: syz [ 846.809198][T12274] usb 1-1: Manufacturer: syz [ 846.813813][T12274] usb 1-1: SerialNumber: syz [ 846.821383][T18761] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 846.828872][T18761] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 846.887857][T12271] usb 7-1: Using ep0 maxpacket: 32 [ 846.894695][T12271] usb 7-1: config 1 has an invalid interface number: 137 but max is 0 [ 846.903909][T12271] usb 7-1: config 1 has no interface number 0 [ 846.910457][T12271] usb 7-1: config 1 interface 137 has no altsetting 0 [ 846.922356][T12271] usb 7-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 846.931486][T12271] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.939689][T12271] usb 7-1: Product: syz [ 846.943861][T12271] usb 7-1: Manufacturer: syz [ 846.948546][T12271] usb 7-1: SerialNumber: syz [ 847.062163][T12274] usb 1-1: USB disconnect, device number 77 [ 847.162777][T12271] pl2303 7-1:1.137: required interrupt-in endpoint missing [ 847.173621][T12271] usb 7-1: USB disconnect, device number 83 [ 847.481959][T18774] xt_CT: No such helper "snmp_trap" [ 847.550457][T12289] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 847.758830][T12289] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 847.781845][T12289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.813860][T12289] usb 5-1: Product: syz [ 847.829699][T12289] usb 5-1: Manufacturer: syz [ 847.844584][T12289] usb 5-1: SerialNumber: syz [ 847.858580][T12271] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 847.879393][T12289] usb 5-1: config 0 descriptor?? [ 848.037852][T12271] usb 1-1: Using ep0 maxpacket: 16 [ 848.048714][T12271] usb 1-1: config 149 has an invalid interface number: 17 but max is 0 [ 848.058304][T12271] usb 1-1: config 149 has no interface number 0 [ 848.067552][T12271] usb 1-1: config 149 interface 17 has no altsetting 0 [ 848.080825][T12271] usb 1-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=65.f4 [ 848.091817][T12271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.107924][T12274] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 848.107990][T12289] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 848.124012][T12271] usb 1-1: Product: syz [ 848.128385][T12271] usb 1-1: Manufacturer: syz [ 848.133014][T12271] usb 1-1: SerialNumber: syz [ 848.300155][T12274] usb 2-1: Invalid ep0 maxpacket: 32 [ 848.372686][T12289] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 848.395630][T12271] cypress_m8 1-1:149.17: HID->COM RS232 Adapter converter detected [ 848.409036][T12289] usb 5-1: USB disconnect, device number 78 [ 848.416536][T12271] cyphidcom ttyUSB0: required endpoint is missing [ 848.437302][T12271] usb 1-1: USB disconnect, device number 78 [ 848.438498][T12274] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 848.449267][T12271] cypress_m8 1-1:149.17: device disconnected [ 848.597948][T12274] usb 2-1: Invalid ep0 maxpacket: 32 [ 848.603816][T12274] usb usb2-port1: attempt power cycle [ 848.830764][T18809] 8021q: VLANs not supported on ip6gre0 [ 848.960213][T12274] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 848.988675][T12274] usb 2-1: Invalid ep0 maxpacket: 32 [ 849.117853][T12274] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 849.138408][T12274] usb 2-1: Invalid ep0 maxpacket: 32 [ 849.143978][T12274] usb usb2-port1: unable to enumerate USB device [ 849.167945][ T5916] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 849.309464][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 849.309482][ T30] audit: type=1800 audit(1764071148.341:15879): pid=18817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3286" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 849.338144][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 849.347444][T18815] netlink: 'syz.0.3285': attribute type 1 has an invalid length. [ 849.361500][T18815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.376957][T18815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.377124][T18820] netlink: 'syz.0.3285': attribute type 1 has an invalid length. [ 849.417386][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 849.429949][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 849.439469][ T5916] usb 1-1: can't read configurations, error -71 [ 849.641181][T12271] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 849.803097][T12271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.826092][T12271] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 849.836473][T12271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.873708][T12271] usb 5-1: config 0 descriptor?? [ 850.116090][T12271] usbhid 5-1:0.0: can't add hid device: -71 [ 850.127978][T12271] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 850.141681][T12271] usb 5-1: USB disconnect, device number 79 [ 850.518726][T12271] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 850.545848][T18851] 8021q: VLANs not supported on ip6gre0 [ 850.677835][T12271] usb 5-1: Using ep0 maxpacket: 32 [ 850.684426][T12271] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 850.693369][T12271] usb 5-1: config 0 has no interface number 0 [ 850.701610][T12271] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 850.713620][T12271] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 850.733703][T12271] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 850.745325][T12271] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 850.755725][T12271] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 850.769091][T12271] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 850.779835][T12271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.789557][T12269] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 850.797297][T12271] usb 5-1: Product: syz [ 850.802040][T12271] usb 5-1: Manufacturer: syz [ 850.806942][T12271] usb 5-1: SerialNumber: syz [ 850.823713][T12271] usb 5-1: config 0 descriptor?? [ 850.834245][T18842] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 850.948779][T12274] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 850.959939][T12269] usb 7-1: config 0 has an invalid interface number: 127 but max is 1 [ 850.973995][T12269] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 850.986865][T12269] usb 7-1: config 0 has no interface number 1 [ 850.993457][T12269] usb 7-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 851.006997][T12269] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 851.023737][T12269] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 851.034176][T12269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.042772][T12269] usb 7-1: Product: syz [ 851.048147][T12269] usb 7-1: Manufacturer: syz [ 851.052796][T12269] usb 7-1: SerialNumber: syz [ 851.079905][T18866] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 851.083073][T12269] usb 7-1: config 0 descriptor?? [ 851.109423][T18866] kvm: kvm [18865]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 851.113183][T12271] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 851.125388][T18866] kvm: kvm [18865]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 851.130214][T12271] etas_es58x 5-1:0.219: could not retrieve the product info string [ 851.135548][T12274] usb 2-1: Using ep0 maxpacket: 16 [ 851.149184][T12269] usb-storage 7-1:0.127: USB Mass Storage device detected [ 851.150493][T12274] usb 2-1: unable to get BOS descriptor or descriptor too short [ 851.180682][T12274] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 851.184350][T12269] usb-storage 7-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 851.191723][T12274] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 851.212835][T12274] usb 2-1: config 13 has no interface number 0 [ 851.227202][T12271] usb 5-1: USB disconnect, device number 80 [ 851.248380][T12274] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 851.259637][T12274] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 851.261500][T12271] etas_es58x 5-1:0.219: Disconnecting syz syz [ 851.273825][T12274] usb 2-1: config 13 interface 50 has no altsetting 0 [ 851.279547][T12269] usb-storage 7-1:0.0: USB Mass Storage device detected [ 851.292220][T12274] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 851.305434][T12269] usb-storage 7-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 851.310557][T12274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.323666][T12274] usb 2-1: Product: syz [ 851.334601][T12274] usb 2-1: Manufacturer: syz [ 851.347419][T12274] usb 2-1: SerialNumber: syz [ 851.382472][T18860] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 851.396203][T12269] usb 7-1: USB disconnect, device number 84 [ 851.645837][T18879] "syz.7.3301" (18879) uses obsolete ecb(arc4) skcipher [ 852.339859][T18901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3305'. [ 852.477088][T18905] 8021q: VLANs not supported on ip6gre0 [ 852.498209][T18908] FAULT_INJECTION: forcing a failure. [ 852.498209][T18908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.532942][T18908] CPU: 1 UID: 0 PID: 18908 Comm: syz.6.3307 Not tainted syzkaller #0 PREEMPT(full) [ 852.532966][T18908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.532979][T18908] Call Trace: [ 852.532988][T18908] [ 852.532997][T18908] dump_stack_lvl+0x189/0x250 [ 852.533018][T18908] ? __pfx____ratelimit+0x10/0x10 [ 852.533038][T18908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 852.533060][T18908] ? __pfx__printk+0x10/0x10 [ 852.533079][T18908] ? __might_fault+0xb0/0x130 [ 852.533114][T18908] should_fail_ex+0x414/0x560 [ 852.533135][T18908] _copy_from_user+0x2d/0xb0 [ 852.533149][T18908] ___sys_sendmsg+0x158/0x2a0 [ 852.533163][T18908] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.533202][T18908] ? __fget_files+0x2a/0x420 [ 852.533220][T18908] ? __fget_files+0x3a0/0x420 [ 852.533248][T18908] __x64_sys_sendmsg+0x19b/0x260 [ 852.533269][T18908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.533286][T18908] ? __pfx_ksys_write+0x10/0x10 [ 852.533301][T18908] ? do_syscall_64+0xbe/0xfa0 [ 852.533317][T18908] do_syscall_64+0xfa/0xfa0 [ 852.533331][T18908] ? lockdep_hardirqs_on+0x9c/0x150 [ 852.533354][T18908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.533372][T18908] ? clear_bhb_loop+0x60/0xb0 [ 852.533394][T18908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.533411][T18908] RIP: 0033:0x7feaef38f749 [ 852.533425][T18908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.533435][T18908] RSP: 002b:00007feaf01f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.533446][T18908] RAX: ffffffffffffffda RBX: 00007feaef5e5fa0 RCX: 00007feaef38f749 [ 852.533454][T18908] RDX: 0000000020000004 RSI: 0000200000000440 RDI: 0000000000000003 [ 852.533461][T18908] RBP: 00007feaf01f8090 R08: 0000000000000000 R09: 0000000000000000 [ 852.533467][T18908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.533473][T18908] R13: 00007feaef5e6038 R14: 00007feaef5e5fa0 R15: 00007feaef70fa28 [ 852.533500][T18908] [ 853.268864][ T5916] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 853.328205][ T5920] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 853.334991][T18920] netlink: 'syz.7.3311': attribute type 1 has an invalid length. [ 853.448154][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 853.457511][ T5916] usb 7-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 853.466847][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.477214][ T5916] usb 7-1: config 0 descriptor?? [ 853.489653][ T5916] rndis_host 7-1:0.0: probe with driver rndis_host failed with error -22 [ 853.528299][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 853.535381][ T5920] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 853.545272][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.555622][ T5920] usb 1-1: config 0 descriptor?? [ 853.669962][T12274] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 853.688460][ T5916] usb 7-1: USB disconnect, device number 85 [ 853.708353][T12274] usb 2-1: MIDIStreaming interface descriptor not found [ 853.772346][ T5920] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 853.810914][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 853.830719][T12274] usb 2-1: USB disconnect, device number 95 [ 853.851097][T18926] kvm: Disabled LAPIC found during irq injection [ 853.853429][ T5920] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 853.869059][ T5920] usb 1-1: media controller created [ 853.913946][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.958517][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.108129][T12271] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 854.182200][ T5920] az6027: usb out operation failed. (-71) [ 854.189021][ T5920] stb0899_attach: Driver disabled by Kconfig [ 854.198840][ T5920] az6027: no front-end attached [ 854.198840][ T5920] [ 854.206515][ T5920] az6027: usb out operation failed. (-71) [ 854.215095][ T5920] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 854.242065][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input116 [ 854.247888][T12271] usb 5-1: device descriptor read/64, error -71 [ 854.291003][ T5920] dvb-usb: schedule remote query interval to 400 msecs. [ 854.299012][ T5920] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 854.313751][ T5920] usb 1-1: USB disconnect, device number 81 [ 854.470619][ T5920] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 854.526356][T12271] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 854.552788][T18935] netlink: 'syz.6.3316': attribute type 14 has an invalid length. [ 854.561998][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3316'. [ 854.576872][T18935] netlink: 'syz.6.3316': attribute type 14 has an invalid length. [ 854.587060][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3316'. [ 854.677991][T12271] usb 5-1: device descriptor read/64, error -71 [ 854.706251][T18942] hub 9-0:1.0: USB hub found [ 854.711267][T18942] hub 9-0:1.0: 1 port detected [ 854.751938][T18944] FAULT_INJECTION: forcing a failure. [ 854.751938][T18944] name failslab, interval 1, probability 0, space 0, times 0 [ 854.765418][T18944] CPU: 1 UID: 0 PID: 18944 Comm: syz.0.3319 Not tainted syzkaller #0 PREEMPT(full) [ 854.765433][T18944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 854.765440][T18944] Call Trace: [ 854.765444][T18944] [ 854.765449][T18944] dump_stack_lvl+0x189/0x250 [ 854.765467][T18944] ? __pfx____ratelimit+0x10/0x10 [ 854.765481][T18944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 854.765494][T18944] ? __pfx__printk+0x10/0x10 [ 854.765509][T18944] ? __pfx___might_resched+0x10/0x10 [ 854.765520][T18944] ? fs_reclaim_acquire+0x7d/0x100 [ 854.765537][T18944] should_fail_ex+0x414/0x560 [ 854.765554][T18944] should_failslab+0xa8/0x100 [ 854.765566][T18944] kmem_cache_alloc_node_noprof+0x77/0x710 [ 854.765580][T18944] ? __alloc_skb+0x112/0x2d0 [ 854.765589][T18944] ? netlink_autobind+0xdb/0x300 [ 854.765602][T18944] __alloc_skb+0x112/0x2d0 [ 854.765614][T18944] netlink_sendmsg+0x5c6/0xb30 [ 854.765628][T18944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.765640][T18944] ? aa_sock_msg_perm+0xf1/0x1d0 [ 854.765656][T18944] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 854.765666][T18944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.765676][T18944] __sock_sendmsg+0x21c/0x270 [ 854.765692][T18944] ____sys_sendmsg+0x505/0x830 [ 854.765706][T18944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 854.765721][T18944] ? import_iovec+0x74/0xa0 [ 854.765735][T18944] ___sys_sendmsg+0x21f/0x2a0 [ 854.765753][T18944] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.765781][T18944] ? __fget_files+0x2a/0x420 [ 854.765791][T18944] ? __fget_files+0x3a0/0x420 [ 854.765805][T18944] __x64_sys_sendmsg+0x19b/0x260 [ 854.765818][T18944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 854.765841][T18944] ? __pfx_ksys_write+0x10/0x10 [ 854.765857][T18944] ? do_syscall_64+0xbe/0xfa0 [ 854.765872][T18944] do_syscall_64+0xfa/0xfa0 [ 854.765885][T18944] ? lockdep_hardirqs_on+0x9c/0x150 [ 854.765898][T18944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.765908][T18944] ? clear_bhb_loop+0x60/0xb0 [ 854.765921][T18944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.765930][T18944] RIP: 0033:0x7fc5a978f749 [ 854.765941][T18944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.765950][T18944] RSP: 002b:00007fc5a79f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.765962][T18944] RAX: ffffffffffffffda RBX: 00007fc5a99e5fa0 RCX: 00007fc5a978f749 [ 854.765970][T18944] RDX: 0000000020000004 RSI: 0000200000000440 RDI: 0000000000000003 [ 854.765976][T18944] RBP: 00007fc5a79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 854.765982][T18944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.765988][T18944] R13: 00007fc5a99e6038 R14: 00007fc5a99e5fa0 R15: 00007fc5a9b0fa28 [ 854.766004][T18944] [ 855.057066][T12271] usb usb5-port1: attempt power cycle [ 855.127967][T12269] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 855.257885][T12269] usb 7-1: device descriptor read/64, error -71 [ 855.407884][T12271] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 855.428672][T12271] usb 5-1: device descriptor read/8, error -71 [ 855.457857][ T5920] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 855.507850][T12269] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 855.607850][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 855.629593][ T5920] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 855.647879][T12269] usb 7-1: device descriptor read/64, error -71 [ 855.647881][ T5920] usb 1-1: config 0 has no interface number 0 [ 855.647927][ T5920] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 855.678040][T12271] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 855.696116][ T5920] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 855.705520][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.713864][ T5920] usb 1-1: Product: syz [ 855.718552][T12271] usb 5-1: device descriptor read/8, error -71 [ 855.721636][ T5920] usb 1-1: Manufacturer: syz [ 855.730928][ T5920] usb 1-1: SerialNumber: syz [ 855.741397][ T5920] usb 1-1: config 0 descriptor?? [ 855.749917][ T5920] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 855.759999][ T5920] em28xx 1-1:0.132: Video interface 132 found: [ 855.778338][T12269] usb usb7-port1: attempt power cycle [ 855.839044][T12271] usb usb5-port1: unable to enumerate USB device [ 856.117867][T12269] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 856.143540][T12269] usb 7-1: device descriptor read/8, error -71 [ 856.151771][ T5920] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 856.388567][T12269] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 856.419432][T12269] usb 7-1: device descriptor read/8, error -71 [ 856.528278][T12269] usb usb7-port1: unable to enumerate USB device [ 856.561806][ T5920] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 856.566731][T18952] netlink: 3100 bytes leftover after parsing attributes in process `syz.0.3322'. [ 856.597893][ T5920] em28xx 1-1:0.132: board has no eeprom [ 856.677969][ T5920] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 856.685966][ T5920] em28xx 1-1:0.132: analog set to bulk mode. [ 856.692483][T12274] em28xx 1-1:0.132: Registering V4L2 extension [ 856.897937][ T5885] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 856.955299][T18974] netlink: 'syz.4.3329': attribute type 3 has an invalid length. [ 856.972957][T18974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.032337][T12274] em28xx 1-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 857.032721][T12288] usb 1-1: USB disconnect, device number 82 [ 857.061797][T12288] em28xx 1-1:0.132: Disconnecting em28xx [ 857.082544][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 857.107789][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 857.128789][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.175830][ T5885] usb 2-1: config 0 descriptor?? [ 857.330962][T12274] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 857.348301][T12274] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 857.365352][T18983] xt_TPROXY: Can be used only with -p tcp or -p udp [ 857.372163][T12274] em28xx 1-1:0.132: No AC97 audio processor [ 857.391140][T12274] usb 1-1: Decoder not found [ 857.411266][T12274] em28xx 1-1:0.132: failed to create media graph [ 857.471735][T12274] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 857.524247][T12274] em28xx 1-1:0.132: Remote control support is not available for this card. [ 857.536150][T18984] ================================================================== [ 857.544244][T18984] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 857.551813][T18984] Read of size 8 at addr ffff888050a94740 by task v4l_id/18984 [ 857.559364][T18984] [ 857.561702][T18984] CPU: 1 UID: 0 PID: 18984 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 857.561726][T18984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 857.561737][T18984] Call Trace: [ 857.561745][T18984] [ 857.561753][T18984] dump_stack_lvl+0x189/0x250 [ 857.561781][T18984] ? __virt_addr_valid+0x1c8/0x5c0 [ 857.561804][T18984] ? rcu_is_watching+0x15/0xb0 [ 857.561824][T18984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 857.561845][T18984] ? rcu_is_watching+0x15/0xb0 [ 857.561864][T18984] ? lock_release+0x4b/0x3e0 [ 857.561880][T18984] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 857.561904][T18984] ? __virt_addr_valid+0x1c8/0x5c0 [ 857.561926][T18984] ? __virt_addr_valid+0x4a5/0x5c0 [ 857.561948][T18984] print_report+0xca/0x240 [ 857.561968][T18984] ? v4l2_fh_open+0xac/0x420 [ 857.561986][T18984] kasan_report+0x118/0x150 [ 857.562005][T18984] ? v4l2_fh_open+0xac/0x420 [ 857.562025][T18984] v4l2_fh_open+0xac/0x420 [ 857.562042][T18984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 857.562069][T18984] em28xx_v4l2_open+0x157/0x9a0 [ 857.562099][T18984] v4l2_open+0x1bf/0x3a0 [ 857.562138][T18984] chrdev_open+0x4cc/0x5e0 [ 857.562157][T18984] ? __pfx_chrdev_open+0x10/0x10 [ 857.562174][T18984] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 857.562196][T18984] ? __pfx_chrdev_open+0x10/0x10 [ 857.562212][T18984] do_dentry_open+0x953/0x13f0 [ 857.562237][T18984] vfs_open+0x3b/0x340 [ 857.562253][T18984] ? path_openat+0x2ecd/0x3830 [ 857.562283][T18984] path_openat+0x2ee5/0x3830 [ 857.562318][T18984] ? __pfx_path_openat+0x10/0x10 [ 857.562346][T18984] do_filp_open+0x1fa/0x410 [ 857.562366][T18984] ? __lock_acquire+0xab9/0xd20 [ 857.562383][T18984] ? __pfx_do_filp_open+0x10/0x10 [ 857.562413][T18984] ? _raw_spin_unlock+0x28/0x50 [ 857.562433][T18984] ? alloc_fd+0x64c/0x6c0 [ 857.562461][T18984] do_sys_openat2+0x121/0x1c0 [ 857.562482][T18984] ? __pfx_do_sys_openat2+0x10/0x10 [ 857.562502][T18984] ? exc_page_fault+0x82/0x100 [ 857.562525][T18984] ? do_user_addr_fault+0xc85/0x1380 [ 857.562544][T18984] __x64_sys_openat+0x138/0x170 [ 857.562566][T18984] do_syscall_64+0xfa/0xfa0 [ 857.562589][T18984] ? lockdep_hardirqs_on+0x9c/0x150 [ 857.562611][T18984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.562629][T18984] ? clear_bhb_loop+0x60/0xb0 [ 857.562648][T18984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.562665][T18984] RIP: 0033:0x7fa878aa7407 [ 857.562683][T18984] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 857.562699][T18984] RSP: 002b:00007ffe18d11f60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 857.562720][T18984] RAX: ffffffffffffffda RBX: 00007fa8791f9880 RCX: 00007fa878aa7407 [ 857.562734][T18984] RDX: 0000000000000000 RSI: 00007ffe18d12f1b RDI: ffffffffffffff9c [ 857.562747][T18984] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 857.562758][T18984] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 857.562770][T18984] R13: 00007ffe18d121b0 R14: 00007fa879360000 R15: 0000560c864cd4d8 [ 857.562791][T18984] [ 857.562798][T18984] [ 857.866052][T18984] Allocated by task 12274: [ 857.870469][T18984] kasan_save_track+0x3e/0x80 [ 857.875151][T18984] __kasan_kmalloc+0x93/0xb0 [ 857.879731][T18984] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 857.885099][T18984] em28xx_v4l2_init+0x10b/0x2e70 [ 857.890059][T18984] em28xx_init_extension+0x120/0x1c0 [ 857.895348][T18984] process_scheduled_works+0xae1/0x17b0 [ 857.900880][T18984] worker_thread+0x8a0/0xda0 [ 857.905458][T18984] kthread+0x711/0x8a0 [ 857.909521][T18984] ret_from_fork+0x4bc/0x870 [ 857.914103][T18984] ret_from_fork_asm+0x1a/0x30 [ 857.918851][T18984] [ 857.921163][T18984] Freed by task 12274: [ 857.925250][T18984] kasan_save_track+0x3e/0x80 [ 857.929921][T18984] __kasan_save_free_info+0x46/0x50 [ 857.935107][T18984] __kasan_slab_free+0x5c/0x80 [ 857.939957][T18984] kfree+0x19a/0x6d0 [ 857.943845][T18984] em28xx_v4l2_init+0x1683/0x2e70 [ 857.948858][T18984] em28xx_init_extension+0x120/0x1c0 [ 857.954395][T18984] process_scheduled_works+0xae1/0x17b0 [ 857.959926][T18984] worker_thread+0x8a0/0xda0 [ 857.964593][T18984] kthread+0x711/0x8a0 [ 857.968649][T18984] ret_from_fork+0x4bc/0x870 [ 857.973225][T18984] ret_from_fork_asm+0x1a/0x30 [ 857.977975][T18984] [ 857.980287][T18984] The buggy address belongs to the object at ffff888050a94000 [ 857.980287][T18984] which belongs to the cache kmalloc-8k of size 8192 [ 857.994327][T18984] The buggy address is located 1856 bytes inside of [ 857.994327][T18984] freed 8192-byte region [ffff888050a94000, ffff888050a96000) [ 858.008290][T18984] [ 858.010629][T18984] The buggy address belongs to the physical page: [ 858.017044][T18984] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50a90 [ 858.025788][T18984] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 858.034273][T18984] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 858.042245][T18984] page_type: f5(slab) [ 858.046220][T18984] raw: 00fff00000000040 ffff88801a027280 ffffea00019ed400 dead000000000005 [ 858.054887][T18984] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 858.063493][T18984] head: 00fff00000000040 ffff88801a027280 ffffea00019ed400 dead000000000005 [ 858.072338][T18984] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 858.081001][T18984] head: 00fff00000000003 ffffea000142a401 00000000ffffffff 00000000ffffffff [ 858.089673][T18984] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 858.098333][T18984] page dumped because: kasan: bad access detected [ 858.104837][T18984] page_owner tracks the page as allocated [ 858.110550][T18984] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12289, tgid 12289 (kworker/1:16), ts 480536277520, free_ts 480534108443 [ 858.132335][T18984] post_alloc_hook+0x234/0x290 [ 858.137096][T18984] get_page_from_freelist+0x2365/0x2440 [ 858.142626][T18984] __alloc_frozen_pages_noprof+0x181/0x370 [ 858.148433][T18984] alloc_pages_mpol+0x232/0x4a0 [ 858.153356][T18984] allocate_slab+0x96/0x350 [ 858.157884][T18984] ___slab_alloc+0xf56/0x1990 [ 858.162566][T18984] __slab_alloc+0x65/0x100 [ 858.166972][T18984] __kmalloc_cache_noprof+0x411/0x6f0 [ 858.172331][T18984] snd_mixer_oss_notify_handler+0x160/0x1060 [ 858.178394][T18984] snd_card_register+0x5e7/0x760 [ 858.183328][T18984] try_to_register_card+0x641/0x7a0 [ 858.188517][T18984] usb_audio_probe+0x18f9/0x22f0 [ 858.193452][T18984] usb_probe_interface+0x668/0xc30 [ 858.198579][T18984] really_probe+0x26d/0x9e0 [ 858.203085][T18984] __driver_probe_device+0x18c/0x2f0 [ 858.208373][T18984] driver_probe_device+0x4f/0x430 [ 858.213432][T18984] page last free pid 12289 tgid 12289 stack trace: [ 858.219943][T18984] __free_frozen_pages+0xbc4/0xd30 [ 858.225048][T18984] __put_partials+0x146/0x170 [ 858.229719][T18984] put_cpu_partial+0x1f2/0x2e0 [ 858.234472][T18984] __slab_free+0x2b9/0x390 [ 858.238877][T18984] qlist_free_all+0x97/0x140 [ 858.243459][T18984] kasan_quarantine_reduce+0x148/0x160 [ 858.248907][T18984] __kasan_slab_alloc+0x22/0x80 [ 858.253748][T18984] __kmalloc_cache_noprof+0x36f/0x6f0 [ 858.259119][T18984] snd_ctl_led_register+0x353/0xde0 [ 858.264311][T18984] snd_ctl_dev_register+0xde/0x190 [ 858.269456][T18984] snd_device_register_all+0xd3/0x1b0 [ 858.274830][T18984] snd_card_register+0x1cf/0x760 [ 858.279766][T18984] try_to_register_card+0x641/0x7a0 [ 858.284960][T18984] usb_audio_probe+0x18f9/0x22f0 [ 858.289891][T18984] usb_probe_interface+0x668/0xc30 [ 858.295084][T18984] really_probe+0x26d/0x9e0 [ 858.299579][T18984] [ 858.302068][T18984] Memory state around the buggy address: [ 858.307678][T18984] ffff888050a94600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 858.315722][T18984] ffff888050a94680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 858.323768][T18984] >ffff888050a94700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 858.331810][T18984] ^ [ 858.337942][T18984] ffff888050a94780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 858.346077][T18984] ffff888050a94800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 858.354129][T18984] ================================================================== [ 858.383421][T12288] em28xx 1-1:0.132: Closing input extension [ 858.390375][T18984] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 858.397585][T18984] CPU: 0 UID: 0 PID: 18984 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 858.406966][T18984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 858.417030][T18984] Call Trace: [ 858.420337][T18984] [ 858.423259][T18984] dump_stack_lvl+0x99/0x250 [ 858.427845][T18984] ? __asan_memcpy+0x40/0x70 [ 858.432425][T18984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 858.437618][T18984] ? __pfx__printk+0x10/0x10 [ 858.442198][T18984] vpanic+0x237/0x6d0 [ 858.446177][T18984] ? __pfx_vpanic+0x10/0x10 [ 858.450669][T18984] ? preempt_schedule+0xae/0xc0 [ 858.455667][T18984] ? __pfx_preempt_schedule+0x10/0x10 [ 858.461050][T18984] panic+0xb9/0xc0 [ 858.464776][T18984] ? __pfx_panic+0x10/0x10 [ 858.469193][T18984] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 858.475085][T18984] ? is_module_address+0x17/0xf0 [ 858.480028][T18984] ? v4l2_fh_open+0xac/0x420 [ 858.484606][T18984] check_panic_on_warn+0x89/0xb0 [ 858.489550][T18984] ? v4l2_fh_open+0xac/0x420 [ 858.494145][T18984] end_report+0x78/0x160 [ 858.498389][T18984] kasan_report+0x129/0x150 [ 858.502889][T18984] ? v4l2_fh_open+0xac/0x420 [ 858.507480][T18984] v4l2_fh_open+0xac/0x420 [ 858.511897][T18984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 858.517878][T18984] em28xx_v4l2_open+0x157/0x9a0 [ 858.522740][T18984] v4l2_open+0x1bf/0x3a0 [ 858.526988][T18984] chrdev_open+0x4cc/0x5e0 [ 858.531395][T18984] ? __pfx_chrdev_open+0x10/0x10 [ 858.536325][T18984] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 858.542642][T18984] ? __pfx_chrdev_open+0x10/0x10 [ 858.547568][T18984] do_dentry_open+0x953/0x13f0 [ 858.552325][T18984] vfs_open+0x3b/0x340 [ 858.556394][T18984] ? path_openat+0x2ecd/0x3830 [ 858.561160][T18984] path_openat+0x2ee5/0x3830 [ 858.565753][T18984] ? __pfx_path_openat+0x10/0x10 [ 858.570694][T18984] do_filp_open+0x1fa/0x410 [ 858.575186][T18984] ? __lock_acquire+0xab9/0xd20 [ 858.580022][T18984] ? __pfx_do_filp_open+0x10/0x10 [ 858.585044][T18984] ? _raw_spin_unlock+0x28/0x50 [ 858.589884][T18984] ? alloc_fd+0x64c/0x6c0 [ 858.594212][T18984] do_sys_openat2+0x121/0x1c0 [ 858.598877][T18984] ? __pfx_do_sys_openat2+0x10/0x10 [ 858.604065][T18984] ? exc_page_fault+0x82/0x100 [ 858.608822][T18984] ? do_user_addr_fault+0xc85/0x1380 [ 858.614093][T18984] __x64_sys_openat+0x138/0x170 [ 858.618933][T18984] do_syscall_64+0xfa/0xfa0 [ 858.623432][T18984] ? lockdep_hardirqs_on+0x9c/0x150 [ 858.628619][T18984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.634670][T18984] ? clear_bhb_loop+0x60/0xb0 [ 858.639334][T18984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.645223][T18984] RIP: 0033:0x7fa878aa7407 [ 858.649640][T18984] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 858.669252][T18984] RSP: 002b:00007ffe18d11f60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 858.677672][T18984] RAX: ffffffffffffffda RBX: 00007fa8791f9880 RCX: 00007fa878aa7407 [ 858.685631][T18984] RDX: 0000000000000000 RSI: 00007ffe18d12f1b RDI: ffffffffffffff9c [ 858.693589][T18984] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 858.701552][T18984] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 858.709510][T18984] R13: 00007ffe18d121b0 R14: 00007fa879360000 R15: 0000560c864cd4d8 [ 858.717494][T18984] [ 858.720883][T18984] Kernel Offset: disabled [ 858.725196][T18984] Rebooting in 86400 seconds..