last executing test programs: 18m59.691778051s ago: executing program 32 (id=1196): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000004c0)=""/4096, 0x1000, 0x3, 0x6, 0x0, 0xfffffffb, 0x2}}, 0x120) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000014c0)={{0x4, 0xffffff00}, 0x100, './file0\x00'}) syz_open_procfs(0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000005440)=[{{&(0x7f00000001c0)=@ax25={{0x3, @netrom}, [@null, @bcast, @default, @netrom, @rose, @default, @rose]}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001600)=""/98, 0x62}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f0000002680)=""/71, 0x47}, {&(0x7f0000002700)=""/82, 0x52}, {&(0x7f0000002780)=""/155, 0x9b}, {&(0x7f0000000440)=""/35, 0x23}, {&(0x7f0000002840)=""/123, 0x7b}, {&(0x7f00000028c0)=""/109, 0x6d}, {&(0x7f0000002940)=""/182, 0xb6}], 0xa, &(0x7f0000002ac0)=""/223, 0xdf}, 0xf539}, {{&(0x7f0000002bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004100)=[{&(0x7f0000002c40)=""/230, 0xe6}, {&(0x7f0000002d40)=""/187, 0xbb}, {&(0x7f0000002e00)=""/176, 0xb0}, {&(0x7f0000002ec0)=""/5, 0x5}, {&(0x7f0000002f00)=""/91, 0x5b}, {&(0x7f0000002f80)=""/164, 0xa4}, {&(0x7f0000003040)=""/167, 0xa7}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x8, &(0x7f0000004180)=""/4096, 0x1000}, 0xfffffffe}, {{&(0x7f0000005180)=@nfc, 0x80, &(0x7f0000005380)=[{&(0x7f0000005200)=""/54, 0x36}, {&(0x7f0000005240)=""/41, 0x29}, {&(0x7f0000005280)=""/195, 0xc3}], 0x3, &(0x7f00000053c0)=""/89, 0x59}, 0x2}], 0x3, 0x2040000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000020000000900010073797a300000000020000000000c01080000000000000000020000000900010073797a310000000014000000020a01020000000000000000000000002c000000180a01"], 0xa8}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18m49.209656498s ago: executing program 5 (id=1264): mmap(&(0x7f0000458000/0x400000)=nil, 0x400000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000300)='net/ip_mr_vif\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) syz_open_dev$dri(&(0x7f0000000fc0), 0x1, 0x2000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @pic={0x4, 0xdc, 0x80, 0x4, 0x40, 0x6, 0x2, 0x63, 0x9c, 0x0, 0x2, 0x40, 0x7, 0x9b, 0x3, 0xbc}}) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x3, 0x3}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x61, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x8881) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000001140)={r8}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2029) r9 = syz_open_dev$media(&(0x7f00000001c0), 0x2c26, 0x10543) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0x7c80, 0x0) unshare(0x2a020400) r11 = inotify_init1(0x800) inotify_rm_watch(r11, 0x0) mknod$loop(&(0x7f00000002c0)='./file1/../file0\x00', 0x8fff, 0x0) 18m48.075515226s ago: executing program 5 (id=1298): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000020700cb6f00000000000010902240001000090000904000001030000000921fcff000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000580)={0x0, 0xc, 0x1c, {0x1c, 0x21, "540ac6e95ba58430f33a5fd84ea7a77433e656787707212bbec3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18m47.252751466s ago: executing program 4 (id=1303): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x40000000000080e9, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14241313060608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206050000030000000000000000f9af955b7c00000c00078008000800000000000500010006000000050005000200000005000400020000000900020073797a310000000013000300686173873a6e65742c69666163650000"], 0x58}}, 0x0) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbf, 0x80, 0x20203843, 0x2, [0x2], [0x80ffdc], [], [0x400000000000001]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000280)={r1, r0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/tracing', 0xc40c0, 0x80) 18m46.29382167s ago: executing program 5 (id=1308): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x222102, 0x0) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20142, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x5c, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004dc0)=ANY=[@ANYBLOB], 0x14}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000200)={0x80000000}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r6, &(0x7f00000007c0)={0x2020}, 0x2020) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x20000004}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000004d40), 0x80080) write$binfmt_script(r8, &(0x7f0000004d80)={'#! ', './file0', [{0x20, 'ct\x00'}, {0x20, '.^'}], 0xa, "0e598d4002154eda805167d994f99dd8c29136c030bd327e08615364dd9abd928a53d0a243dca703ad"}, 0x3b) bind$packet(r7, &(0x7f0000000100)={0x11, 0x4}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000002ea0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100697036746e6c000010000280040013000500090029000000080004"], 0x48}}, 0x0) 18m45.527657456s ago: executing program 4 (id=1313): syz_io_uring_setup(0x3c, &(0x7f0000001840)={0x0, 0xaddc, 0x10100, 0x3, 0x203}, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x122) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x149) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000440)={0xd6, 0x3, 0xa4d, 0x8, "5013c2999780650982d6ae1d784878c644ae9bfb48724ea3a874f131f6c057402449e1a33f9c06558e24e62c27258355c65229e4c7ba2c3c5c3da164e018bd7c971617d41451a61befa3e60d7e400776a56a490c04ea622f2cc964aed9785c3441951bceab94ea446771428925bb3fb755dcd8ebd5169f9b2f18fca69a674ca827c57b913cbec58cfb05a954f55a05fe382af55b7405233c37c22753867af713defd2063709eee8d7941f8b5a83a9a0d96d439895fe0d3cecb44f6f43dab"}) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x4000032e}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) ioctl$VIDIOC_OVERLAY(r7, 0x4004560e, &(0x7f0000000040)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x2ffb, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 18m44.712475659s ago: executing program 5 (id=1316): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000170000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x5c}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000008ef0ec47200000000000109022400010000903aca0400000103000000092103000001220500090581030000070000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0003050000001408b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) accept4(r2, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x10000, 0x80000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f00000020c0)={0x0, 0x7, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) 18m44.596805706s ago: executing program 2 (id=1317): socket(0x80000000000000a, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast1}]}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 18m44.467081196s ago: executing program 3 (id=1318): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d030000", @ANYRESOCT], 0x40}}, 0x0) write$UHID_INPUT(r0, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000880)={0xe, {0x5, 0xf9, 0xd, 0xcd, "fb5f3938243d0d7ddaa7d1c82697aca26af7cb50be355e08f8ce79b1d75a0b2c3cc5dc2e437cd9caece3d940b30fc0a397d406e45d1584b59fbcf5dda7466d5dae2757a97a54ca388f980371ec64c8073748c9470c067823934a3b361e1f33a85851719c8c0d5d9a04f9e64d6204a3f8ca8d76ec23dfae90282a31bf9d707c13ff2db909ca173ed37a802583bc6777983723588b6f3c54bbd9fb6d5d7917a6396da6c155787b00b394eb83e86527e89328c579f9cfa67072ca5206b843c4e02157144568ef75a1befa42a1a78b"}}, 0xd9) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xa8000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061108b000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x0, 0xf9, 0x7, 0x50, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @loopback, 0x700, 0x700, 0x3, 0xffff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x14, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xe8, &(0x7f00000003c0)=""/232, 0x41100, 0x2, '\x00', r5, 0x0, r0, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0], &(0x7f00000004c0)=[{0x2, 0x1, 0xe, 0xb}, {0x3, 0x2, 0x4, 0x6}, {0x3, 0x4, 0x1, 0xb}, {0x4, 0x1, 0xd, 0x6}, {0x2, 0x2, 0xc, 0x7}, {0x5, 0x3, 0xd, 0x8}, {0x3, 0x3, 0xc, 0xa}], 0x10, 0x2, @void, @value}, 0x94) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000340)={{0x0, 0x1}, {0x4}, 0xbf000000, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r11, 0xffffffffffffffff}) close_range(r8, r9, 0x0) ioctl$SYNC_IOC_FILE_INFO(r12, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x3f}) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000500000000000000741800001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f837974fd76b540a8d0000007b030010a4160000850000005600000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) 18m44.278771726s ago: executing program 4 (id=1319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x2d) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000000)={r3, 0x0, {0x0, 0x0, 0x0, 0x40, 0xfe73, 0x0, 0x3, 0x1d, 0x1, "87abb19f07717aa81e89bbe1458944682ae7a3e8d4415f30cd4ff933ab67562fc2e1b8124fa5407675ae9e6070d30e102f3a4c32985d159e6d22d34e33497031", "abe7129ac32c169d4f4cf126ca7ea2c10eb7cf1f77029b2094e41c4ec87850cbe223cfbff1425795e5d03d2c526cc038520d6a019b797b082777637eee509443", "73ba985fc4f749471c774135911c091ac55066dfc5dbd5241e39eac72dad7167", [0xeb, 0x8001]}}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc3) 18m44.213695309s ago: executing program 3 (id=1320): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r0, 0xfffffffc) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone3(&(0x7f0000000140)={0x80, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x16}, 0x58) (async) gettid() (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000001c0)=ANY=[@ANYRES32=r3], 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="2b72646d61202d6370757365742000006a3844fc26bd7b90af3408ce48174355c84f492b135f17cc77cea6"], 0xe) 18m44.023442091s ago: executing program 2 (id=1321): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xd}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002222000000a3618e0b67aff52807000000002b049b9190194e051a7bfa9e274a2b"], 0x0}, 0x0) 18m43.244457459s ago: executing program 4 (id=1322): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x578}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x84, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x801}, 0x80) 18m43.05396576s ago: executing program 2 (id=1323): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=@bridge_setlink={0x20, 0x13, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x10, 0x10}}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x4040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040), &(0x7f00000001c0)=0x4) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 18m42.947176097s ago: executing program 4 (id=1324): mlock(&(0x7f0000289000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000007c0)={&(0x7f0000368000/0x2000)=nil, &(0x7f000072c000/0x4000)=nil, 0x2000, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000001040300000000000000000005000003050001000200000008000340000000100a000200000000060200000005000100010000000600064000020000080005400000010006000640000200000800044000"], 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000002180)='./file0\x00', 0xc000, 0x0) r2 = inotify_init() r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r4, 0x11, 0x0, 0x78000) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000159000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000240)="66b8860300000f23d00f21f866351000000f0f23f8f26f66b8b10000000f23c80f21f86635000050000f23f8bad00466b80000000066ef0f01ca0f38052e005066ba00800000660ffb8d020036660fc734ba2000ec", 0x55}], 0x1, 0x40, &(0x7f0000000480)=[@flags={0x3, 0x4}], 0x1) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xa000032a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000368000/0x4000)=nil, 0x4000, 0x1, 0x40014, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x104, &(0x7f0000000040)=0xc, 0x0, 0x4) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004004}, 0x40001) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 18m42.813237912s ago: executing program 2 (id=1325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) io_submit(0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x77, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0fc3"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18m42.75772774s ago: executing program 3 (id=1326): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x0) recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x1000000) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) 18m41.822327599s ago: executing program 2 (id=1328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x1a0, 0x300, 0x0, 0x300, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x11}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002207000000aadf7215d6051fbee7549863f3a06211d1feefd622fbfd4c8def91bdbd997672c90cd993baca16200b9e54c75bc50e7c83b3c1066fdc1e0c7e773029091c68c2e4a9dcaea58325b363241909a37ad4e8116e7f1628fd9eeb2d85e9eceabd48a2009451bb"], 0x0}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x5000, 0x108000}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0xe387, 0xfffffff1, 0x100a, 0x3, 0x5, 0x2, 0x5a6279aac655840d}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x2000, 0x6000}}, "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", "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"}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000400)="c74424005c8d0000c7442402ce5caa10c7442406000000000f011c24f30fc7720064360f01c466b827010f00d03ef0f71b0fc72f0f1bc70f82b6000000b9800000c00f3235010000000f3065660f65d1", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, 0x0) (async) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 18m41.622498434s ago: executing program 5 (id=1329): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x3) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000240)=@conn_svc_rsp={0x0, 0x0, 0xa, "7a10bd1e", {0x3, 0x106, 0x0, 0x7d, 0x1, 0x7, 0x7}}) 18m41.055208214s ago: executing program 2 (id=1330): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x87, 0x60, 0x2d, 0x8, "bc478751", "77988b40"}}, 0x0}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) faccessat(0xffffffffffffffff, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x2, 0x0, 0x2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000"], 0x92fc}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='\x00\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 18m40.199338274s ago: executing program 3 (id=1331): socket(0x80000000000000a, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast1}]}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000000000000000000000005061"}}) 18m39.82413549s ago: executing program 4 (id=1332): openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) socket$inet6(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x24d, 0xa, 0x0, 0x0, 0x3e, 0x180, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x10, 0xd0, 0x88, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "79241c"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x40, 0x28}, [@mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x6, 0x3}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xc0, 0x8, 0xf8, 0x40, 0x8}, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="050f2d000214100402cee41c87dba90ff6c17d0cf3df1548faef877a6ac49e11fe46743d992b141004a3efe069e600188ec9"], 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x449}}, {0x8b, &(0x7f0000000240)=@string={0x8b, 0x3, "554cb3bebcd9089bbcd899c0a7c5f16dbc22e31a47c91a21440e4901927b4537f743e642471ec3eb811db9aa26bc9a17c73fd22332aca4ba1cb36b56f59a6ac904161fa8845f33bc8c937bc172a244802c7523ce129ff198d735189c2f8720af71b4a68b0f25d5b3cad4a5f8eeff001822f16fe76e414d5eba75aa222ccbd1a804683aeb8c8e66dada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x416}}]}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r5], 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x3, 0x773, 0x20010, r1, 0x616b, '\x00', 0x0, r1, 0x5, 0x3, 0x0, 0xf, @void, @value, @void, @value}, 0x50) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0xb, 0x2, "f441"}, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) 18m39.463481572s ago: executing program 3 (id=1333): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {0x0, 0x20000}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "ab84411f518dc9d5565b9e05de67830aeb529f334e285efe3786823a0a1e08b53bec30240d4d6f58f05cd36e941758cf60d4c5a818aca82c12697c43daf8000000"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0xee183000) 18m39.150498744s ago: executing program 5 (id=1334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$nullb(0xffffffffffffff9c, 0x0, 0x425241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r5, &(0x7f00000029c0), 0x400006d, 0x20000004) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) recvmmsg(r6, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x9}], 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat(r10, &(0x7f00000001c0)='./file0\x00', 0x20001, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="f1e600000000004d00001300000008000300", @ANYRES32=r8, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000600120104000000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 18m39.038721763s ago: executing program 3 (id=1335): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000300), 0x6, 0x151903) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x6, 0x151903) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000002c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x3}}], 0x30}], 0x1, 0x40) (async) sendmmsg$inet_sctp(r4, &(0x7f00000002c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x3}}], 0x30}], 0x1, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = dup(r1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r5}, &(0x7f0000000500)=0x0, &(0x7f00000001c0)=0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r10, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40080382}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xd2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x609}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(r9, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r11, 0x0, 0x97, 0x8000000}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r11, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r11}) 18m22.458306593s ago: executing program 33 (id=1327): connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x401, 0x4, 0x4, 0x267d}, 0x10) unshare(0x28000600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/raw6\x00') preadv(r0, 0x0, 0x0, 0x7, 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40242, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000280)="9b1bc2e4224feafc05a4656f3ff0f00308dcb21eb5a6dc18ea88ee24f81386b6ae3e9ebd647088e6718b1cbe81da034d34c1e4a085b359cc29659cd28e7ce6f47ac7cec3f4a82a675799f72988e9", 0x4e}, {&(0x7f0000000a40)="19ec8299312e8201a48fa47322adc5411d1874860d131008b6eb57215944e9a763c2a1fa3b2d1df4f2d1fb9323de283dc693b46ca642f6f1d85742310ab7453d3c2e7b4dd968be675631f93e154dabd178e4b26de7ff5d49d02c990755bcd848f3f0d593b081", 0x66}, {&(0x7f0000000300)="7bd9a4c05ab5ea367a275ebe0ff68bbf53498084232cf24826c7d8548f23415a9338ebcae5fc2bd7a9da89124e2e31c7180fad3a8c92f31b612c7733104e386cd5601f26a3a54e4100809e13773297b22975a5554b7ec6bb", 0x58}, {&(0x7f0000000000)="4bebf628ae79c6", 0x7}, {&(0x7f0000000840)="ce827518f8c45ecf391368d20c797d3555eb1504e0cb8f13f63d8bd6289d4cbbfa123a299dcabbed4c056d60b91a", 0x2e}], 0x5) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 18m20.70042482s ago: executing program 34 (id=1334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$nullb(0xffffffffffffff9c, 0x0, 0x425241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r5, &(0x7f00000029c0), 0x400006d, 0x20000004) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) recvmmsg(r6, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x9}], 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat(r10, &(0x7f00000001c0)='./file0\x00', 0x20001, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="f1e600000000004d00001300000008000300", @ANYRES32=r8, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000600120104000000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 18m18.273872219s ago: executing program 35 (id=1330): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x87, 0x60, 0x2d, 0x8, "bc478751", "77988b40"}}, 0x0}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) faccessat(0xffffffffffffffff, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x2, 0x0, 0x2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000"], 0x92fc}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='\x00\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 18m18.158281003s ago: executing program 36 (id=1335): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000300), 0x6, 0x151903) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x6, 0x151903) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000002c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x3}}], 0x30}], 0x1, 0x40) (async) sendmmsg$inet_sctp(r4, &(0x7f00000002c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x3}}], 0x30}], 0x1, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = dup(r1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r5}, &(0x7f0000000500)=0x0, &(0x7f00000001c0)=0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r10, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40080382}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xd2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x609}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(r9, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r11, 0x0, 0x97, 0x8000000}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r11, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r11}) 18m17.995969561s ago: executing program 37 (id=1332): openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) socket$inet6(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x24d, 0xa, 0x0, 0x0, 0x3e, 0x180, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x10, 0xd0, 0x88, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "79241c"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x40, 0x28}, [@mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x6, 0x3}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xc0, 0x8, 0xf8, 0x40, 0x8}, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="050f2d000214100402cee41c87dba90ff6c17d0cf3df1548faef877a6ac49e11fe46743d992b141004a3efe069e600188ec9"], 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x449}}, {0x8b, &(0x7f0000000240)=@string={0x8b, 0x3, "554cb3bebcd9089bbcd899c0a7c5f16dbc22e31a47c91a21440e4901927b4537f743e642471ec3eb811db9aa26bc9a17c73fd22332aca4ba1cb36b56f59a6ac904161fa8845f33bc8c937bc172a244802c7523ce129ff198d735189c2f8720af71b4a68b0f25d5b3cad4a5f8eeff001822f16fe76e414d5eba75aa222ccbd1a804683aeb8c8e66dada"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x416}}]}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r5], 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x3, 0x773, 0x20010, r1, 0x616b, '\x00', 0x0, r1, 0x5, 0x3, 0x0, 0xf, @void, @value, @void, @value}, 0x50) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0xb, 0x2, "f441"}, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) 12m4.435701686s ago: executing program 0 (id=2639): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x980903, 0xffffff7c}) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x14, 0x3e, 0xdd, 0x8, 0x22b8, 0x6425, 0xd36c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm={0x15}]}]}}]}}]}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) shutdown(r0, 0x1) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x980903, 0xffffff7c}) (async) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x14, 0x3e, 0xdd, 0x8, 0x22b8, 0x6425, 0xd36c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm={0x15}]}]}}]}}]}}, 0x0) (async) 12m1.32020891s ago: executing program 0 (id=2648): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) setsockopt$inet_mtu(0xffffffffffffffff, 0x111, 0xa, &(0x7f0000000000), 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) unshare(0x20400) inotify_add_watch(r5, 0x0, 0x4000002) fremovexattr(r3, &(0x7f0000000040)=@random={'user.', '%[\\%\'{\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12m0.955449809s ago: executing program 0 (id=2650): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x80202) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) 12m0.855040408s ago: executing program 0 (id=2651): r0 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0xd413, 0x80}, &(0x7f0000000240)=0x0, &(0x7f00000004c0)=0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f00000001c0), 0xfffffffffffffe8, 0x7, 0x1190b) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380), 0x1, 0x40, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2087, 0xf01, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x3a, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x60}}}}}]}}]}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000740)={0x20, 0x22, 0x7, {0x7, 0x22, "8c8fde8535"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 11m59.97517972s ago: executing program 0 (id=2656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0xa, 0x4, 0xffffffff}, 0x10, 0x9c3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0xfd, {0x9, 0x21, 0x1, 0x6}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x6a}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf9, 0x5, 0x6}}]}}}]}}]}}, 0x0) 11m59.523334827s ago: executing program 0 (id=2658): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x68) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000000010102000000000000000005000008080007400000001008001a400000000508001a400000004008000c400000188008000140000008d408000340fffffffc280003400000000400"/88], 0x58}, 0x1, 0x0, 0x0, 0x4000055}, 0x20000804) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/124, 0x7c}, {&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/50, 0x32}, {&(0x7f0000000680)=""/106, 0x6a}, {&(0x7f00000007c0)=""/77, 0x4d}], 0xa, 0x6, 0x5) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000040)=0xa, 0x4) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x40, r11}) r12 = socket(0xa, 0x1, 0x0) ioctl(r12, 0x8916, &(0x7f0000000000)) ioctl(r12, 0x8936, &(0x7f0000000000)) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8884}, 0x4040) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@rand_addr=' \x01\x00', 0x37, r4}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r1) sendmsg$DEVLINK_CMD_RATE_SET(r13, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1cd403260cb6babddf649f93399b344b7941c48bfcc4b544de5c85e3736eaba0ed40fce2a9defab7e27c14f92a48f16bda93c373589dae828efbd1d3f29bcca2ee3464a512607f74790d41b8550caec30a4891f19df9c3a79d927084af8c2744da45933f02c2c77e66594b0d278c02f4cfda315dbc6d13babc9bf9f950b2333bf83503000000006c47959b456b50302e4a6c98e233c1831be8dbed3e8a964190f40fae123ce432b8d132fa8ec1e36d5f8e2e8549298b7ce4d50bc6a14ec28efe3405695fea2c84a89e5a50937dca82ce2ec9da0db45d00c9e7", @ANYRES16=r14, @ANYBLOB="00002cbd7000fbdbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a60006000000000000000800030002000000"], 0x48}}, 0xc00) 11m44.009233203s ago: executing program 38 (id=2658): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x68) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000000010102000000000000000005000008080007400000001008001a400000000508001a400000004008000c400000188008000140000008d408000340fffffffc280003400000000400"/88], 0x58}, 0x1, 0x0, 0x0, 0x4000055}, 0x20000804) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/124, 0x7c}, {&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/50, 0x32}, {&(0x7f0000000680)=""/106, 0x6a}, {&(0x7f00000007c0)=""/77, 0x4d}], 0xa, 0x6, 0x5) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000040)=0xa, 0x4) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x40, r11}) r12 = socket(0xa, 0x1, 0x0) ioctl(r12, 0x8916, &(0x7f0000000000)) ioctl(r12, 0x8936, &(0x7f0000000000)) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8884}, 0x4040) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@rand_addr=' \x01\x00', 0x37, r4}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r1) sendmsg$DEVLINK_CMD_RATE_SET(r13, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1cd403260cb6babddf649f93399b344b7941c48bfcc4b544de5c85e3736eaba0ed40fce2a9defab7e27c14f92a48f16bda93c373589dae828efbd1d3f29bcca2ee3464a512607f74790d41b8550caec30a4891f19df9c3a79d927084af8c2744da45933f02c2c77e66594b0d278c02f4cfda315dbc6d13babc9bf9f950b2333bf83503000000006c47959b456b50302e4a6c98e233c1831be8dbed3e8a964190f40fae123ce432b8d132fa8ec1e36d5f8e2e8549298b7ce4d50bc6a14ec28efe3405695fea2c84a89e5a50937dca82ce2ec9da0db45d00c9e7", @ANYRES16=r14, @ANYBLOB="00002cbd7000fbdbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a60006000000000000000800030002000000"], 0x48}}, 0xc00) 10.283512262s ago: executing program 1 (id=5438): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) (async) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f00000001c0)) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x14000180, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x9, 0x8, 0x6, 0x3}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r6, 0x8}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={r6, 0x6f1}, &(0x7f0000000440)=0x8) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x80000000}]) (async) io_getevents(0x0, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000500)={0x2c, 0x8, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x200}, @calipso={0x7, 0x18, {0x3, 0x4, 0xd, 0x7, [0xffffffffffffb8ed, 0x673]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x40}, @ra={0x5, 0x2, 0x2aac}, @enc_lim={0x4, 0x1, 0x2}]}, 0x50) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESHEX, @ANYRES32=0x0, @ANYRES16=r5], 0x30}}, 0x4000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) 9.414953223s ago: executing program 1 (id=5442): r0 = socket(0x10, 0x2, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r3, r3, 0x0, 0x7) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x7}, @TCA_PIE_ALPHA={0x8, 0x4, 0x16}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4011}, 0x2000400c) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x3}, [], {0x20, 0x1}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x24, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x30, @loopback, @mcast2={0xff, 0x5}, 0x80, 0x40, 0x0, 0xffffffff}}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f0000000240)={0x0, 0x23, 0x22, {0x22, 0x31, "4106142ea33bd024b379df99fe23968ab9198ed74ff51601ce8301f14705a585"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x0, 0x18, 0xb3, "f3b2a510ea0038bd77e4613d7f900600f337d9fb43cffd7080d87065719765ed0afca976df8f904bb43f123d0ff0ff316f5837a017dbac5e71e896bb1e5db3bfcfca8e714e32e015c6bb67c7a89c51a7f73a5618cae3993e74f5fe1bf9eebbef57133e31758e056662ea938ded511718b9d29d6c0faeeb00ca8d503a6f5efefe6e7921e020c0dc475edcd2ebf77a5bb74f23e6aee6ca07a9afa872dd81c1ccf100802c0f66fee311aab02e91df22c1128a34d8"}, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x2, 0xf, 0x6, 0x0, 0x3, 0x8, 0x6, 0x4, 0x3, 0xbba4, 0x0, 0x8}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x401}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x1}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) fchmod(r5, 0x51) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r8 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x200056f2, 0x100, 0x0, 0x1d0}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) (async) io_uring_enter(r8, 0x6f58, 0x0, 0x0, 0x0, 0x0) 9.099558122s ago: executing program 1 (id=5444): syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0xe, &(0x7f0000000040)=[{0x5, 0xc, 0x8}], 0x2afbd7ccba63111f, 0x6, 0x2c, 0x5, 0x70, 0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6, &(0x7f0000000280)=[{0x8, 0x8c, 0x8}, {0x1, 0x2, 0x5}, {0xe, 0x2, 0xffffffffffffffff}, {0x800, 0x3, 0xffffffff}, {0x3ff, 0xf}, {0x5, 0x6, 0x9}, {0x3, 0x9, 0xfff}, {0x4, 0x200}, {0x8, 0x1, 0x9}, {0x200000000000, 0x5, 0x10001}], 0xa, 0x1, 0x30, 0x51, 0x10, 0x53}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)="1ec2ee84b9d2e7887c92ec78241d309b0db75c2b53be0404338355acc78964a54c9ceaf8df5255454092b23037404b4a0e898e7bf591dee7b3901a43a964d57818341bc5171af67f39d39676e36fed1b80fb", 0x52}], 0x1, 0x0, 0x0, 0x20000800}}], 0x1, 0x20004080) 7.960991551s ago: executing program 7 (id=5446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/207, 0xcf, 0x1, &(0x7f0000000140)=""/7, 0x7}, &(0x7f00000001c0)=0x40) r2 = fsopen(&(0x7f0000000200)='coda\x00', 0x0) poll(&(0x7f0000000240)=[{r2, 0x1021}, {r2, 0x1}], 0x2, 0x6) (async) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)=0x1) (async) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)={[{0x2d, 'rdma'}, {0x2d, 'rlimit'}]}, 0xe) (async) syz_emit_ethernet(0xb6, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @remote, @void, {@x25={0x805, {0x0, 0x9, 0xb, "a33d836826acdf26727fb44e4c1a042246bb1a9b589415fa72912024fe52c27b5ea49dcfd02add9d9c9229fd8d0346981c83abb8f96a8047d3c9d7db15a9c6682f9f79129ace8e80f6e25a1d92a77a14dcac696a75c0a8de3783b97e18f271b0565ae2662a5cfc372a6de1621bcf7b5ee992933fbbc5e1e03512db4d295fa92f1cfe307653c980629c0c5a75587fbed2344c1b898fa1e77b1ad108460cff34fbfa6593cf48"}}}}, &(0x7f0000000400)={0x1, 0x2, [0xf88, 0xac9, 0xd79, 0xfd9]}) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x10001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x54d6}}, 0x2, 0x2}, &(0x7f0000000500)=0x90) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000540)=@assoc_value={r4, 0xffffffff}, 0x8) (async) lseek(r3, 0x354394a9, 0x4) (async) sendto$inet6(r1, &(0x7f0000000580)="2ae3b37878337c4fc77f8528a76350d462506c09f16ff27f1df90d8a511e26dbf26938ca4a741a2167ed21e0bca0a61b3418bacea9b9538295ca927a9d83", 0x3e, 0x40081, &(0x7f00000005c0)={0xa, 0x4e21, 0xef37, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7}, 0x1c) setxattr$incfs_metadata(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)="49f87453b27a468de4bb49328551e613cdbfb3754ff4fa1b586e247311c7d137241c2682", 0x24, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x0, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000740), 0x20e082, 0x0) connect$l2tp(r6, &(0x7f0000000780)={0x2, 0x0, @empty}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000007c0)={r4, 0x2}, &(0x7f0000000800)=0x8) (async) r7 = open(&(0x7f0000000840)='./file0\x00', 0x82900, 0x4c) r8 = accept$packet(r7, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000940)={0x2, 0xf}) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000980)) (async) r9 = syz_open_dev$ndb(&(0x7f0000000a80), 0x0, 0x8000) ioctl$NBD_SET_SOCK(r9, 0xab00, r6) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) (async) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000b00)={[{0x81, 0x2, 0xdd, 0x2, 0x9, 0x5, 0x2, 0x1, 0x9, 0x1, 0x5, 0xda, 0x3}, {0x400, 0x81, 0x5, 0x7a, 0x19, 0x6b, 0x4, 0xfd, 0x4, 0x5, 0xf0, 0x0, 0x3}, {0x6fa0, 0x10, 0x1, 0x2, 0x81, 0x5, 0xfe, 0x72, 0x9, 0x3, 0xff, 0x18, 0x401}], 0x400}) (async) prlimit64(r5, 0x0, &(0x7f0000000b80)={0x0, 0xc2}, &(0x7f0000000bc0)) 7.695430967s ago: executing program 1 (id=5447): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x10120, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) syz_clone(0xa04c280, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r3, &(0x7f0000000180)='4\x00', 0x2) madvise(&(0x7f00006ba000/0x3000)=nil, 0x3000, 0x13) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x199}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.693468417s ago: executing program 7 (id=5448): r0 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffea7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000005800018044000400200101000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000aa000000000d0001007564703a73"], 0x6c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x95, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x95, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f903, 0x0, '\x00', @string=0x0}}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f903, 0x0, '\x00', @string=0x0}}) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r8, 0x627, 0xc1040000, 0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x880, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0x10, 0x100, 0x6, 0x5, 0xfffffff7, 0x8001, 0x8, 0x101, 0x8, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x108, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x0, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0xd, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x8, 0x645, 0x2, 0x80000800, 0x2, 0x9, 0xfffffff8, 0x298, 0x186000, 0x3230, 0xfffffffd, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0x7f, 0xffffff6b, 0x8, 0x3, 0x8, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x6, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x81, 0x4, 0x6, 0x9, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x6, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x2, 0xc9, 0x81, 0x68, 0x3, 0xa5, 0x80, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x31, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x4009366, 0x7, 0x800, 0x401, 0x1, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8002, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x40, 0x6, 0xc, 0xff, 0xffffffff, 0x2, 0x0, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1fd, 0x2, 0x101, 0x2, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1fe, 0x101, 0x9, 0x7fff, 0x3, 0x0, 0x4, 0x2, 0x8, 0xfffffff7, 0x10001, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0xffd, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x23, 0x2, 0xff, 0xfffffffc, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd95, 0x3c5, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x3, 0x8, 0x81, 0x7, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x7ff, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x7ffffffc, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x3, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x100, 0x9, 0xfc, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0xfffd, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0xb, 0xfffffffe, 0x1, 0x7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffefffb}, 0x1, 0xf, 0x1}}]}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c000000180001000000000000000000020000000000000900000000060015000500000028001200000000000000040000300000fc0200"/76], 0x4c}}, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r13 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, &(0x7f00000004c0)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="602112000000120b327889f5f44951ecdbeb09ca779f5d86510939dbed795b03c4581102e4034fc36c4f48be1c3a1daaf86fc375cb97e7d53e25fb2069ca8ac3ce589d303075b90722109b93dbdfd91a354a4a32c0a98862819787fd339ba1d7fbedd07f5046ccfcb1366968266bae10fc51396d9498a19d571b287fc1b8bc93a28170bffe17bf2364e436de1a879f4826d852"], 0x0, 0x0, 0x0}, 0x0) 6.786533874s ago: executing program 6 (id=5449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f0000002740)=[{{&(0x7f0000000280)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)=""/232, 0xe8}], 0x1, &(0x7f0000000440)=""/227, 0xe3}, 0x4}, {{&(0x7f0000000540)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)=""/141, 0x8d}, {&(0x7f0000000700)=""/92, 0x5c}], 0x2, &(0x7f00000007c0)=""/17, 0x11}, 0xffffffff}, {{&(0x7f0000000800)=@un=@abs, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/188, 0xbc}, {&(0x7f0000000940)=""/19, 0x13}, {&(0x7f0000000980)=""/178, 0xb2}], 0x3, &(0x7f0000001300)=""/4089, 0xff9}, 0x8001}, {{&(0x7f0000000a80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b00)=""/108, 0x6c}, {&(0x7f0000000b80)=""/154, 0x9a}], 0x2, &(0x7f0000000c80)}, 0xfffffff7}, {{&(0x7f0000000cc0)=@qipcrtr, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000d40)=""/75, 0x4b}], 0x1, &(0x7f0000000e00)=""/61, 0x3d}, 0x3}, {{&(0x7f0000000e40)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ec0)=""/247, 0xf7}, {&(0x7f0000000fc0)=""/63, 0x3f}, {&(0x7f0000001000)=""/110, 0x6e}, {&(0x7f0000001080)=""/5, 0x5}], 0x4, &(0x7f0000001100)=""/155, 0x9b}, 0x8}, {{&(0x7f00000011c0)=@alg, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001240)=""/75, 0x4b}, {&(0x7f0000002300)=""/54, 0x36}, {&(0x7f0000002340)=""/73, 0x49}], 0x3, &(0x7f0000002400)=""/135, 0x87}, 0x1}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000024c0)=""/253, 0xfd}, {&(0x7f00000025c0)=""/65, 0x41}], 0x2, &(0x7f0000002680)=""/159, 0x9f}, 0x1000}], 0x8, 0x140, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x40, 0x9, 0x1a, 0x1}, {0x2, 0xa, 0x6, 0xffff}, {0xcf7, 0x8, 0x7, 0x214}, {0x5, 0x0, 0x5, 0x401}, {0x3, 0xd5, 0x8, 0x1}, {0x9, 0x81, 0xf, 0x6}]}, 0x10) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$kcm(0x11, 0x2, 0x300) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x800) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x24d437d6, 0x2, 0x7fd, 0xe26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) (async) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) (async) syz_usb_control_io$printer(r9, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) 5.881849437s ago: executing program 6 (id=5453): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0x9], [0x1000], [0x2, 0x100000]], '\x00', [{}, {}, {}, {0xa}, {}, {}, {}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.763339218s ago: executing program 6 (id=5454): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000880)=""/234, 0xea}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f0000000980)=""/180, 0xb4}, {&(0x7f0000000a40)=""/188, 0xbc}, {&(0x7f0000000b00)=""/178, 0xb2}, {&(0x7f0000000bc0)=""/144, 0x90}], 0x6, &(0x7f00000001c0)=""/5, 0x5}, 0x5}], 0x1, 0x20000100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000d00)={0x0, 0x0, 0x3006, 0x1, 0x84, 0x0, 0x10000000}) r2 = syz_io_uring_setup(0x113, &(0x7f0000000100)={0x0, 0x3c53, 0x200, 0x0, 0x2003a6}, &(0x7f0000000000), &(0x7f0000000200)) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x4b30, 0x20, 0x1, 0x34f, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x47bf, 0x4687, 0x28, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0xa, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x6, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x8, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffbf, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5c9b, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x9, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x6, 0x3, 0x9, 0x48c9368e, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x2, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x43, 0x8, 0x38, 0x800003, 0x200, 0x8f, 0x3, 0x4, 0x0, 0x1000, 0xa2, 0x7, 0x59, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0x81, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x8000002, 0x4, 0x6, 0x21, 0x10080, 0x5, 0x8, 0x30b1d693, 0x1, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x18000023, 0x0, 0x0, 0x10000000b49, 0x6c75, 0x8, 0x400, 0x3}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r6, 0x0, 0x18000) close(0x3) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12014101481344202404001e34d775ee69010203010902120001000010000904b8070096d1ca00"], 0x0) unshare(0x20400) socket$can_raw(0x1d, 0x3, 0x1) 5.396799379s ago: executing program 8 (id=5456): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x41, 0x41) fallocate(r0, 0x3, 0x1ff, 0x8000000000000) r1 = fanotify_init(0x20, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x16d0fe, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x15, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x200, 0x5, 0x4, 0xff, 0x9, 0x8}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x90}}, 0x0) setxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'btrfs.', '^\x00'}, &(0x7f0000000080)='\x00', 0x1, 0x1) fallocate(r2, 0x0, 0x0, 0x1000f8) 5.262442675s ago: executing program 8 (id=5457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x2f, 0x4, 0x1, 0x8, 0x8, @dev={0xfe, 0x80, '\x00', 0x3b}, @rand_addr=' \x01\x00', 0x8000, 0x20, 0x2, 0x82}}) 5.066830067s ago: executing program 8 (id=5458): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)=""/93, &(0x7f0000000040)=0x5d) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000140), 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000040)="cb", 0xfffffdef) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/82, 0x52}, {&(0x7f00000000c0)=""/74, 0x4a}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x30, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100009800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r2], 0x84}}, 0x4040040) 4.727530894s ago: executing program 8 (id=5459): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000740)="d4", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000b80)='\a', 0x1}], 0x1}}], 0x2, 0x4000050) setsockopt(r1, 0x82, 0x4000007f, &(0x7f0000000140)="020000000d807fff", 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000fdffffff2b00000008000300", @ANYRES32=r4, @ANYBLOB="08009f0006000000050034000026006c0900000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4800) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r9, 0x29, 0x42, 0x0, 0x0) 4.342792283s ago: executing program 1 (id=5461): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x47, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x8040) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x72, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000200)={0x0, 0x0, 0x100, 0x2, {0x2b5b, 0x8005, 0x7, 0xc}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000380)={0x40, 0xc, 0x5, {0x5, 0x11, "028ce0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x3d0c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3cd4, 0x3, 0x0, 0x1, [{0x25c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x1160, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xc4, 0x1, "3158cfe2458c30a76fcf20ee8d9ec6861bd7ca32c7737907cec86595cdffb27b1d8fbdb8ef0195976d1284d249cb973ad18a684607b1288bc2e46b5427e784fc0a4322bb93e6acd9fc77676b34b85886af55fbc62bf1107c73f7b4a93b3947273d03d87e6ed2e9591ce950ed022e014743b7a78c0a523033d1867fd199985a9eda17bb53b7bbd59de6e3d8695334d4a8d31fa6030a2ad3df23623d82642b5c773d43700fa787de79c80219efda7fb1d7d95eef0ca09ac588f1a3d1fa5b261581"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "ccb69b01409cd8bf9c82f2f818903436d8cca42592b1318d1ad3dbda3cdd8747862e64d0e85f5a0a94e1e8586f9605564f6c37607f55476b1127b5cfd9a19230db2981a204f3eac78ca782a235d3926767838de5d6b192b52609a0620ca8c576d1728f8b68f815c9702a52747ef4111869364fe4731918d14e57fa236b42687885253004924c127a99fea63a26ff7448b54cd7b79f90c5e0a31c06f45f8736f58ab1fddf707f0bcd6287390b6a9b4e93dad2b166e45ae900c13552bfb25300435d2407656880afcedf594c8ee00f6df498b7c22232d8c2a12e4df8ec561589258ce0e5edebe2fe5b95cca52b79d6b3a72c65993fc89b2b90dfdf06447c4bda79e87e85b5177df0b4b5b12629333e00f72bfc502734fdb63619f491b3f1f5f9f2bfcfc5203dc70281a0d8c1cf314d91ba0a37a2698b7ad06e12b216fc75ed80b6aa521f67c0d80ad8ce03234de3ddad7fffbfd5342534f7bba35b1fb8bf1b9b262799db5cc81c3ec25c95d8c15099468bfcec4959be306c8fd13ef3b7094bf3c39487c60c9c631aad68bc6a7ff6b50e00b356b0984b9afe3b065ce3128e4ee7f844bf8ffa73327771b99f936e5f93408f7c3907f8a69b701c4ad57eedb4a6d595bb18d68ae4532cd25add1ea2acb481028ba1dcaef273d2e002b1dfcb5f7aa7c89272ce7d76e993983f1530d056a9495ece5fff8bf0f60cd23bb82fe3adde010f1e69a90a4e70220a0aa7e1203357ca8c50c2dc75c1b818b53ca755f7238f65167958c774e26d457135de40780a38a9ad4f84ca85e1f7fca8b1833004055f0e00b86afc4824909a3730094d381db312b7d24affeef01a57c846c23aa936302079369ac015d0fdf4933e96543748f45174f3ccbe6e0ef9a959963770159fd7e0cdb961bc32b8183a0070b997624e0fa24230cbe74662e4ce2cd41d8c432188e6e92935f9b48b35618ae388ff18e521b54e7bd2a566ac05e79e7b5a01a016240911010bc570f1bb65e1469c49fce1c6be3ecc0afc4aa3fc247b2a54018ae5142d0627bba66efb05ee6cdfa8eb06cbd3c25c146a2a6e0e3bca37b4450990588d9ed310cb3f700afcc46f5974c49a7ffc71dce2d0d08d643771e33f5c679474339b28b0572745f67087f80e883536069083fdcd3b7bfa4da50f74bf2dcb968d945e368d3472b668df52917557aeaadbb8063b6551a9c5e350217916374dc983f82cfa3558ff176ce1ce0d7a6ceb6ee836274c7686c1f41287340e88cf49462d41e61143b8ecfc35107a4a315806a2623092ea055cca48ac89864db286b60d50cec54c954f33a81f6dbc9d30f86b6f21ce07e5a9fe691fe882f004e60240bf348147dde8572e6d82ebc84434531c52395cb006fd4b6483a05d4a36203a535348d48a52c5931799adbeaa8c3895d3f73ff315e15dd753f109fa40f4c9c2bb7a55b2cc061ca4649ea086ad84d648b46923981d1b0d17c4e60b7b180e44d861794054912df5b95ab4e0910acbc15eff1449f63526c98c0619b8c85189a9ee5495b0ad59156f9cb9f1e4e03d4e8af0fe223fd7f22c968dbf63ad75b18d4aa53a5c88dcc825a40f5cf836055a2b21f85780214d847dbd12cec0cf85970bb5cf640efe4d4da0a53dfaa46258f969edc848547ed7ef35950e3dcef432b92cce625d0c0171314a5401a5efd947c0b656ffbfd4c062859897943d23c27735025f6ba2a19f42473d7f69133a1ddc162e9b3a3a89b386f53aa9a6c53d662c445f7ba468bb2a1a296a68ba7d1d9bdb5dbaf0b79da162ea17ba1eadd97a7d7ceb7fa9c4d8f47f26dc3e16578bdf266a85237dc8dba19c0a0147d8c20b11a4882429ded8e8ca8d2da91f26d288b5a1715c5faa8ed5423ffe935e37f103feb1040c3520c2e8e42976fc5ce16ffb021ea635303295f52068720a6e809a0bc72cae18f193948057afdeaa02f7d6fdca6071e40b010e3fb959fab9abf6759cc02fa7e99a88898dcbb4bc7535d5e557c431577da694ea056a9f814a1bdc2038474971cdb897b95ed6e9dc0d7d6a08c4a6ad46c42f837c0c38c408ad979cfec6883ffac0d7eda4c942cced5dbbf196abaa049185b06f4ada8ad8c78ebdc4415e26c151eb9efee58068ca9a9739f396a3fb4de17676b78246cbecbc042fc632022aa721290f41a6c4ed702737ac0a5155f9e739191b771534fac2870b863c80777362176f6b26be870f22e3e8e99e072f8dfc6ccc587cfa2a22273e33a76a8b552912eca87c99fee11d16ca5158f14f8bb1bd5b9045caf3b928d73e585a34356104fc5f9bfff2ed0f4ad234782713e438ab4dda32ee3a47fda4efcdf9b81abbbc0945787f29e36387800eea27ae6451297d513a72aaf8879dd6c1eae23fc2dbfe108d82e02795e87fb618f897bab895111c2886bf57a896db9daddc08a40b2a6c711b5fd40ed4bed995158d2e51a6f8f6fc8e9926e2d04525ea90516a1acdbf567b2f9c9c3a7fd359d8d8266833fbbee5c17ebabbd8664739ff3fbad02d473064972d070d44d8158e483d1d0759306b22dc7168d8800f017a8550f5c0ce41477518701d3c78861ab7d43c0ac58bef50ba945078460aa661473b95181e9190644496b940cb47fde5b6543c51a89b61e8a8f10470a7983436a043072e856f06cbc9082da8db3a0aa3e8394eb47c6fb2bf15886f828318c8cd8fab55d47c51e91ef6dc33720310c622128bd198ec1f8aa3705e7ba1d72ab7b8a5c77ea1495fa0684fda825e6f926ce16bc74dbe47c4afbedd1db6c3b213bc8a09e82823671754c35d3eca407853eb28ed8b7c58de007a08f4cce2006bd61d14783290cf3924c642b826a37733af6b5d10d9a606863f00258388d2ad423024853ef8592341445334062e324c735291c51d23dc4d373a350cd712def23691c1e54d5350eab4a357f6f461d7323fc524d8434772aeb0b164ecf27aaaf5cdacc360a58f9bcbc889cc4e767ce53c1745ef27c912d52d521128335f927730b683ca44b1a21140806fce641250122e7fe93ff824106b3eda8fc15bc5b04246c453503e9daac15a3ab9ef2933779fdeeea9d74fddb28f3dbd1a5918abf248ffcb800bf04539c9054056aae0cc834a231e712999d5bc91d0fa3baf2b190d3613a43a8626094305a5197bfa10c3da7d51c2a501cbd5db1da14a7afc8c6eab18fc2fb29be8ccdc587510f9bc3612394462294e3aa594861db87d9d75f0c00a6016222c360933d2c38945491bfe35100ab3d4d719a43b56f1f0ddf9da65502fb5f2a31be96c63caffe5f14264a17df272b2000b4f9a7a63e17f3c5a9b4df382fbfd15100a49c2d498ddc97e70bb682116462f4c7f1c387db503fec448b20ff537a0147d8c292708cca65a99428cca8d9985758f98598cefc0189ab0dbf04084b8eaae8feab97d74052b0c1bd7367435cd7ebf4a6d0712dab586e62a09aabd84f0e6e8950a1f8b73caaecf4d7f9dae65331447c966c245818a72a1a13e53d1d1f3f2bb52a7c9dddceb173f0006783446b6114eaedd6e6058f78215cb3b0f98325c006a8a7390772aaf9af33398f269a21e1c0df5d5ae749e7544959a9c2d948ddb1c8de107df6c132766181e05c5ca4369d0a98f0da2d080910b4ef407f91cebd4bdc69061228d6479580832bd38a31a6f2d468f44d6f8df22dee56b4b596d60f2dd891e20c8cd0b321aa3039d547397fa2ead816d1b2269da1e1cc9a3f4433bce587754d2be1592a0f74852f84ee14241aaf3a642a94c035504e190a6199fa87fcf163674e6acddda74bbf1a7cf5217b7f8b0d2672e00f022b6dd7008c9b01e2b9a2a82aa1297aea57e0fb3788027a3c0072bd8bcd33261a01cbff880de2f2696e998110d176456c10be2700651a3e4ff73dbfa4bcbd9491bc6a6005ccb29768d7a649eec7b1921b3313c05f56e8737104ba942da504206686db44c4c44e4b2a2e99c18e61ae73ea3b59a407b68b0dfb0fa8db67adc9cfee421a1c74a1fd201560d0a2fb617e5d626aa864805cbd3993d9662c75c36feab05c4d304be2be4bc169ee0e27811b3505532d7a2a25e93b2c21c2cc3c3b44eeac3afb718f45e5fd4ad1d5be48aa1ede6f3206838c8d8054eeea32f91f90e1506837ef123b8487d9635e5c6dc12a5734be846474632230c115b80da66d1ee498d5c16cf573f9b524d15cc08bb1b2a0298cdeb354d2c71ebc7655be7aa9fe38f4cb2a442576588755e44d584b701e4dcff07fbb602844b6cc8ac0b78316a9a07256f5bbbbd6147d55ccfad02c6b4c940df7527e27d37d001f7f54cc4d2a5ff56cea7995b46afb3f3771ef9e0b46166c30cb438bb34e9fbaa17c7e9b203da2b9b72b04457d9944c3aa4d16c4c357f57b987152422a83f7f658812a4bbe79e166fdd583b76c1589dfd309aa720d557d361ae45f8f86cf628ce02d82394b590ecaf2894eacd74cf37eb6ece4ffd33a330c87651dbcebdddbea1c9a457ac68875a217ef241156f31e4c4d90bb53391b487728e5f8bb0ae5b5b63edc47b750bb30a85962aceb2929fa083ffefe49efb2e9ff97ba8001a6dacb3324d7cc34d75d63e94ddb7e9b4d8426facba1fdcb0b968b4753044fbf73aa646cbb709387bc7614ee73103e88b5c1c23f3ec98c342ec171777e19a2b4d638db35f8c547f7f6af4b4b962955298ea47e8ef2d9220ce6fe43caefb4cb74cd4c6d756b37e49d19d8894c7642974303c12192241015ffbc01b3f825d7d92b45d2a38303917ad67980058a1d44dbc247e7469f5f2037743a863b737220e95406b30dfd50e7c44eafb269adac91cfa4444b1dbda70ec753c7ad0772a53dd2f2b48dd7f169c695c057710402fac98f3a318dcb0bff7d6ae87627f6c314829788a1b3a057e016f6e7d90c7b2327753338f6fda40177a8ca45eed1d665bdac8017055f13252461b1ba862b07d8abd2b5f180ecb0c87e06ad7a7d816c42587fe1f227cb147be9b5d4f6eaac87dbbf9ae351eaf8324dd009dd0148e6dd59ad0784a2ebd8029354e6c732914db60a5d4f869838cfedf0075595c3a9b94f74d864ecaa0c45c32af548879ca6d53748960a08f0fb15c3c369b890201d3816593cf5fe077b5877fe1ce4d7a90665a2265f2b9394f15a50094ffe61a731b61403816fc2f3a5c4e7660eb3fc849e9a8b985dfbb6adbf01f2356f3075cf84c61eaa78e02d72e2e405cf2a15a9f7817a66ceadb983408bf951724e809b59185cfcac745d0ba9be2974239d29c92962578ef4989849f3ae3b8383618a99044d563296177704b9f8597a842f09e215aeedacc8eefc59576408cdca12196184e4b9378f4db99f91df6cd6cd52b37163f2e33384317c8148f53617520ca5091e022313a0c1a845ee37a0be711a17c12dbc799f26bc49f2bddce5d042824330b6e58b3d5dc4dd412d72f40312c7c38a7d111d929d4057003a3e23408ecce3139333322c9a5ce5b98cab5f827f340d304ca6221689796b8eb3d94d97a6b7a918f67a87dd203ff1d079dddc9048ce87f668467d01aa3cd68941a81443da3f20b0d382e2656b5d296073ea1c776d7d43dd8f981e0284ed00333134147629df301565f935629ca676d4d9233f7c6513b95704e92de709f1501f538104c8d343c4ae03af9dcb011581fc40b6bc28e46b25c938b6a6f3df37d72b490516071192e66da9b2a6605206b1ff0de54c0a3790a7d9b905f8bc2258ccf3c12faa78d63abdabe79bf9b64816c90532fca59e0769038ce21a8d564b1604d13cdbdba22619e45da00f92df4cd33c61080ce00b04a433fdb6e1ed63d9307aded21a2"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x2cc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "83a1bd6237338cc63756088bafd316879b453b528786ac78730493"}, @NFTA_DATA_VALUE={0xd1, 0x1, "c2fab52a8f19814e0f55dfec5516ccf555a0e3d0ad531374cddef2429750e0b8a028b0746ce48c82c00f2160295307f6476b1faa3ce060003d70e4f2aee5ee050ccb36e7028ff820207da385d136db22abed996566fd13ffbfa0c8dac5bce492c93c500daba1d1e15c8e270197ca182c00cae4ef0e11f348ad940eb221181679e7b5e6e1c94abcf5dbfec21535bef746b2e6f55234eb77a4a3ecb02b2ba380d83bbfb506c2e632fde45b145618e4707b0e40d0d4ccea46b28d16cbdb42332310f53cea8d7fa0c2c3659f099e54"}, @NFTA_DATA_VALUE={0x60, 0x1, "b1c3d13ee564a2a2cde37d0ab099ef0ec1152ba3c27ad4393a8cb9bb398b3e9a2c3bc074459dda705cc977e4ef3060bd96c5299f84813cc2f039683526d5019c7da066eebf2609d7c015a4e7cf2868e12a334b4714ca2d72496c61b8"}, @NFTA_DATA_VALUE={0x3e, 0x1, "bd2021f30ea2ffd1c86909ec7f7b6b38711daae0786ac0a2c03d0dca1736f976494255b3ace812c2c5b44dd63b3efad77f2c79da5bca2edfe627"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "1d8dec9842adcccfde04917d1d17425d33b524d91fda58f6b5a6b9009ff4cf7a6a697cf889d7718a57560b5afdc865a0f0be96cc8e9d7a7bb2c7c6fed284be330d53984a1103a1546436b5a687e7290587e55a0b686a8f3400f4762a7fbd75155863af453f070118b0e5223eaa5b1d23328d00077f42c512f89751ab93993d298fba09eeb90cec4dea"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_ELEM_DATA={0x1148, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "bd016cdc72fa3eec18028e04a7917202fe82ceba61fc72668279ce5509ca33f3e50aad8895495d477dab9a048aa08339ca395888ee8601005311b5acd7ede84d1ff01d8e262e2fa0bf20baf16ceefe89565a5f3c19c7df255ed179735d4f688288ae22ff91063b7e23057d09f6c8ab4e496fb202dbe8ed92742f27cdaec465aaf3a6423c6834d0cc7a37039e7a5eb8e31657124d1bbcab649c1dae1e03acc22940614cba972c68a0a0683c3ebeec8759d218cdf726b08ae0c174e2c0c17098a694a64fa84692509adb86ecf948940f02d5cc2bb734675f009a948658596301a3fce32c00b7be5a8253aee1105fe372cfe43f3794ffbe27cb150ac3370da4fa88da56ba155f9b7a009d1edf71d5a01ecef3f5738a865373a8adbbc2cc1171a9a9fc74cb101015a85a79453e83a2e00572edbd8ad9026fa428765d91c2080d49144a7b5f04d76b73efb417ce0c954000add99c62da5c2e55824ad6c33f9838057dc8189b3a31dcc486bdd7b998b9b8cf0c32fd44acbd10a9215c43fe544fdf853904007ddc75b43a677d08db14eb18f547b68f84c3d8fa41cf6d552a0ae71ed349f7967bfd2d7f05461f17344aa091e23b5fc84dae096523437a2985c92a572f3525a2f7d189a4cea1231ea798e59b8f72fe8b5bf6624731456a56f05576401de674602481c38f6528663a8545ef25f19f1d7895f3c7b691de4187bc34a9a9f4757138a46d4aa5460ff41a92a891190d64180e57ae8b891a3876b27743201bdf25d00ba658adc4fdcec6d0ed50cc19f1eb6e0e6c6362bba84197a2d4f88d919a125e3ba77ed35a3b428af61d318a354065113fb907713609c106bce382aae8c8beaf4578d5d49a1a6e85d8db6ad00b3b040097d2fc37a34346ff8c2cc262ecabb517e086d9f61a5827ccf64888f5d2194f735d896c6276b58e7932b4b201d3651538d31eabf2079a01f0274796f8e6a72aa357d294c40da56418998a929a08146aea81c8deb544e34649f8327b92d6a579a4d7a5d3ba763642d14bec565d4a45831941c8c42b3213ac7c6df46bb32f23343d86ad403d6ef30145155889f2b14e320069322d1f305631467dc67b213102c68e3f30ca1ed4860783d7da53182ac0a20a68b79e41dc24f6bf63acbfd72f1eb5f2fcc3dbc00cc597634c2946b3cebdeece9b0f2421bc3efcf079b233dcff607f5295d0a73dfa25504d4d2e2bd585be1bbccb5518a2ec37a7e0e52db923c8b7bbb322d0ff284843c82947a4ecdc79b43778cca8e311e0febc8b3d0fcfa3685e9972a2b988489a43ce855eb851963ee763cbd26261d7d6656aa6483e49f201813eb19bad7ada478ae4d7b366e0cffe6370423f9204708894633bd131434a691547682e2e85ee5e663f8a474c825b1710aa7a22b31a88f5deb34aac5fd76e5391fb129e05a0be6c028002a777dc8a87781bcbb884dbc043b512187a60f91bd4edaefb4d183b924373d15acb46f0d3516627698510b96fec76a9262a70bfeea89dbf2d665e19e573218e4cb0b82200f5169216177e866a25342cd2e991186ca56dda66648ed6dab29b7f84adae5cdcd075d1b7f6031a4d830a1a6bdff6c045e3ead62a147ae0a2bd24ae5a57284dd402ee88c75a7b7dc32617099817987106ce642346e52f0a9eba21955e5f369c603e7abcd41a208ce384ddcdc5a28f4386d6a3f8a384dad398e1976b268acae932bbbf308429718215f5b50fbdb21e36eb0b026407153bc9a7b3cf93ef6894932ff61f2d27ee0724a046863336d2d0425574678308038e16913e8457e6ff5f60aad368cacf304af7a7596df3a7493d6fc231b11c739d4d49e966a7ceaca30cfa012f3fd830c32ccd80768abdca8d47d9c779cb0bfe0e59cb30a52e48f51281cd0a332cb600f52a894cf81f9efc411b6c5123295419c458bcf55e267a412b7284cabbd86d449891ae0630e4e1fc4a28d08edf970311e7c121efd38b8df146320fea0585f53ee1b2bbbdc7b4e3110617007cf2b8e1848a353b8a89be7b56c15d4b3fc3bc33be550951c6ddb7120f1193129cc1bdcd52a5c25e8708d52b1bf3ce65c944f260c4f99d7dc0cf8877515443edb2ea767353552899cb58bddf56629ffbb09f427a30aff84da9a5705ad1fe3738fb8e8f92cfe17750bfe3150b91ef2366803cd832566a6465ecf6a82b9f254952612b1219667dab253f313e45a60e290d6e26a1f35c05a1bed27dc9e39fdde657631777a7065e481a2ce6b514041610a3f1d723452db229e1c00e5979f554e9ef219c2f3f550595e9f64f792245731ea5f3ca3ff50d9d9f18ffab703ff4a1248e58b86ad3bb5dd423f27a023ead433bfc21f407008921a1300d657db1b8610521b787c4b35c9dfb982fdf560193ca2917f59384cef80311a060beb59064e7dacaf1ad9e22974d2ce303615c3bbfbe6e70e3129374c356bf0fe29123400a11b31349b31a1c743ed93f3ae47de2cf7aa118f0a0723ecdced2ecc0e26156f6eed3a6c915c389605fb99708cb3bceba089b9876764b64adf06e5ad59db0daae2132aa3d24347cb7303efd478462cfb56a0e7b0d215c9742d700c01af540fbf8c5451518708aa90997cf4972a111b84b3371164d83449f960e82e861b319ece7d4586517585a2c48bbc8ba1f44663f7854b494c38966fe709ffd3d426442216b83e3e0d7a4e7b2925ae6897ea7791ce2009b26bd97909a96e72b54997c37ccccf51d0275ed00060ee2edd1d63cad72c3392f0f55e43ec4a9872748914f7d5242af367b3a1fe79d9251bf06fe8739f6bcd76ca586c91be3bb29fc3314e7435985e88efc4f7a15a45c8477afe36d1f14863d209e18cfa959fe27fa9706efc88fe9e67a1e0aa882f7c803095c757e5db718543a1369854881de69b08074bfde4be04d1b385933439e0a6f4ef563aac8cbce7c87fcef2f84f87554adfecccffcb423f958c1658494afec6b71cb18d8d4975e98c0f5b55aeabb5801e578efe2fbe2b7836b6da4dd1514800d5f42cc77beabdb0b3bd9a1f08bb196ad21b4b1c86f0665c2a716bfd6a2cc7c1bc43c6e80a9e92f95905107799843b73418b806488a18fac858ff3e353f97f8df02583b4f913ce3dc980ed998322eb837c4ade030b5a2c7ac2950ac842393ca3f701d970a71c3c561552a457a14f43b3269bfb16fc62d97e065c45df09dd6418f4deeae1726f09dc0e5b0f1567a9fc6feb58514611ed7768c5fd825dd8205f6fabf29765cf05c5912fd70b18f777afad9a36a1b2b0fc29ff21f2cc007a7e0ce0b4db4e2d1fa9e094ebdfe4aeda807f4ca7f308786ebd2dd818fd0af0a4bf9374f93e8e34ab2cb2ec5124862d8c2627dbf5831ad7a2eca85323e8a0a78e34b1a1299ed442bb0b6eb531be2e3f042c204ee6734df7c526ccd0eb578fdd66c42e1d5aa693914982570743eb4371b6de5a37cdcdf31ae7ca2ae75aba8c19222a2db877e8a5a1700d54c6bdfa68283d4d5a57bc8630b543b78113c42af6734c57bea80f2e4f247702ef77b40ecd912839433c77cb282da2bdd46a9422dcf2d2ca74e22bbe8662a8ca82d3307235cee8a34be6ce4e66be6e4f3e6bac35a9df15c8982b3d08bc2c2d4e111a59cb4bc64a22c8c1d425078f3ae330c908d388f992d09cbb9e0a2f15421cb990b97a5f6dcea6309ca3f629c252b8087984a0d786091058c6c79629da69a7210fd1fa8a058634a2032e69ad7acda9bb2a9e31cf1e4cf8b65871ccdaf0b32461ec045a70f53f9c2b5cb920dac22779103068b7515278e4c3253e4cadfa74820e9550aa4a882cfe2968fd4773935c8bb1fc935a439cccb5a511447f5b70645da3a6f6b6003ac4d7ba4c0006e6d55fab858b8d88483989755e204bd94dac90017844c15e49ff2e55b280b35a3ad624dd5f09e9200c27cdf00aff704ea332bc35b73d7fa49a66870e4dc67dac130f0438670863245599b858313c0c42036fc22c7d07ec89cf3cf1f14c14661b0bb77649b8e3af54839e0f86c6bfc3bda5aeab7749462bbd3b3a48d683c35789111b782b9acffd0f59693b22bf357b9ed7ac316c8416c483b63f3ff570341f28dc4bc7e11ff6fd54585225e5944df5b5cf7c80833aeb01995ac685fc96508f138f9bfcdd2393ded06aeb734c8ce028075dfa7c180dfc105d562be2f8317b1836c51ca7a25a27925baaef37b07312a77b7c2eb01f7813111977cfc2e4819a946f570e6d1cb0c78f975d8e7f7678d3dae44991e0ce50b749abc74c65a9c434a399c112c36cd2639c513ba0c35c731d3756fb74588be492e52c91c3062837c8cd73699afcd71d11e7fbcdbc90a4c6b5af234d931c68ff2502cb4c82d712bfedb23d07572753304122e30d0b84b0995b32a54f72ca65b16cf27cf5bbc742b34e7afbdb486c7fe1dd68f8a00df4bdc8af71edfbc9e5fb0edb3232de321c77098d83e24d45eb6fc8204c6e62dc07c810bd3cdb44f989e8fb69b2391aa284fea778730d450a6fb14c43be9a92ed9712a8346abe28d1b8a67ded0e3e3e2991b3e920e651d9a0a27481829ce7d35f3c3bbef90142113ec3d8a23c121c612123d9b3918c54f639c87b4a0654e027c4b8893cf3577f600a22df08c521f09c9d2aaac33204b5a6710af0fec97eaafe403138def28151844594d202230de6d958aeecc56054baea48001a7877fd28c96e78ab398c4818f3cdf8908e13c7e83682844ae0c6bc85f8ad3e91f47cbd4b04d60825430bc6ffe9a758afa8019f6ce23b6147415cb57d7b6450196faa9d0ea4c3abc242338d1e2e978e23ad5182036f371c3274365b94fd0ff25d0361ff87cc968a4db315df87421f625867b4ba0b9b64dd53ec76c84892cb4332dc9ace45c72a294bae7b3618abe071a90767f0f9c4dbc42ad60fcd7bc990fd53667afc5797795c50e954cfcdfe0b1d269b461653271354bc6fde11ed8dd91fd3cf9f807a7e9716c827a9574bc176cd03664bafafa6adb15ee9cc06d70b5cd75662e7a58cec1fe9a78afb4952a0228918ed1f16d4c6e13862a3e739466e3be7fef9948ea8d6110911ff7cdbc0d99a67782d898174e88c430a35cdeb9f1750daa9580dbb2576a6090d2ebbab0627d96b9f594e1874876a8fcc69f6958802bd043b033462db1da587d45478a3a0e1d3e034ac44d72ed1aaebd39b0fb6e6a92b7eab35855d4fcfffdbd2f82369a9380968e172062d4c1aa3a93a3b6552d6de7972a2999a97b717101576af1f2c07bb5d2104afdf07b3f19e6cec9a19770161185053867060a107c9998cda57edb945bf9bfc2ea8adca99b3e065ee6d370d03d97ae556d7a4793f2edb6569acb966e707c20b3d71c8ab1cf385be309ab69c562138094714e6329d4dc06993447a3fa8b3f355337115d3b68dc3d2d8614d130342a71aab89f6fa24031cf75ba5294a7522048a2b1bb0efd9f9faccb38bc1d20aa215a17e7269b939a1158ffd9d4d4b994a3fd37e89fe47b29140cc4f2361517732da6a68c7e916c4c8a35ebeeb4829dda78f166e012b3c23bc825d34a9339df8e1ee68bc997d909d4a56155fd318aaa4a1bbfcbefd7d83d2444acca9a4b9625676ab6d6e2f51321212d8fc45f2653c8e37191ab438f779f2886756d3648ca77c1b7680af3cddac879d60af101737a5a8ef4c0db51883cfd8140c1dc325fceab9380c9f5e1e207a5123f1937bbde4892c6631e29a00e34fee0c72c7ec31e55c222a4a9ea5fbc79fc5464f243966a3628cd7da4f71481ebb1e6178a66950c043d0960769c02fd8bd5d02dead27982f3b1e10793250c1dd1e0d88bf8cc"}, @NFTA_DATA_VALUE={0x53, 0x1, "5d419bb863f76f0b212760ac78348c7a57bfd1e221066eb0fff4c04644898709092bb1406ea67ac38dbc788761174005bb7798f9caff7fd2b4735f831a665b5a678aafcba015d3cde81ca107a0d285"}, @NFTA_DATA_VALUE={0xea, 0x1, "62cd0449be33b62300b8f4b13fa6a12e439db51698854aad14bc20604ab76a3e8ac91ef42e2db8a77e992621c5f1714052f7a5cbbdf87057e8b6c4022d5766baf576370fbbec70de0c1178a7193025843cfb3e6f4313cdf24e422297ea58b6a4b1dfa5e3d08ce94c2f29f18cb7d31c80a6ff37321d71839a0b9433eea6dbdbfb92e2222d93da078147aed2b60cfd1e91674a7fe42fe571a05f36c9226027dea62614d78bd0a6ea523149905c01a054b1c4ce8ee29298ed469bef5902345e256a3330caef2ad2ca72db480d0fc90e350cf6e27549333b6441d0c9bc5d413d0f7cd682b7f014d0"}]}]}, {0x1494, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc3, 0x6, 0x1, 0x0, "6fc6f42a6c86a3fd1846bec940b4809820d8be284bf4e01d88e6bf748073250422920870b7a3b62c99df8b1d5758aa7a08cf9a62214162c7ecc849d78a14fe0ae2e2b05582f68a8d02d8a5347c1a1d791650314fe6069c4fccc4316f8f9ad88d0ced771a2828d14497f00963a880a709098ea9f259b9f8f87adf6bd7c6df6f6a43f7e0b12fa0bb9cd0474abba82c74a569663cfb5bc2fd3ee273b5a37568ed142f065462103c6eae07943a1c12a70b5c178fb31d34df00be04432e83b8662e"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x10f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "9f48f16763bbe4e599d1a9b6384cd5a7f8cd51f3b4c54ca0ef6a07"}, @NFTA_DATA_VALUE={0xc9, 0x1, "69d792f7c0ade2deda4d31971be566f29030b2a226fdda5fe69349565cc9726965fc16b1dd5e143ccd78ba074903391b1ef004d5eba75b73adab933d94e397c1c31077d31dda11eb381f4d005e973f8e543cbdae7a1942afe51df5a1e5d39d97fb9e5e4a56c1808d41889db34ef8319dd9be24b21fc42b96482eab1aad78a8019fe5607488e387df2d18761851174f6fe481025f5677eb17bae8e0635e49fe9b30fc1ea60a211f8d1a907b51c9bf187f294af8459c2e3f1f3eec6b04e2c5b6e88e1650a012"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x1a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf6, 0x1, "2acbc6db0b2bd91b4dab748c58a2bac34b83043b248a9c7291ff359a5c370486791893c58f921069d2f87f6e1b4b43b120dba8d1a2cc6ed5918fc8592b46f14fba11a315fe56d634c196be74e6007bb9be42eb04b0cc4b2f897f4c73f8ea4a5837da71308d704f5cbd67b513b05c00a8e4c69764c21c260053a5f5ef027a8f16e7145f46209dbda97d2d5361eb892d1c2e7494e0a20b33b6c9b29bfcf1887eb81a9711df42e2b75198cd67f66d9e3a5b547e058948d511ee35813d625ba462e798cc093baf99633a7853c6c6b533e54c110fd0fba3993803c01cab3d54c0eaa88e43725688ff78f70c82024c4f31e372ed11"}, @NFTA_DATA_VALUE={0x13, 0x1, "67ca9e39b8eddd85188a6885c58db2"}, @NFTA_DATA_VALUE={0x22, 0x1, "2cb6b89a27613f39a46056770008f1e0d49ca031e0281dae53c842408067"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x14, 0x1, "eceafe8044357c6051927c06749845a7"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc0, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x5c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MIN={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x274, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x11c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_USERDATA={0xd1, 0x6, 0x1, 0x0, "ae05f9e933b4f33bd3f10e9c1510430c65d54ea3cdb99ddcff1c37063c4f21dab21fb0b7f8630e16b0c98163c9ccfa8d325e3b73d2a881e8eef3acac33e10175eb5e7923155ffa0d47c07a5f4f275c7877697eff44333b1a02c801b750315d067f6b50b9c11ad2d74f93aa61d0f4501e4ff88478f22e9b9d97188f94fd05a567bc83b69aed136976aabb470b747652c15f8991272b24876ff778e124d28ce92ff428908d382d8d5356964402304acc6ce666e99b49b254ae62f7e7aa77ddc356e7cc535e489a56f9c701828502"}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x1b, 0x6, "449331d5b9c45a3c0d1de6876cee3ec658f125502c0542"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x4e4, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4c4, 0x3, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x98, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x20, 0x1, "463f8d98835c54495291e7eb4fcd3a30c6c7f5dc2fbefaf0fa08526f"}, @NFTA_DATA_VALUE={0x71, 0x1, "7aea09f32aca68612cfc6adfbf262d58fb7d0b614c3d9bdd905f1c6f2f2ad1452a0af297e97f5848bd885e496eb47b19bf85f94bac6217bc0caece78ff12ebda25a6bfd4074e93972b11c665a5d3ebdeb55f505df463e2df28f396db8e4fc674df329e47697f8613b411764451"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x414, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xa4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa0, 0x1, "bb6520924e0dc000a95ee7cf053823e6a1d56ea2efd190cf0f14ea75c4da510ac48eda0b02b1ba02f34655605ce56a6ace491cee4daf05004256cea71d739b9913c03937acacf2c72a4ede0e572e9ec50dbc18bfe6dbd0806f1db4b3a923349d1070c07ecca2b1434532003fe00ae440a45161fa88823b3a3d479e8f488c17252dd9de63707a28e5fa631afd1bba58a18eb94fc07603285ea2c8e9f1"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x344, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x64, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x28c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x27c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_INNER_EXPR={0x250, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x23c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x68, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_IMMEDIATE_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "1fc8f565c34def9c95e2e52ac008f77317ed2c693e924cf676f873cdd9dfd69fdb31106322575d8b"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "66ba4cffe7ef31d60a2dc800bccbb844d815266620384f4d883674f5b787d998ec64c55375898187fdf871ac00a930461c05cb2826d54954d54e08296a1e9962cce7f62936eb30269c4fac98dc0e0345bb"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0xf0, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x83, 0xc, "01334f514e7b1d598bc4b1feb8530d5fdf5998bf5b3285e67f5e7f82327c63d8534caa239a5dfa47333226eb485b01019e962d28668426187c53be2da65427704986f2dde4f9c8115d8b30a79f9eb5ce2a8a201ca4f3e5d891222f1836d504ff25e7ea43b6f37637330007dfa79960d4694fb208bc24352bd1662898b2dbbf"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x5c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1f}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x43c0}, 0x1, 0x0, 0x0, 0x20048045}, 0x40) syz_usb_connect$cdc_ecm(0x1, 0x63, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x4, 0x50, 0x96, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "a0"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x81, 0x3}, [@obex={0x5, 0x24, 0x15, 0xc}, @dmm={0x7, 0x24, 0x14, 0x3, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x81, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x7f, 0x3}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x6, 0x8, 0x10, 0xff, 0xb}, 0x78, &(0x7f0000000200)={0x5, 0xf, 0x78, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x7, 0x5c3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a00782f27b765623e8c1dba5867047cd"}, @ptm_cap={0x3}, @generic={0x52, 0x10, 0xa, "dd87d57128e747680d7baecda255dd540c50d908c237b359e8075ecb2eaf763a28a1e9da583956d8f6b03a1069de732f8b0a91a32e4493c39c3d3e739871a140f566b40767e691f9270a2e32ded82b"}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x441}}]}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000e1ffff9202"]) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0xe1, 0x5d, 0x84, 0x10, 0x644, 0x800f, 0xd2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x91, 0xfa, 0x0, 0xc7, 0xc7, 0xcd, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0xc) 4.342401891s ago: executing program 9 (id=5462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) 4.319277201s ago: executing program 7 (id=5463): r0 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) readahead(r1, 0x0, 0xfffffffffffffffd) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="28004983dceb010100000000000000000000000a08000c40000000030c001700000004000000b82a"], 0x28}, 0x1, 0x0, 0x0, 0x24004020}, 0x20008008) 4.115874703s ago: executing program 7 (id=5464): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x7, 0x0, 0xab49}, {0x20, 0xfe, 0x1, 0xcec6}, {0x6, 0x3, 0x81, 0x1000}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000014000000020a010200000000000000000000000030000000160a0101000b000000000000010000000900020073797a31000000000900010073797a300000000004000380140000001000010000000000000000000000000a99315e73f302c531b49c7f688b5551ee041cbbfdf2acf793923519a28627"], 0x8c}}, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000004480), 0x101200, 0x0) preadv(r3, &(0x7f0000005580)=[{&(0x7f0000004500)=""/49, 0x31}], 0x1, 0x4, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000429bd7000fcdbdf251600000005000400000000000500020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8002) write$binfmt_aout(r0, &(0x7f0000000a40)=ANY=[], 0xfdef) 4.115173211s ago: executing program 9 (id=5465): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket(0xf, 0x3, 0x2) write(r3, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) (async) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r6, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cefe42e71e94", 0x6}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000993eb1312cd23ea639003e0000000000000000000000004efc4be86b54b8f3d269c334c9aa9696f68a56a6efc117ac25edccac"], 0x18}}], 0x2, 0x4400c800) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, 0x0, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYRES8=r2], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) clock_nanosleep(0x1, 0x1, &(0x7f0000000f40)={0x0, 0x3938700}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60b8192300080000fe8000000000000000000000000000aafe800000000000000000000000000078643a605ba101ad4d"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0}}, 0x10) (async) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x1) 4.114946961s ago: executing program 7 (id=5466): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000080)='net/ip_tables_names\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r5, &(0x7f00000014c0)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) write$binfmt_aout(r5, &(0x7f0000000880)={{0x108, 0x9c, 0x9, 0x1ab, 0xbb, 0x6, 0x353, 0x700}, "62c4e83f0fa8a048cb39c262f37c5a4e0a30d412f2295676023752c4cc6ba46ea49a6017c18c1feeeaac1d814c2899c540e1883555b399dd482a42a0710da6157e52f3127f794fd7bdffc32a152a552128c30781c0065cfc4895ca560a6780e168506088783571b8005e84098ab5802a29452ce8c4d2efc34a84ee00465ba532836602c50f57d1cbcd08cd6fddf9fd10edbf7a97e03f306e503e2d16ec574a215ed934a468fa84b7f192147a8d5455025fbe4115e52a5b2a8e27d7ac72c718cf2b4f1cea", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9e4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, 0x0, &(0x7f0000000640)='%+9llu \x00'}, 0x1c) pipe2$watch_queue(&(0x7f00000006c0), 0x80) write$sysctl(r2, 0x0, 0x0) 4.001899325s ago: executing program 9 (id=5467): socket(0x200000000000011, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041", 0x1c}], 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000004140f6a60000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 3.44668769s ago: executing program 9 (id=5468): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x110) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10000) ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000000040)={0x8, 0x8}) 3.367020523s ago: executing program 9 (id=5469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0xf, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000980)=0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000009c0)={0x0, 0x3b, [0x6, 0x9, 0x7, 0x8, 0x0, 0x5c6]}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_dev$video4linux(&(0x7f0000000000), 0xa4ca, 0x183801) pipe(&(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES16=r3], 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0], 0x108}}, 0x24040800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="120000f2303920022c02124085010203010902240001000010000906000000000000000905020200020200000905820200220000006aefeeb893b5ab413e85f13b893562806f3883950938895060a76584b841c68190ecf826c5b4e3d194c67e93be1ad5d03ca46e4805b445f2a6fae5bae661a71c113f444b7ebe0fa4a160aab8cac6598b16955082cfd9dafa688169f530b56748e6f057bdf58e7092e7f4bad1a0406f89b35564373de1a2f660d29ad59677323c04d8dcab844b16e294e187c595d0969e79d521d115f4ed767c89c680f3758f128e333502ac1ea495ab7f27"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000a40)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.546861605s ago: executing program 6 (id=5470): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x52491629, 0xa0000) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x0, 0x3009, 0x0, 0x8, 0x0, 0x3, 0xdd2fcb245114ab72}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setattr(r1, &(0x7f0000000140)={0x38, 0x0, 0x20000045, 0x3ff, 0x9, 0x10001, 0x10, 0xc000, 0x5, 0xd}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x50) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) dup3(r5, r3, 0x80000) socket$can_bcm(0x1d, 0x2, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5965, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x100847c0, 0x0, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) socket(0x10, 0x3, 0x0) 2.467673481s ago: executing program 7 (id=5471): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x8}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x826, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}, 0x4, [{0xa7, &(0x7f0000000cc0)=@string={0xa7, 0x3, "62dd396ed9f6d9bf69252fc70cbd708841f5f9950454323e22900253b3695ae886d90228ef82a4bb1fe8b0da3e06fc0e9d1dc58884b27df1c20f9739a714571ebeeb600f193a7d018f075a02c62651d5d46fac40036a4e4996fc3ab74b9e0ac84e9f3412a8f53de6f36df89e1022ce648101c1f4a7b986adc33b8510ace339159da5483e3153c66ad185ed040cbf3d1418c10a56e45d48cff8ebc05d30fba421283bd4fa65"}}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c200"/193]}, {0x3e, &(0x7f0000000d80)=@string={0x3e, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f1"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.704565269s ago: executing program 1 (id=5472): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8f, 0xcc, 0x9, 0x20, 0x4e8, 0xa101, 0x808e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x81, 0x0, 0x1, 0xff, 0xef, 0x98, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x78, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x5, 0x40, 0x90, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "cf4815"}, {0x5, 0x24, 0x0, 0xd4fb}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0xfd16, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x56, 0x6, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3d, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9e, 0xc, 0x1}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0x6, 0xf3, 0x40, 0x2b}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x2, 0xb0f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x3, 0xe, 0x80, 0x81}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0xe, 0x4, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x1, 0x6}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41c}}, {0xf2, &(0x7f00000001c0)=@string={0xf2, 0x3, "31708a18c5a8796d5403a441183389c08436a92697e8a158263d97f86cfe0d5008c124c3521569b039eeb52cf2d01992d2362dc21390db1053cb4b15aeafdf45bbd92c9b8314a1f8e1bc470089e425e2c449db5a07a7f3f38bcd3f7262c5d3dfbbd620df55fc1e46f7a69e25c9dbf7718201c447e38022a545f404444edec47acc3d9167e204bb8cf0b534657a8092e45c240b79d6f8fbbdbf8562774cc1c24a64a30477dd45c549642962ade42b99e8cb85965d5a1125b37e2f67b56e88fc0ffc92da14d4438a17f93264d850ac8f8a1a8bfca0f6bcf6642781828e26f463cd7a53222aa623f026c2c6e6c82a768512"}}]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8f, 0xcc, 0x9, 0x20, 0x4e8, 0xa101, 0x808e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x81, 0x0, 0x1, 0xff, 0xef, 0x98, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}]}}]}}]}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x2, 0x78, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x5, 0x40, 0x90, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "cf4815"}, {0x5, 0x24, 0x0, 0xd4fb}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0xfd16, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x56, 0x6, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3d, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9e, 0xc, 0x1}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0x6, 0xf3, 0x40, 0x2b}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x2, 0xb0f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x3, 0xe, 0x80, 0x81}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0xe, 0x4, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x1, 0x6}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41c}}, {0xf2, &(0x7f00000001c0)=@string={0xf2, 0x3, "31708a18c5a8796d5403a441183389c08436a92697e8a158263d97f86cfe0d5008c124c3521569b039eeb52cf2d01992d2362dc21390db1053cb4b15aeafdf45bbd92c9b8314a1f8e1bc470089e425e2c449db5a07a7f3f38bcd3f7262c5d3dfbbd620df55fc1e46f7a69e25c9dbf7718201c447e38022a545f404444edec47acc3d9167e204bb8cf0b534657a8092e45c240b79d6f8fbbdbf8562774cc1c24a64a30477dd45c549642962ade42b99e8cb85965d5a1125b37e2f67b56e88fc0ffc92da14d4438a17f93264d850ac8f8a1a8bfca0f6bcf6642781828e26f463cd7a53222aa623f026c2c6e6c82a768512"}}]}) (async) 1.379164297s ago: executing program 9 (id=5473): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x0, 0x2d0, 0x2d0, 0x230, 0x138, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x7a00, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x7f00007f, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@multicast2, @multicast2, 0xff, 0x0, 'veth1_vlan\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x0, 0x1, 0xc1513f04b421a003}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x0, 0x0, 0x5c6cad92e6a38bac], 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x56, 0x9, 0xb, 0x3, 0x7ff1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0xff}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) socket$netlink(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/meminfo\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)={{0x2, 0x0, 0x80, {0xd000, 0x3000}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r4, 0xc01064c5, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioprio_set$pid(0x2, 0x0, 0x4007) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa39a8440081001a0096dd6720919d00081100fe800000000000000000000000000002fe8800000000000000000000000000014e224e2000089078000000000000b04bc7759f600bebb284fd60113fdd21b0818a4ee09b34b0e615ca04664f1d72f1626ea26299b24139d913487bc1c7"], 0x0) 1.258528042s ago: executing program 6 (id=5474): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1, &(0x7f0000000940)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1, &(0x7f0000000940)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x1, 0x2, @stop_pts=0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrlimit(0x5, &(0x7f0000000000)) 407.617505ms ago: executing program 8 (id=5475): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) 95.227036ms ago: executing program 8 (id=5476): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xd, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0x10) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f}}}}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x30, 0x5, {0x5, 0xe, "dced88"}}, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) (async) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x104, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in6=@local, 0x4d2, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x0, 0x32}, 0x20, @in6=@private1, 0x0, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 6 (id=5477): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x7c7, 0x40, 0x6, 0xfffffff9, {{0x26, 0x4, 0x3, 0x33, 0x98, 0x66, 0x0, 0xc, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@noop, @cipso={0x86, 0x51, 0x3, [{0x7, 0xd, "d9957e8a273e95e48c88aa"}, {0x2, 0xe, "4b6cff19171ea434a521bb19"}, {0x2, 0x11, "c7c666d082475dcb08d5b2ef0a508c"}, {0x7, 0x5, "de70cb"}, {0x1, 0x4, "bd41"}, {0x0, 0x4, '\x004'}, {0x1, 0x12, "ed291c76f7adead9dbd91be5dd1f4e98"}]}, @timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9f4}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x14, 0x0, [{0x0, 0xe, "92ce2febb34ea48b107c64c0"}]}, @generic={0x7, 0xa, "f37d80b5d8450a60"}, @noop]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x20, 0x6d, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4) lseek(r3, 0xfffffffffffffffd, 0x1) (async) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0xd, 0x4, {0x4, 0x4, 'TQ'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1435.804653][T27490] RAX: ffffffffffffffda RBX: 00007f7a7e9b5fa0 RCX: 00007f7a7e78e929 [ 1435.804669][T27490] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1435.804682][T27490] RBP: 00007f7a7f6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1435.804695][T27490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1435.804707][T27490] R13: 0000000000000000 R14: 00007f7a7e9b5fa0 R15: 00007f7a7eadfa28 [ 1435.804738][T27490] [ 1436.064794][T13362] usb 7-1: config 0 descriptor?? [ 1436.310431][T27499] netlink: 'syz.1.5119': attribute type 3 has an invalid length. [ 1436.319523][T27499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5119'. [ 1436.329962][T27467] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1436.341404][T27499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5119'. [ 1436.356293][T27499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5119'. [ 1436.609874][T13362] lenovo 0003:17EF:60A3.0049: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.6-1/input0 [ 1436.813630][T13362] usb 7-1: USB disconnect, device number 113 [ 1437.564268][T27520] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5124'. [ 1437.649237][T27525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5126'. [ 1437.660968][T27526] fuse: Unknown parameter '0x00000000000000050x0000000000000008' [ 1437.744947][ T5900] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1437.821837][T27528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5127'. [ 1437.831992][T27528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5127'. [ 1437.841310][T27528] netlink: 'syz.6.5127': attribute type 13 has an invalid length. [ 1437.905069][ T5900] usb 10-1: Using ep0 maxpacket: 32 [ 1437.918140][ T5900] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1437.926970][ T5900] usb 10-1: config 0 has no interface number 0 [ 1437.933593][ T5900] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1437.944141][ T5900] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1437.954764][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.963245][ T5900] usb 10-1: Product: syz [ 1437.976218][ T5900] usb 10-1: Manufacturer: syz [ 1437.981022][ T5900] usb 10-1: SerialNumber: syz [ 1437.991973][ T5900] usb 10-1: config 0 descriptor?? [ 1438.002437][ T5900] smsc75xx v1.0.0 [ 1438.009583][ T5900] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1438.021503][ T5900] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -22 [ 1438.159270][T27532] FAULT_INJECTION: forcing a failure. [ 1438.159270][T27532] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1438.172833][T27532] CPU: 1 UID: 0 PID: 27532 Comm: syz.7.5129 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1438.172863][T27532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1438.172876][T27532] Call Trace: [ 1438.172885][T27532] [ 1438.172894][T27532] dump_stack_lvl+0x189/0x250 [ 1438.172927][T27532] ? __pfx____ratelimit+0x10/0x10 [ 1438.172951][T27532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1438.172980][T27532] ? __pfx__printk+0x10/0x10 [ 1438.173006][T27532] ? fs_reclaim_acquire+0x7d/0x100 [ 1438.173039][T27532] should_fail_ex+0x414/0x560 [ 1438.173068][T27532] prepare_alloc_pages+0x213/0x610 [ 1438.173092][T27532] __alloc_frozen_pages_noprof+0x123/0x370 [ 1438.173114][T27532] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1438.173153][T27532] ? policy_nodemask+0x27c/0x720 [ 1438.173180][T27532] alloc_pages_mpol+0x232/0x4a0 [ 1438.173206][T27532] vma_alloc_folio_noprof+0xe4/0x200 [ 1438.173235][T27532] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1438.173260][T27532] folio_prealloc+0x30/0x180 [ 1438.173281][T27532] do_wp_page+0x1231/0x5800 [ 1438.173336][T27532] ? __pfx_do_wp_page+0x10/0x10 [ 1438.173361][T27532] ? do_raw_spin_lock+0x121/0x290 [ 1438.173385][T27532] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1438.173410][T27532] __handle_mm_fault+0x1144/0x5620 [ 1438.173467][T27532] ? __pfx___handle_mm_fault+0x10/0x10 [ 1438.173512][T27532] ? find_vma+0xe7/0x160 [ 1438.173524][T27532] ? __pfx_find_vma+0x10/0x10 [ 1438.173538][T27532] handle_mm_fault+0x40a/0x8e0 [ 1438.173563][T27532] do_user_addr_fault+0x764/0x1390 [ 1438.173600][T27532] exc_page_fault+0x76/0xf0 [ 1438.173628][T27532] asm_exc_page_fault+0x26/0x30 [ 1438.173644][T27532] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1438.173670][T27532] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 17 3b 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1438.173681][T27532] RSP: 0018:ffffc90003a878b8 EFLAGS: 00050246 [ 1438.173692][T27532] RAX: 0000000000008008 RBX: 0000000000008008 RCX: 0000200000002030 [ 1438.173701][T27532] RDX: ffff8880278b1e00 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1438.173710][T27532] RBP: ffffc90003a87a30 R08: ffffffff8fa10bf7 R09: 1ffffffff1f4217e [ 1438.173719][T27532] R10: dffffc0000000000 R11: fffffbfff1f4217f R12: 0000000000000000 [ 1438.173732][T27532] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000200000002000 [ 1438.173762][T27532] ____sys_recvmsg+0x2ab/0x460 [ 1438.173795][T27532] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1438.173832][T27532] ? import_iovec+0x74/0xa0 [ 1438.173852][T27532] ___sys_recvmsg+0x1b5/0x510 [ 1438.173879][T27532] ? __pfx____sys_recvmsg+0x10/0x10 [ 1438.173930][T27532] ? __might_fault+0xb0/0x130 [ 1438.173950][T27532] do_recvmmsg+0x307/0x770 [ 1438.173979][T27532] ? __pfx_do_recvmmsg+0x10/0x10 [ 1438.174006][T27532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1438.174036][T27532] __x64_sys_recvmmsg+0x190/0x240 [ 1438.174062][T27532] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1438.174083][T27532] ? rcu_is_watching+0x15/0xb0 [ 1438.174114][T27532] ? do_syscall_64+0xbe/0x3b0 [ 1438.174133][T27532] do_syscall_64+0xfa/0x3b0 [ 1438.174143][T27532] ? lockdep_hardirqs_on+0x9c/0x150 [ 1438.174161][T27532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.174173][T27532] ? clear_bhb_loop+0x60/0xb0 [ 1438.174188][T27532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.174207][T27532] RIP: 0033:0x7f161d18e929 [ 1438.174232][T27532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1438.174246][T27532] RSP: 002b:00007f161e010038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1438.174263][T27532] RAX: ffffffffffffffda RBX: 00007f161d3b5fa0 RCX: 00007f161d18e929 [ 1438.174275][T27532] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1438.174287][T27532] RBP: 00007f161e010090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.174295][T27532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1438.174302][T27532] R13: 0000000000000000 R14: 00007f161d3b5fa0 R15: 00007f161d4dfa28 [ 1438.174321][T27532] [ 1438.588975][T27408] usbtmc 9-1:16.0: usb_control_msg returned -110 [ 1438.610013][ T5900] usb 9-1: USB disconnect, device number 23 [ 1438.674994][T13381] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1438.854952][T13381] usb 7-1: Using ep0 maxpacket: 32 [ 1438.862224][T13381] usb 7-1: New USB device found, idVendor=32b1, idProduct=06b4, bcdDevice=66.3d [ 1438.871675][T13381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.883951][T13381] usb 7-1: config 0 descriptor?? [ 1438.955368][T13364] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1439.093315][T13365] usb 7-1: USB disconnect, device number 114 [ 1439.105040][ T5900] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1439.125126][T13364] usb 2-1: Using ep0 maxpacket: 32 [ 1439.132548][T13364] usb 2-1: config 8 has an invalid interface number: 75 but max is 0 [ 1439.144248][T13364] usb 2-1: config 8 has no interface number 0 [ 1439.150962][T13364] usb 2-1: config 8 interface 75 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1439.162521][T13364] usb 2-1: config 8 interface 75 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1439.173962][T13364] usb 2-1: config 8 interface 75 altsetting 1 endpoint 0xC has invalid maxpacket 2046, setting to 64 [ 1439.185882][T13364] usb 2-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1439.196855][T13364] usb 2-1: config 8 interface 75 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1439.208233][T13364] usb 2-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 1439.224358][T13364] usb 2-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 1439.236050][T13364] usb 2-1: config 8 interface 75 has no altsetting 0 [ 1439.244029][T13381] usb 10-1: USB disconnect, device number 20 [ 1439.247159][T13364] usb 2-1: New USB device found, idVendor=045e, idProduct=07c6, bcdDevice=64.2b [ 1439.260528][T13364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.271253][T13364] usb 2-1: Product: syz [ 1439.277374][T13364] usb 2-1: Manufacturer: syz [ 1439.283736][T13364] usb 2-1: SerialNumber: syz [ 1439.287024][ T5900] usb 9-1: Using ep0 maxpacket: 32 [ 1439.304721][T13364] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1439.305295][ T5900] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1439.320985][ T5900] usb 9-1: config 0 has no interface number 0 [ 1439.332658][ T5900] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1439.342072][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.350733][ T5900] usb 9-1: Product: syz [ 1439.359752][ T5900] usb 9-1: Manufacturer: syz [ 1439.364384][ T5900] usb 9-1: SerialNumber: syz [ 1439.378117][ T5900] usb 9-1: config 0 descriptor?? [ 1439.394323][ T5900] smsc95xx v2.0.0 [ 1439.532353][T27535] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5131'. [ 1439.558974][T13364] r8152-cfgselector 2-1: USB disconnect, device number 110 [ 1439.717205][T13381] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1439.894906][T13381] usb 10-1: Using ep0 maxpacket: 32 [ 1439.902740][T13381] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.918638][T13381] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.929819][T13381] usb 10-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1439.939181][T13381] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.950212][T13381] usb 10-1: config 0 descriptor?? [ 1439.965390][T13365] usb 7-1: new full-speed USB device number 115 using dummy_hcd [ 1440.119593][T13365] usb 7-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 1440.132729][T13365] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1440.150228][T13365] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1440.159739][T27541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.161895][T27541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.170717][T13365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.185748][T13365] usb 7-1: Product: syz [ 1440.186819][T27549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5136'. [ 1440.189931][T13365] usb 7-1: Manufacturer: syz [ 1440.189952][T13365] usb 7-1: SerialNumber: syz [ 1440.348630][T27552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5137'. [ 1440.401980][T13365] usb 7-1: 0:2 : does not exist [ 1440.411614][ T5900] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1440.423433][ T5900] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1440.430498][T13365] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1440.445677][ T5900] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1440.473658][ T5900] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1440.510630][T13365] usb 7-1: USB disconnect, device number 115 [ 1440.513050][ T5900] usb 9-1: USB disconnect, device number 24 [ 1440.590648][T11034] udevd[11034]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1440.824972][T13380] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1440.994428][T13380] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1441.024783][T13381] usbhid 10-1:0.0: can't add hid device: -71 [ 1441.031179][T13380] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 1441.044157][T27558] loop6: detected capacity change from 0 to 7 [ 1441.045877][T13381] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1441.072281][T11034] Dev loop6: unable to read RDB block 7 [ 1441.072827][T13380] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1441.087584][T11034] loop6: unable to read partition table [ 1441.095359][T13381] usb 10-1: USB disconnect, device number 21 [ 1441.112580][T11034] loop6: partition table beyond EOD, truncated [ 1441.122069][T13380] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1441.139889][T13380] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1441.149161][T13380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.161377][T27558] Dev loop6: unable to read RDB block 7 [ 1441.171691][T27558] loop6: unable to read partition table [ 1441.179369][T27558] loop6: partition table beyond EOD, truncated [ 1441.187630][T27558] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1441.365640][T13362] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1441.420823][T13380] ath6kl: Failed to submit usb control message: -71 [ 1441.437721][T13380] ath6kl: unable to send the bmi data to the device: -71 [ 1441.445972][T13380] ath6kl: Unable to send get target info: -71 [ 1441.458863][T13380] ath6kl: Failed to init ath6kl core: -71 [ 1441.488696][T13380] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1441.527482][T13362] usb 9-1: Using ep0 maxpacket: 16 [ 1441.534555][T13362] usb 9-1: config 53 has an invalid interface number: 240 but max is 0 [ 1441.534716][T13380] usb 2-1: USB disconnect, device number 111 [ 1441.550256][T13362] usb 9-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.590672][T27573] FAULT_INJECTION: forcing a failure. [ 1441.590672][T27573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.591200][T13362] usb 9-1: config 53 has no interface number 0 [ 1441.615473][T13362] usb 9-1: config 53 interface 240 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 1441.633438][T13362] usb 9-1: config 53 interface 240 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 1441.646190][T13362] usb 9-1: config 53 interface 240 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1441.650166][T27573] CPU: 1 UID: 0 PID: 27573 Comm: syz.9.5142 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1441.650196][T27573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1441.650209][T27573] Call Trace: [ 1441.650219][T27573] [ 1441.650229][T27573] dump_stack_lvl+0x189/0x250 [ 1441.650266][T27573] ? __pfx____ratelimit+0x10/0x10 [ 1441.650297][T27573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1441.650329][T27573] ? __pfx__printk+0x10/0x10 [ 1441.650353][T27573] ? __might_fault+0xb0/0x130 [ 1441.650385][T27573] should_fail_ex+0x414/0x560 [ 1441.650415][T27573] _copy_from_user+0x2d/0xb0 [ 1441.650438][T27573] ___sys_recvmsg+0x12e/0x510 [ 1441.650473][T27573] ? __pfx____sys_recvmsg+0x10/0x10 [ 1441.650535][T27573] ? __might_fault+0xb0/0x130 [ 1441.650559][T27573] do_recvmmsg+0x307/0x770 [ 1441.650596][T27573] ? __pfx_do_recvmmsg+0x10/0x10 [ 1441.650634][T27573] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1441.650687][T27573] __x64_sys_recvmmsg+0x190/0x240 [ 1441.650716][T27573] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1441.650740][T27573] ? rcu_is_watching+0x15/0xb0 [ 1441.650779][T27573] ? do_syscall_64+0xbe/0x3b0 [ 1441.650800][T27573] do_syscall_64+0xfa/0x3b0 [ 1441.650817][T27573] ? lockdep_hardirqs_on+0x9c/0x150 [ 1441.650854][T27573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.650875][T27573] ? clear_bhb_loop+0x60/0xb0 [ 1441.650910][T27573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.650930][T27573] RIP: 0033:0x7f978a18e929 [ 1441.650948][T27573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1441.650966][T27573] RSP: 002b:00007f9787ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1441.650987][T27573] RAX: ffffffffffffffda RBX: 00007f978a3b5fa0 RCX: 00007f978a18e929 [ 1441.651010][T27573] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1441.651024][T27573] RBP: 00007f9787ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.651036][T27573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.651048][T27573] R13: 0000000000000000 R14: 00007f978a3b5fa0 R15: 00007f978a4dfa28 [ 1441.651078][T27573] [ 1441.962692][T13362] usb 9-1: config 53 interface 240 altsetting 0 has an endpoint descriptor with address 0x1F, changing to 0xF [ 1441.965116][ T5200] Dev loop6: unable to read RDB block 7 [ 1441.976355][T13362] usb 9-1: config 53 interface 240 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1442.035576][T13362] usb 9-1: config 53 interface 240 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1442.068625][ T5200] loop6: unable to read partition table [ 1442.074494][ T5200] loop6: partition table beyond EOD, truncated [ 1442.129073][T13362] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 1442.140820][T13362] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.207410][T13362] usb 9-1: Product: syz [ 1442.250763][T13362] usb 9-1: Manufacturer: syz [ 1442.260875][T13362] usb 9-1: SerialNumber: syz [ 1442.288321][T27563] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1442.419456][T27590] bridge1: entered promiscuous mode [ 1442.435589][T13364] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1442.503160][T13362] kvaser_usb 9-1:53.240: error -ENODEV: Cannot get usb endpoint(s) [ 1442.616073][T13364] usb 2-1: Using ep0 maxpacket: 32 [ 1442.627259][T13364] usb 2-1: config 8 has an invalid interface number: 75 but max is 0 [ 1442.778547][T13362] usb 9-1: USB disconnect, device number 25 [ 1442.785374][T13364] usb 2-1: config 8 has no interface number 0 [ 1442.795516][T13364] usb 2-1: config 8 interface 75 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1442.851656][T13364] usb 2-1: config 8 interface 75 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1442.867871][T13364] usb 2-1: config 8 interface 75 altsetting 1 endpoint 0xC has invalid maxpacket 2046, setting to 64 [ 1442.884122][T13364] usb 2-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1442.904367][T13364] usb 2-1: config 8 interface 75 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1442.917078][T13364] usb 2-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 1442.929162][T13364] usb 2-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 1442.940527][T13364] usb 2-1: config 8 interface 75 has no altsetting 0 [ 1442.950996][T13364] usb 2-1: New USB device found, idVendor=045e, idProduct=07c6, bcdDevice=64.2b [ 1442.960999][T13364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.972921][T13364] usb 2-1: Product: syz [ 1442.978706][T13364] usb 2-1: Manufacturer: syz [ 1442.983406][T13364] usb 2-1: SerialNumber: syz [ 1443.138356][T13364] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1443.437370][T27587] __nla_validate_parse: 1 callbacks suppressed [ 1443.437393][T27587] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5146'. [ 1443.585089][T13381] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1443.647206][T13364] r8152-cfgselector 2-1: USB disconnect, device number 112 [ 1443.775448][T13381] usb 7-1: Using ep0 maxpacket: 32 [ 1443.791395][T13381] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1443.801867][T13381] usb 7-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1443.820893][T13381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.846527][T13381] usb 7-1: config 0 descriptor?? [ 1443.995518][T13362] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1444.187290][T13362] usb 9-1: config 0 has no interfaces? [ 1444.202728][T13362] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1444.225467][T13362] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.242853][T13362] usb 9-1: Product: syz [ 1444.254484][T13362] usb 9-1: Manufacturer: syz [ 1444.259991][T13362] usb 9-1: SerialNumber: syz [ 1444.286170][T13362] usb 9-1: config 0 descriptor?? [ 1444.298388][T13381] stadia 0003:18D1:9400.004A: reserved main item tag 0xd [ 1444.338352][T13381] stadia 0003:18D1:9400.004A: hidraw0: USB HID v0.01 Device [HID 18d1:9400] on usb-dummy_hcd.6-1/input0 [ 1444.366334][T13381] stadia 0003:18D1:9400.004A: no inputs found [ 1444.372713][T13381] stadia 0003:18D1:9400.004A: force feedback init failed [ 1444.480374][T13381] usb 7-1: USB disconnect, device number 116 [ 1444.505699][T13364] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1445.005773][T13364] usb 2-1: device descriptor read/64, error -71 [ 1445.292760][T13364] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1445.448223][T13364] usb 2-1: device descriptor read/64, error -71 [ 1445.559255][T13364] usb usb2-port1: attempt power cycle [ 1445.579090][T27613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1445.965432][T13364] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1445.986221][T13364] usb 2-1: device descriptor read/8, error -71 [ 1446.071002][T27618] binder: 27617:27618 ioctl 5459 200000000080 returned -22 [ 1446.105049][T13381] usb 7-1: new low-speed USB device number 117 using dummy_hcd [ 1446.235291][T13364] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1446.267045][T13381] usb 7-1: unable to get BOS descriptor set [ 1446.276061][T13364] usb 2-1: device descriptor read/8, error -71 [ 1446.278662][T13381] usb 7-1: string descriptor 0 read error: -22 [ 1446.292387][T13381] usb 7-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1446.316535][T13381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.367936][T13381] usb 7-1: config 0 descriptor?? [ 1446.406131][T13364] usb usb2-port1: unable to enumerate USB device [ 1446.594510][T27616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.629553][T27616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.831553][ T5900] usb 9-1: USB disconnect, device number 26 [ 1447.775384][T13365] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1447.932836][T13365] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1447.950201][T13365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.971333][T13365] usb 2-1: Product: syz [ 1447.977145][T13365] usb 2-1: Manufacturer: syz [ 1447.983368][T13365] usb 2-1: SerialNumber: syz [ 1448.006076][T13365] usb 2-1: config 0 descriptor?? [ 1448.246075][T27635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.254818][T27635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.331276][T27635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.345723][T27635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.360487][T13365] usb 2-1: USB disconnect, device number 117 [ 1448.951324][T13381] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1449.013620][T13381] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1449.042861][T13381] dib0700: firmware download failed at 7 with -22 [ 1449.058277][T13381] usb 7-1: USB disconnect, device number 117 [ 1449.261189][T27659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5164'. [ 1449.390094][T27661] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1449.475152][ T5900] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1449.605126][ T5900] usb 2-1: device descriptor read/64, error -71 [ 1449.856322][ T5900] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1449.914985][T13381] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1449.964938][T19104] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1449.995080][ T5900] usb 2-1: device descriptor read/64, error -71 [ 1449.995518][T13364] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1450.075098][T13381] usb 10-1: Using ep0 maxpacket: 32 [ 1450.082579][T13381] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1450.092155][T13381] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.102927][T13381] usb 10-1: config 0 descriptor?? [ 1450.111798][ T5900] usb usb2-port1: attempt power cycle [ 1450.117572][T13381] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1450.141006][T19104] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.151369][T19104] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1450.155809][T13364] usb 9-1: Using ep0 maxpacket: 8 [ 1450.165951][T19104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.179201][T19104] usb 7-1: config 0 descriptor?? [ 1450.192575][T19104] pwc: Askey VC010 type 2 USB webcam detected. [ 1450.199249][T13364] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1450.208388][T13364] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1450.218671][T13364] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1450.229344][T13364] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1450.240119][T13364] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1450.253819][T13364] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1450.266387][T13364] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.465012][ T5900] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1450.480639][T13364] usb 9-1: GET_CAPABILITIES returned 0 [ 1450.487369][T13364] usbtmc 9-1:16.0: can't read capabilities [ 1450.499407][ T5900] usb 2-1: device descriptor read/8, error -71 [ 1450.655090][T19104] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1450.670590][T19104] pwc: recv_control_msg error -32 req 02 val 2700 [ 1450.680219][T19104] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1450.692863][T19104] pwc: recv_control_msg error -32 req 04 val 1000 [ 1450.701280][T19104] pwc: recv_control_msg error -32 req 04 val 1300 [ 1450.708593][T19104] pwc: recv_control_msg error -32 req 04 val 1400 [ 1450.718759][T19104] pwc: recv_control_msg error -32 req 02 val 2000 [ 1450.731332][T19104] pwc: recv_control_msg error -32 req 02 val 2100 [ 1450.742503][T19104] pwc: recv_control_msg error -32 req 04 val 1500 [ 1450.749560][ T5900] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1450.785527][ T5900] usb 2-1: device descriptor read/8, error -71 [ 1450.816632][T27671] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 1450.816935][T13364] usb 9-1: USB disconnect, device number 27 [ 1450.905336][ T5900] usb usb2-port1: unable to enumerate USB device [ 1450.963151][T19104] pwc: recv_control_msg error -71 req 02 val 2400 [ 1450.976855][T19104] pwc: recv_control_msg error -71 req 02 val 2600 [ 1450.983708][T19104] pwc: recv_control_msg error -71 req 02 val 2900 [ 1450.990908][T19104] pwc: recv_control_msg error -71 req 02 val 2800 [ 1450.998076][T19104] pwc: recv_control_msg error -71 req 04 val 1100 [ 1451.005038][T19104] pwc: recv_control_msg error -71 req 04 val 1200 [ 1451.012819][T19104] pwc: Registered as video103. [ 1451.022299][T19104] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input95 [ 1451.042232][ T30] audit: type=1804 audit(1750759586.680:8347): pid=27668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.5167" name="/newroot/564/file1" dev="fuse" ino=1 res=1 errno=0 [ 1451.088174][T19104] usb 7-1: USB disconnect, device number 118 [ 1451.285097][T13377] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1451.455080][T13377] usb 9-1: Using ep0 maxpacket: 16 [ 1451.461324][T13377] usb 9-1: too many configurations: 255, using maximum allowed: 8 [ 1451.471597][T13377] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1451.479289][T13377] usb 9-1: can't read configurations, error -61 [ 1451.528257][T13381] gspca_sunplus: reg_w_riv err -71 [ 1451.537002][T13381] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1451.557195][T13381] usb 10-1: USB disconnect, device number 22 [ 1451.615342][T13377] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1451.752430][T27679] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5170'. [ 1451.794963][T13377] usb 9-1: Using ep0 maxpacket: 16 [ 1451.813401][T13377] usb 9-1: too many configurations: 255, using maximum allowed: 8 [ 1451.843027][T13377] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1451.865358][T13377] usb 9-1: can't read configurations, error -61 [ 1451.896006][T13377] usb usb9-port1: attempt power cycle [ 1452.261860][T13377] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1452.314075][T13377] usb 9-1: Using ep0 maxpacket: 16 [ 1452.334718][T13377] usb 9-1: too many configurations: 255, using maximum allowed: 8 [ 1452.559688][T13377] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1452.588096][T13377] usb 9-1: can't read configurations, error -61 [ 1453.050653][T13377] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1453.283778][T13377] usb 9-1: device not accepting address 31, error -71 [ 1453.335148][T13377] usb usb9-port1: unable to enumerate USB device [ 1453.494252][ T30] audit: type=1326 audit(1750759589.020:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27700 comm="syz.1.5172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7e78e929 code=0x0 [ 1455.104420][T27729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1455.181797][T27731] random: crng reseeded on system resumption [ 1455.277309][T27733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.290172][T27733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.535078][T13377] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1455.535450][T13362] usb 7-1: new full-speed USB device number 119 using dummy_hcd [ 1455.714973][T13377] usb 10-1: Using ep0 maxpacket: 32 [ 1455.716263][T13362] usb 7-1: too many configurations: 233, using maximum allowed: 8 [ 1455.729973][T13362] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1455.738550][T13362] usb 7-1: can't read configurations, error -61 [ 1455.811766][T13377] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1455.826964][T13377] usb 10-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 1455.836297][T13377] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.845708][T13364] usb 9-1: new low-speed USB device number 32 using dummy_hcd [ 1455.854912][T13377] usb 10-1: Product: syz [ 1455.859440][T13377] usb 10-1: Manufacturer: syz [ 1455.868175][T13377] usb 10-1: SerialNumber: syz [ 1455.904710][T13377] usb 10-1: config 0 descriptor?? [ 1455.935499][T13362] usb 7-1: new full-speed USB device number 120 using dummy_hcd [ 1455.985410][T13364] usb 9-1: device descriptor read/64, error -71 [ 1456.085469][T13365] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1456.096720][T13362] usb 7-1: too many configurations: 233, using maximum allowed: 8 [ 1456.106885][T13362] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1456.114627][T13362] usb 7-1: can't read configurations, error -61 [ 1456.129032][T13362] usb usb7-port1: attempt power cycle [ 1456.225740][T13364] usb 9-1: new low-speed USB device number 33 using dummy_hcd [ 1456.238634][T13365] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1456.252593][T13365] usb 2-1: config 0 has no interface number 0 [ 1456.259590][T13365] usb 2-1: config 0 interface 29 has no altsetting 0 [ 1456.271661][T13365] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1456.281823][T13365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.290088][T13365] usb 2-1: Product: syz [ 1456.294454][T13365] usb 2-1: Manufacturer: syz [ 1456.300234][T13365] usb 2-1: SerialNumber: syz [ 1456.312810][T13365] usb 2-1: config 0 descriptor?? [ 1456.355484][T13364] usb 9-1: device descriptor read/64, error -71 [ 1456.466803][T13364] usb usb9-port1: attempt power cycle [ 1456.475535][T13362] usb 7-1: new full-speed USB device number 121 using dummy_hcd [ 1456.496701][T13362] usb 7-1: too many configurations: 233, using maximum allowed: 8 [ 1456.513855][T13362] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1456.540017][T13362] usb 7-1: can't read configurations, error -61 [ 1456.546827][T13365] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v65 fw v224.204.25 (2 channels) [ 1456.685567][T13362] usb 7-1: new full-speed USB device number 122 using dummy_hcd [ 1456.716915][T13362] usb 7-1: too many configurations: 233, using maximum allowed: 8 [ 1456.734120][T13362] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1456.743441][T13362] usb 7-1: can't read configurations, error -61 [ 1456.751937][T13362] usb usb7-port1: unable to enumerate USB device [ 1456.805285][T13364] usb 9-1: new low-speed USB device number 34 using dummy_hcd [ 1456.826066][T13364] usb 9-1: device descriptor read/8, error -71 [ 1456.965637][T13377] ath6kl: Failed to submit usb control message: -110 [ 1456.974011][T13377] ath6kl: unable to send the bmi data to the device: -110 [ 1456.981869][T13377] ath6kl: Unable to send get target info: -110 [ 1457.001076][T13377] ath6kl: Failed to init ath6kl core: -110 [ 1457.010984][T13377] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1457.065047][T13364] usb 9-1: new low-speed USB device number 35 using dummy_hcd [ 1457.086658][T13364] usb 9-1: device descriptor read/8, error -71 [ 1457.196908][T13364] usb usb9-port1: unable to enumerate USB device [ 1458.104476][T27748] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20001 [ 1458.116715][T27748] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5186'. [ 1459.068314][T13362] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1459.287312][T13362] usb 9-1: Using ep0 maxpacket: 16 [ 1459.297567][T13362] usb 9-1: config 160 has an invalid descriptor of length 152, skipping remainder of the config [ 1459.345399][T13362] usb 9-1: config 160 has 0 interfaces, different from the descriptor's value: 1 [ 1459.393451][T13362] usb 9-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 1459.413454][T13362] usb 9-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 1459.528387][T13362] usb 9-1: Product: syz [ 1459.532850][T13362] usb 9-1: Manufacturer: syz [ 1459.538144][T13362] usb 9-1: SerialNumber: syz [ 1459.757293][T13362] usb 9-1: USB disconnect, device number 36 [ 1461.383682][T13365] peak_usb 2-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1461.458695][T13365] peak_usb 2-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1461.666318][T13365] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 1461.738133][T13365] usb 2-1: USB disconnect, device number 122 [ 1461.742859][T13377] usb 10-1: USB disconnect, device number 23 [ 1462.128947][T27803] pim6reg: entered allmulticast mode [ 1462.136651][T27803] pim6reg: left allmulticast mode [ 1462.302161][T27806] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5203'. [ 1462.685361][T13365] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1462.836144][T13365] usb 7-1: device descriptor read/64, error -71 [ 1463.085898][T13365] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1463.145423][T13364] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1463.216010][T13365] usb 7-1: device descriptor read/64, error -71 [ 1463.299458][T13364] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1463.309044][T13364] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.347271][T13365] usb usb7-port1: attempt power cycle [ 1463.358085][T13364] usb 10-1: Product: syz [ 1463.364265][T13364] usb 10-1: Manufacturer: syz [ 1463.370936][T13364] usb 10-1: SerialNumber: syz [ 1463.386106][T13364] usb 10-1: config 0 descriptor?? [ 1463.680828][T27813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.696648][T27813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.716263][T13365] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1463.766071][T13366] usb 10-1: USB disconnect, device number 24 [ 1463.794658][T13365] usb 7-1: device descriptor read/8, error -71 [ 1464.065431][T13365] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1464.095823][T13365] usb 7-1: device descriptor read/8, error -71 [ 1464.175005][T19104] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1464.215621][T13365] usb usb7-port1: unable to enumerate USB device [ 1464.338292][T19104] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1464.353084][T19104] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.362364][T19104] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1464.379682][T19104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.391192][T19104] usb 2-1: Product: syz [ 1464.399426][T19104] usb 2-1: Manufacturer: syz [ 1464.420349][T19104] usb 2-1: SerialNumber: syz [ 1464.434471][T19104] usb 2-1: config 0 descriptor?? [ 1464.456694][T19104] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 1464.470679][T19104] keyspan 2-1:0.0: unsupported endpoint type 0 [ 1464.479161][T19104] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 1464.490172][T19104] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1464.522312][T19104] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1464.538019][T19104] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1464.546984][T19104] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 1464.555086][T19104] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 1464.565856][T19104] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1464.577538][T19104] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1464.587733][T19104] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 1464.597096][T19104] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 1464.608960][T19104] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 1464.617754][T19104] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 1464.632605][T19104] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1465.613678][T19104] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1465.794975][T19104] usb 10-1: Using ep0 maxpacket: 8 [ 1465.808126][T19104] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1465.826047][T19104] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.841411][T19104] usb 10-1: Product: syz [ 1465.850822][T19104] usb 10-1: Manufacturer: syz [ 1465.864183][T19104] usb 10-1: SerialNumber: syz [ 1465.877297][T19104] usb 10-1: config 0 descriptor?? [ 1465.889322][T19104] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1465.905947][T13365] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1465.932979][T18630] Bluetooth: hci3: command 0x0406 tx timeout [ 1466.065627][T13365] usb 7-1: Using ep0 maxpacket: 32 [ 1466.079203][T13365] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1466.100849][T13365] usb 7-1: config 0 has no interface number 0 [ 1466.113991][T13365] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1466.143069][T13365] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1466.153053][T13365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.161538][T13365] usb 7-1: Product: syz [ 1466.166237][T13365] usb 7-1: Manufacturer: syz [ 1466.171062][T13365] usb 7-1: SerialNumber: syz [ 1466.179633][T13365] usb 7-1: config 0 descriptor?? [ 1466.197205][T13365] smsc75xx v1.0.0 [ 1466.201370][T13365] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1466.289553][T13365] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1466.920048][T27847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.933997][T13365] usb 2-1: USB disconnect, device number 123 [ 1466.959883][T27847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.970733][T13365] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1467.019728][T13365] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1467.031411][T13365] keyspan 2-1:0.0: device disconnected [ 1467.225386][T19104] gspca_sonixj: reg_w1 err -110 [ 1467.275548][T19104] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1467.361366][T13365] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1467.917023][T13365] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1467.961288][T13365] usb 2-1: config 0 has no interface number 0 [ 1467.977701][T13365] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1468.009686][T13365] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1468.034556][T13365] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1468.054235][T13365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.090901][T13365] usb 2-1: config 0 descriptor?? [ 1468.177961][T27869] x_tables: duplicate underflow at hook 1 [ 1468.328692][T13364] usb 10-1: USB disconnect, device number 25 [ 1468.470668][T27878] netlink: 'syz.8.5222': attribute type 1 has an invalid length. [ 1468.499451][T27878] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1468.587008][T19104] usb 7-1: USB disconnect, device number 127 [ 1468.935032][T19104] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1468.968545][T13365] usbhid 2-1:0.1: can't add hid device: -71 [ 1468.974702][T13365] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1469.010744][T13365] usb 2-1: USB disconnect, device number 124 [ 1469.026633][T13377] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1469.055096][T13381] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1469.094752][T27890] gre1: entered promiscuous mode [ 1469.102279][T27890] gre1: entered allmulticast mode [ 1469.115127][T19104] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1469.124259][T19104] usb 7-1: config 1 has no interface number 0 [ 1469.140241][T19104] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.164876][T19104] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1469.178431][T19104] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1469.192407][T19104] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1469.201703][T13377] usb 9-1: Using ep0 maxpacket: 8 [ 1469.212274][T19104] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.220547][T13377] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1469.228538][T13381] usb 10-1: Using ep0 maxpacket: 16 [ 1469.237189][T13377] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1469.251422][T13381] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.264305][T13381] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1469.277577][T13377] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1469.289489][T19104] usb 7-1: Product: syz [ 1469.293690][T19104] usb 7-1: Manufacturer: syz [ 1469.298825][T19104] usb 7-1: SerialNumber: syz [ 1469.303603][T13377] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1469.316651][T13377] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1469.328083][T13377] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1469.338043][T13381] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 1469.348822][T13381] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1469.359518][T13381] usb 10-1: Product: syz [ 1469.363787][T13381] usb 10-1: Manufacturer: syz [ 1469.371843][T13377] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1469.383064][T13377] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1469.394757][T13381] cdc_ether 10-1:1.0: skipping garbage [ 1469.400619][T13381] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 1469.409175][T13377] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1469.410895][T27896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5228'. [ 1469.431020][T13377] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 9060, setting to 1024 [ 1469.431050][T13377] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1469.434188][T13377] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1469.477469][T13377] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.486176][T13377] usb 9-1: Product: syz [ 1469.490960][T13377] usb 9-1: Manufacturer: syz [ 1469.495722][T13377] usb 9-1: SerialNumber: syz [ 1469.504059][T13377] usb 9-1: config 0 descriptor?? [ 1469.511663][T27886] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1469.523317][T13377] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1469.574239][T13377] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1469.603750][T27888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.624309][T11151] udevd[11151]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1469.636680][T27888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.670857][T27888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.682992][T27888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.704390][T13366] usb 10-1: USB disconnect, device number 26 [ 1469.729185][T13365] usb 9-1: USB disconnect, device number 37 [ 1470.160139][T19104] cdc_ncm 7-1:1.1: bind() failure [ 1470.522154][T13365] usb 7-1: USB disconnect, device number 2 [ 1471.574135][T19104] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1472.356961][T19104] usb 7-1: Using ep0 maxpacket: 32 [ 1472.367511][T19104] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1472.377410][T19104] usb 7-1: config 0 has no interface number 0 [ 1472.383600][T19104] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1472.412015][T19104] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1472.463206][T19104] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.584088][T19104] usb 7-1: Product: syz [ 1472.634655][T19104] usb 7-1: Manufacturer: syz [ 1472.684877][T19104] usb 7-1: SerialNumber: syz [ 1472.776127][T19104] usb 7-1: config 0 descriptor?? [ 1472.786611][T19104] smsc75xx v1.0.0 [ 1472.790869][T19104] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1472.810216][T19104] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1473.808177][T27949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5240'. [ 1474.207788][T27956] syzkaller1: entered promiscuous mode [ 1474.213567][T27956] syzkaller1: entered allmulticast mode [ 1474.217802][T19104] usb 7-1: USB disconnect, device number 3 [ 1474.468041][T13362] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1474.515621][T27961] sit0: entered promiscuous mode [ 1474.527500][T27961] netlink: 'syz.6.5243': attribute type 1 has an invalid length. [ 1474.535693][T27961] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5243'. [ 1474.648389][T13362] usb 2-1: config index 0 descriptor too short (expected 55104, got 34) [ 1474.657804][T13362] usb 2-1: config 60 has too many interfaces: 121, using maximum allowed: 32 [ 1474.760075][T13362] usb 2-1: config 60 has an invalid descriptor of length 113, skipping remainder of the config [ 1474.783354][T13362] usb 2-1: config 60 has 0 interfaces, different from the descriptor's value: 121 [ 1474.800902][T13362] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1474.811073][T13362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.871847][T13362] usb 2-1: Product: syz [ 1474.899283][T13362] usb 2-1: Manufacturer: syz [ 1475.048947][T13362] usb 2-1: SerialNumber: syz [ 1475.274468][T27953] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1475.342850][T13362] usb 2-1: USB disconnect, device number 125 [ 1476.771292][T28001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5254'. [ 1477.096146][T13362] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1477.125006][T13381] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1477.255854][T13362] usb 2-1: Using ep0 maxpacket: 32 [ 1477.271088][T13362] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 1477.281270][T13362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.291612][T13362] usb 2-1: Product: syz [ 1477.298980][T13362] usb 2-1: Manufacturer: syz [ 1477.303845][T13362] usb 2-1: SerialNumber: syz [ 1477.313636][T13362] usb 2-1: config 0 descriptor?? [ 1477.335432][ T30] audit: type=1326 audit(1750759612.970:8349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27985 comm="syz.8.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4878e929 code=0x7fc00000 [ 1477.365433][T13362] as10x_usb: device has been detected [ 1477.372372][T13362] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1477.380793][ T30] audit: type=1326 audit(1750759612.970:8350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27985 comm="syz.8.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f6e4878e929 code=0x7fc00000 [ 1477.420727][T13362] usb 2-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 1477.445696][ T30] audit: type=1326 audit(1750759612.970:8351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27985 comm="syz.8.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4878e929 code=0x7fc00000 [ 1477.481273][T13362] as10x_usb: error during firmware upload part1 [ 1477.499231][T13362] Registered device Abilis Systems DVB-Titan [ 1477.524209][ T30] audit: type=1326 audit(1750759612.970:8352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27985 comm="syz.8.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4878e929 code=0x7fc00000 [ 1477.560517][T13362] usb 2-1: USB disconnect, device number 126 [ 1477.585091][T13381] usb 7-1: Using ep0 maxpacket: 32 [ 1477.613421][T13381] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1477.620233][T13362] Unregistered device Abilis Systems DVB-Titan [ 1477.621920][T13381] usb 7-1: config 0 has no interface number 0 [ 1477.623541][T13362] as10x_usb: device has been disconnected [ 1477.642118][ T30] audit: type=1326 audit(1750759612.970:8353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27985 comm="syz.8.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4878e929 code=0x7fc00000 [ 1477.643524][T13381] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1477.685859][ T30] audit: type=1326 audit(1750759612.970:8354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27985 comm="syz.8.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4878e929 code=0x7fc00000 [ 1477.727544][ T30] audit: type=1326 audit(1750759612.970:8355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27985 comm="syz.8.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4878e929 code=0x7fc00000 [ 1477.753270][ T30] audit: type=1326 audit(1750759612.970:8356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27985 comm="syz.8.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4878e929 code=0x7fc00000 [ 1477.756642][T13381] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1477.786909][ T30] audit: type=1326 audit(1750759612.970:8357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27985 comm="syz.8.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4878e929 code=0x7fc00000 [ 1477.812466][ T30] audit: type=1326 audit(1750759612.970:8358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27985 comm="syz.8.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4878e929 code=0x7fc00000 [ 1477.834876][T13381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.834901][T13381] usb 7-1: Product: syz [ 1477.834915][T13381] usb 7-1: Manufacturer: syz [ 1477.834930][T13381] usb 7-1: SerialNumber: syz [ 1477.868820][T13381] usb 7-1: config 0 descriptor?? [ 1477.890392][T13381] smsc75xx v1.0.0 [ 1477.894070][T13381] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1477.945379][T13381] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1478.818271][T28032] ip6erspan0: entered promiscuous mode [ 1479.074699][T28038] netlink: 'syz.7.5263': attribute type 2 has an invalid length. [ 1479.115435][T13366] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1479.275550][T13366] usb 10-1: Using ep0 maxpacket: 16 [ 1479.290672][T13366] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1479.302890][T13366] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.314349][T13366] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1479.332784][T13366] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1479.342530][T13366] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.351548][T13366] usb 10-1: Product: syz [ 1479.365744][T13366] usb 10-1: Manufacturer: syz [ 1479.370523][T13366] usb 10-1: SerialNumber: syz [ 1479.530471][T28040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5264'. [ 1479.605944][T28041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1479.732763][T24955] usb 7-1: USB disconnect, device number 4 [ 1479.848673][T28035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.859175][T28035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.871581][T13366] usb 10-1: 0:2 : does not exist [ 1479.882412][T13366] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 1479.918381][T13366] usb 10-1: USB disconnect, device number 27 [ 1480.394519][T28052] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5267'. [ 1480.891130][T28062] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5271'. [ 1480.945487][T24955] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1481.085059][T24955] usb 2-1: device descriptor read/64, error -71 [ 1481.334962][T24955] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1481.431214][T28066] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5273'. [ 1481.445334][T28066] tipc: Invalid UDP bearer configuration [ 1481.445386][T28066] tipc: Enabling of bearer rejected, failed to enable media [ 1481.484931][T24955] usb 2-1: device descriptor read/64, error -71 [ 1481.579386][T28073] input: syz0 as /devices/virtual/input/input97 [ 1481.610979][T24955] usb usb2-port1: attempt power cycle [ 1481.885381][T13366] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1481.974963][T24955] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1482.005745][T24955] usb 2-1: device descriptor read/8, error -71 [ 1482.075369][T13366] usb 7-1: Using ep0 maxpacket: 32 [ 1482.089219][T13366] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1482.101481][T13366] usb 7-1: config 0 has no interface number 0 [ 1482.110322][T13366] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1482.148603][T13366] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1482.192042][T13366] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.205602][T13366] usb 7-1: Product: syz [ 1482.209805][T13366] usb 7-1: Manufacturer: syz [ 1482.215434][T13366] usb 7-1: SerialNumber: syz [ 1482.235847][T13366] usb 7-1: config 0 descriptor?? [ 1482.253204][T13366] smsc75xx v1.0.0 [ 1482.285765][T13366] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1482.289863][T24955] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1482.297109][T13366] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1482.361220][T24955] usb 2-1: device descriptor read/8, error -71 [ 1482.485204][T24955] usb usb2-port1: unable to enumerate USB device [ 1482.695415][T13364] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1482.859348][T13364] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1482.876063][T13364] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.908680][T13364] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1482.930927][T13364] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1482.952980][T13364] usb 10-1: Manufacturer: syz [ 1482.972543][T13364] usb 10-1: config 0 descriptor?? [ 1483.004220][T28094] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1483.010792][T28094] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1483.047256][T28094] vhci_hcd vhci_hcd.0: Device attached [ 1483.115480][T13364] rc_core: IR keymap rc-hauppauge not found [ 1483.121479][T13364] Registered IR keymap rc-empty [ 1483.133823][T13364] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1483.159812][T13364] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input98 [ 1483.169412][T28102] input: syz0 as /devices/virtual/input/input99 [ 1483.198302][T28095] vhci_hcd: connection closed [ 1483.199234][T25200] vhci_hcd: stop threads [ 1483.210094][T28102] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1483.219593][ C0] igorplugusb 10-1:0.0: Error: urb status = -32 [ 1483.235650][T28089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.237622][T24955] vhci_hcd: vhci_device speed not set [ 1483.249914][T28089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.264285][T25200] vhci_hcd: release socket [ 1483.273639][T25200] vhci_hcd: disconnect device [ 1483.291069][T28089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.311107][T28089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.347001][T24955] usb 49-1: new low-speed USB device number 4 using vhci_hcd [ 1483.364653][T24955] usb 49-1: enqueue for inactive port 0 [ 1483.455269][T24955] vhci_hcd: vhci_device speed not set [ 1483.464307][T28106] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5284'. [ 1484.104998][ T5900] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1484.260941][T13364] usb 10-1: USB disconnect, device number 28 [ 1484.277935][ T5900] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1484.292026][ T5900] usb 9-1: config 182 has an invalid interface number: 132 but max is 0 [ 1484.313033][ T5900] usb 9-1: config 182 has no interface number 0 [ 1484.347289][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.353604][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.373557][ T5900] usb 9-1: config 182 interface 132 has no altsetting 0 [ 1484.392006][ T5900] usb 9-1: string descriptor 0 read error: -22 [ 1484.399740][ T5900] usb 9-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 1484.414518][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.623018][ T5900] usb 7-1: USB disconnect, device number 5 [ 1484.638403][T13364] usb 9-1: USB disconnect, device number 38 [ 1485.100398][T28127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.125512][T28127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.152871][T28127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.177319][T28127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.755490][T13364] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1485.939833][T13364] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1485.994618][T13364] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1486.076273][T13364] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1486.109631][T13364] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.121160][T28155] syz.6.5297: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1486.143812][T28147] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1486.157499][T13366] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1486.187103][T13364] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1486.195154][T28155] CPU: 1 UID: 0 PID: 28155 Comm: syz.6.5297 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1486.195182][T28155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1486.195194][T28155] Call Trace: [ 1486.195203][T28155] [ 1486.195212][T28155] dump_stack_lvl+0x189/0x250 [ 1486.195252][T28155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1486.195283][T28155] ? __pfx__printk+0x10/0x10 [ 1486.195312][T28155] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1486.195334][T28155] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1486.195357][T28155] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1486.195381][T28155] warn_alloc+0x214/0x310 [ 1486.195404][T28155] ? stack_depot_save_flags+0x40/0x900 [ 1486.195431][T28155] ? __pfx_warn_alloc+0x10/0x10 [ 1486.195454][T28155] ? kasan_save_track+0x4f/0x80 [ 1486.195482][T28155] ? xskq_create+0x56/0x170 [ 1486.195505][T28155] ? xsk_init_queue+0xb0/0x110 [ 1486.195529][T28155] ? xsk_setsockopt+0x43f/0x710 [ 1486.195550][T28155] ? do_sock_setsockopt+0x25a/0x3e0 [ 1486.195571][T28155] ? __x64_sys_setsockopt+0x18b/0x220 [ 1486.195590][T28155] ? do_syscall_64+0xfa/0x3b0 [ 1486.195606][T28155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.195634][T28155] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1486.195685][T28155] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1486.195714][T28155] ? __kasan_kmalloc+0x93/0xb0 [ 1486.195737][T28155] vmalloc_user_noprof+0xad/0xf0 [ 1486.195758][T28155] ? xskq_create+0xbf/0x170 [ 1486.195785][T28155] xskq_create+0xbf/0x170 [ 1486.195816][T28155] xsk_init_queue+0xb0/0x110 [ 1486.195845][T28155] xsk_setsockopt+0x43f/0x710 [ 1486.195872][T28155] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1486.195896][T28155] ? __lock_acquire+0xab9/0xd20 [ 1486.195933][T28155] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1486.195958][T28155] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1486.195984][T28155] do_sock_setsockopt+0x25a/0x3e0 [ 1486.196009][T28155] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1486.196036][T28155] ? __fget_files+0x2a/0x420 [ 1486.196066][T28155] __x64_sys_setsockopt+0x18b/0x220 [ 1486.196096][T28155] do_syscall_64+0xfa/0x3b0 [ 1486.196111][T28155] ? lockdep_hardirqs_on+0x9c/0x150 [ 1486.196137][T28155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.196156][T28155] ? clear_bhb_loop+0x60/0xb0 [ 1486.196189][T28155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.196207][T28155] RIP: 0033:0x7f68a178e929 [ 1486.196223][T28155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1486.196239][T28155] RSP: 002b:00007f68a2565038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1486.196258][T28155] RAX: ffffffffffffffda RBX: 00007f68a19b5fa0 RCX: 00007f68a178e929 [ 1486.196272][T28155] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1486.196283][T28155] RBP: 00007f68a1810b39 R08: 0000000000000004 R09: 0000000000000000 [ 1486.196294][T28155] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1486.196315][T28155] R13: 0000000000000000 R14: 00007f68a19b5fa0 R15: 00007f68a1adfa28 [ 1486.196342][T28155] [ 1486.196360][T28155] Mem-Info: [ 1486.649758][T28155] active_anon:18628 inactive_anon:3 isolated_anon:0 [ 1486.649758][T28155] active_file:21201 inactive_file:4608 isolated_file:0 [ 1486.649758][T28155] unevictable:768 dirty:205 writeback:0 [ 1486.649758][T28155] slab_reclaimable:6245 slab_unreclaimable:106503 [ 1486.649758][T28155] mapped:35998 shmem:8549 pagetables:2179 [ 1486.649758][T28155] sec_pagetables:0 bounce:0 [ 1486.649758][T28155] kernel_misc_reclaimable:0 [ 1486.649758][T28155] free:1291797 free_pcp:17850 free_cma:0 [ 1486.651290][T13365] usb 9-1: USB disconnect, device number 39 [ 1486.742467][T28155] Node 0 active_anon:76104kB inactive_anon:12kB active_file:84788kB inactive_file:18300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145520kB dirty:816kB writeback:0kB shmem:34104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14032kB pagetables:8508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1486.794909][T28155] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1486.798106][T13366] usb 10-1: Using ep0 maxpacket: 8 [ 1486.910112][T28155] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1487.037699][T13366] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1487.038304][T28155] lowmem_reserve[]: [ 1487.051050][T13366] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.076341][T28155] 0 2500 2502 2502 2502 [ 1487.088190][T28155] Node 0 DMA32 free:1244816kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81336kB inactive_anon:8kB active_file:84680kB inactive_file:16784kB unevictable:1536kB writepending:816kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:52340kB local_pcp:40532kB free_cma:0kB [ 1487.123158][T13366] usb 10-1: Product: syz [ 1487.141360][T28155] lowmem_reserve[]: 0 0 1 1 1 [ 1487.142539][T13366] usb 10-1: Manufacturer: syz [ 1487.155028][T28155] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:168kB inactive_anon:4kB active_file:108kB inactive_file:1516kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:32kB free_cma:0kB [ 1487.158208][T13366] usb 10-1: SerialNumber: syz [ 1487.201511][T13366] usb 10-1: config 0 descriptor?? [ 1487.230110][T13366] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1487.235259][T28155] lowmem_reserve[]: 0 0 0 0 0 [ 1487.279016][T28155] Node 1 Normal free:3901332kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:140kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18180kB local_pcp:7844kB free_cma:0kB [ 1487.365359][T28155] lowmem_reserve[]: 0 0 0 0 0 [ 1487.370186][T28155] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1487.546505][T28155] Node 0 DMA32: 686*4kB (UE) 219*8kB (UE) 345*16kB (UME) 309*32kB (UME) 207*64kB (UME) 258*128kB (UME) 192*256kB (UME) 100*512kB (UME) 73*1024kB (UM) 6*2048kB (M) 242*4096kB (UM) = 1244800kB [ 1487.574466][T28155] Node 0 Normal: 2*4kB (M) 3*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32kB [ 1487.604034][T28155] Node 1 Normal: 199*4kB (UE) 59*8kB (UE) 44*16kB (UME) 275*32kB (UME) 110*64kB (UE) 26*128kB (UE) 11*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 4*2048kB (UE) 943*4096kB (M) = 3901332kB [ 1487.664188][T28155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1487.684358][T28155] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 1487.714746][T28155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1487.740286][T28155] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1487.760275][T28155] 39937 total pagecache pages [ 1487.784760][T28155] 29 pages in swap cache [ 1487.795008][T28155] Free swap = 124872kB [ 1487.875366][T28155] Total swap = 124996kB [ 1487.910792][T28155] 2097051 pages RAM [ 1487.914647][T28155] 0 pages HighMem/MovableOnly [ 1487.995157][T28155] 424694 pages reserved [ 1488.007192][T28155] 0 pages cma reserved [ 1488.263622][T28152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.275485][T28152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.545700][T13366] gspca_sonixj: reg_w1 err -110 [ 1488.585492][T13366] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1488.775388][T28186] tipc: Enabled bearer , priority 0 [ 1488.808121][T28186] syzkaller0: entered promiscuous mode [ 1488.813634][T28186] syzkaller0: entered allmulticast mode [ 1488.875485][T28186] tipc: Resetting bearer [ 1488.903167][T28185] tipc: Resetting bearer [ 1488.952567][T28185] tipc: Disabling bearer [ 1490.042718][T24955] usb 10-1: USB disconnect, device number 29 [ 1490.169547][T28197] veth1_macvtap: left promiscuous mode [ 1490.175983][T28197] macsec0: entered promiscuous mode [ 1490.194413][T28197] geneve1: entered allmulticast mode [ 1490.220644][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1490.245734][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1490.264079][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1490.279666][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1490.291013][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1490.726991][T13366] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1490.916067][T13366] usb 10-1: Using ep0 maxpacket: 8 [ 1490.926042][T13366] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1490.946296][T13366] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 1491.039473][T13366] usb 10-1: config 0 has no interface number 0 [ 1491.074120][T13366] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1491.124451][T13366] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1491.162109][T13366] usb 10-1: config 0 interface 88 has no altsetting 0 [ 1491.232035][T13366] usb 10-1: language id specifier not provided by device, defaulting to English [ 1491.272732][T13366] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1491.329757][T13366] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1491.461587][T13366] usb 10-1: Product: syz [ 1491.473180][T13366] usb 10-1: SerialNumber: syz [ 1491.519908][T13366] usb 10-1: config 0 descriptor?? [ 1491.548549][T28214] chnl_net:caif_netlink_parms(): no params data found [ 1491.818705][T28240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.829065][T28240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.041627][T28246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5320'. [ 1492.128684][T13366] input: syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.88/input/input100 [ 1492.301335][T13366] usb 10-1: USB disconnect, device number 30 [ 1492.420315][T18630] Bluetooth: hci5: command tx timeout [ 1492.433021][T11153] udevd[11153]: Error opening device "/dev/input/event5": No such file or directory [ 1492.445034][ T5900] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1492.461838][T28214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.469178][T11153] udevd[11153]: Unable to EVIOCGABS device "/dev/input/event5" [ 1492.483712][T11153] udevd[11153]: Unable to EVIOCGABS device "/dev/input/event5" [ 1492.527761][T28214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.561360][T28214] bridge_slave_0: entered allmulticast mode [ 1492.615580][ T5900] usb 7-1: Using ep0 maxpacket: 32 [ 1492.655463][T28214] bridge_slave_0: entered promiscuous mode [ 1492.677540][ T5900] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.695008][ T5900] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1492.755857][ T5900] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1492.765461][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.780167][ T5900] usb 7-1: Product: syz [ 1492.788870][ T5900] usb 7-1: Manufacturer: syz [ 1492.809131][ T5900] usb 7-1: SerialNumber: syz [ 1492.877025][ T5900] usb 7-1: config 0 descriptor?? [ 1492.895176][T28214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.910499][T28214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.934173][T28214] bridge_slave_1: entered allmulticast mode [ 1492.961479][T28214] bridge_slave_1: entered promiscuous mode [ 1493.006461][T28256] netlink: 'syz.9.5322': attribute type 13 has an invalid length. [ 1493.087689][T28256] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1493.100007][T28256] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1493.111858][T28256] gretap1: entered promiscuous mode [ 1493.117424][T28256] gretap1: entered allmulticast mode [ 1493.119635][T13366] usb 7-1: USB disconnect, device number 6 [ 1493.441277][T25200] tipc: Disabling bearer [ 1493.610888][T25200] dvmrp1 (unregistering): left allmulticast mode [ 1493.637543][T13365] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1493.699399][T25200] team0: Port device geneve0 removed [ 1493.798018][T13365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1493.809156][T13365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1493.817634][T13365] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 1493.827171][T13365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.862783][T13365] usb 2-1: config 0 descriptor?? [ 1493.879161][T28264] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1494.078374][T25200] bond0 (unregistering): Released all slaves [ 1494.095125][T25200] bond1 (unregistering): Released all slaves [ 1494.228870][T25200] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1494.237578][T25200] bond2 (unregistering): Released all slaves [ 1494.331572][T13365] elecom 0003:056E:010D.004B: hidraw0: USB HID vb.37 Device [HID 056e:010d] on usb-dummy_hcd.1-1/input0 [ 1494.416412][T25200] bond3 (unregistering): Released all slaves [ 1494.490694][T18630] Bluetooth: hci5: command tx timeout [ 1494.512307][T24955] usb 2-1: USB disconnect, device number 5 [ 1494.580194][T25200] bond4 (unregistering): Released all slaves [ 1494.599622][T28214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1494.680053][T28214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.797858][T28287] fuse: Bad value for 'group_id' [ 1494.836457][T28287] fuse: Bad value for 'group_id' [ 1494.882918][T28214] team0: Port device team_slave_0 added [ 1494.899536][T28214] team0: Port device team_slave_1 added [ 1495.010296][T28214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1495.018189][T28214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1495.045782][T13365] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1495.059774][T28214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1495.089499][T28214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1495.125750][T28214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1495.198983][T28214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1495.235158][T13365] usb 10-1: Using ep0 maxpacket: 16 [ 1495.245380][T13365] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1495.254645][T13365] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.288765][T13365] usb 10-1: config 0 descriptor?? [ 1495.309042][T13365] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1495.332893][T28309] netlink: 'syz.7.5335': attribute type 16 has an invalid length. [ 1495.368820][T28309] netlink: 'syz.7.5335': attribute type 3 has an invalid length. [ 1495.384507][T28214] hsr_slave_0: entered promiscuous mode [ 1495.399212][T28214] hsr_slave_1: entered promiscuous mode [ 1495.405924][T28309] netlink: 'syz.7.5335': attribute type 1 has an invalid length. [ 1495.414748][T28214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1495.428135][T28309] netlink: 'syz.7.5335': attribute type 1 has an invalid length. [ 1495.439528][T28214] Cannot create hsr debugfs directory [ 1495.450400][T28309] netlink: 'syz.7.5335': attribute type 2 has an invalid length. [ 1495.462384][T28309] netlink: 64006 bytes leftover after parsing attributes in process `syz.7.5335'. [ 1496.577887][T18630] Bluetooth: hci5: command tx timeout [ 1496.737643][T25200] tipc: Left network mode [ 1496.758642][T25200] IPVS: stopping master sync thread 22382 ... [ 1497.210909][T24955] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1497.426932][T24955] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1497.483924][T24955] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1497.535292][T24955] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1497.549730][T28334] ptrace attach of "./syz-executor exec"[25908] was attempted by "./syz-executor exec"[28334] [ 1497.594220][T24955] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1497.610806][T24955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.643047][T24955] usb 2-1: Product: syz [ 1497.669341][T24955] usb 2-1: Manufacturer: syz [ 1497.681744][T24955] usb 2-1: SerialNumber: syz [ 1497.700203][T28342] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1497.761622][T13365] gspca_sonixj: reg_w1 err -71 [ 1497.804016][T13365] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 1497.823256][T25200] hsr_slave_0: left promiscuous mode [ 1497.826260][T13365] usb 10-1: USB disconnect, device number 31 [ 1497.883647][T25200] hsr_slave_1: left promiscuous mode [ 1497.910871][T28342] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1498.556012][T28342] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1498.645175][T18630] Bluetooth: hci5: command tx timeout [ 1498.764507][T24955] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1498.771180][T24955] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 1499.032556][T28370] input: syz1 as /devices/virtual/input/input102 [ 1499.355821][ T5900] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1499.431015][T28379] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 1499.516282][ T5900] usb 10-1: Using ep0 maxpacket: 8 [ 1499.533090][ T5900] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1499.547380][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.556539][ T5900] usb 10-1: Product: syz [ 1499.560967][ T5900] usb 10-1: Manufacturer: syz [ 1499.566354][ T5900] usb 10-1: SerialNumber: syz [ 1499.581892][ T5900] usb 10-1: config 0 descriptor?? [ 1499.879220][ T5900] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1500.094987][T13381] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1500.216336][T24955] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 1500.257725][T24955] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1500.269606][T28372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.272378][T28214] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1500.285785][T28372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.294033][T13381] usb 7-1: config index 0 descriptor too short (expected 80, got 36) [ 1500.317413][T13381] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.329869][T24955] usb 2-1: USB disconnect, device number 6 [ 1500.341745][T24955] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1500.355972][T28214] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1500.363325][T13381] usb 7-1: config 0 has no interfaces? [ 1500.369492][T13381] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1500.383241][T28214] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1500.399690][T13381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.430759][T13381] usb 7-1: config 0 descriptor?? [ 1500.507608][T28214] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1500.781079][T28214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.831657][T28214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.850068][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.857291][ T7100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.875879][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.883038][ T7100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.945252][T24955] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1501.107784][T24955] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1501.122565][T28372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.131626][T28372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.154203][T24955] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1501.164268][T24955] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1501.172195][T28214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1501.186165][T24955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.227735][T24955] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1501.291947][T28214] veth0_vlan: entered promiscuous mode [ 1501.359658][T28214] veth1_vlan: entered promiscuous mode [ 1501.400994][ T5900] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1501.409922][T28406] vivid-004: disconnect [ 1501.426833][T24955] gspca_sn9c2028: read1 error -71 [ 1501.458451][T28214] veth0_macvtap: entered promiscuous mode [ 1501.458598][ T5900] usb 10-1: USB disconnect, device number 32 [ 1501.469452][T28214] veth1_macvtap: entered promiscuous mode [ 1501.480641][T24955] gspca_sn9c2028: read1 error -71 [ 1501.486742][T24955] gspca_sn9c2028: read1 error -71 [ 1501.494238][T24955] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 1501.546982][T24955] usb 2-1: USB disconnect, device number 7 [ 1501.549717][T28214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1501.589172][T28214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1501.628782][T28214] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.640270][T28214] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.650847][T28214] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.662265][T28214] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.784421][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.802628][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.868652][T18781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.879581][T18781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.015814][T28417] Cannot find add_set index 0 as target [ 1502.171970][T28422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5356'. [ 1502.219445][T28405] vivid-004: reconnect [ 1502.275153][T24955] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1502.454907][T24955] usb 10-1: Using ep0 maxpacket: 32 [ 1502.694506][T24955] usb 10-1: config 8 has an invalid interface number: 75 but max is 0 [ 1502.721739][T24955] usb 10-1: config 8 has no interface number 0 [ 1502.806227][T13381] usb 7-1: string descriptor 0 read error: -71 [ 1502.830715][T24955] usb 10-1: config 8 interface 75 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1502.899218][T13381] usb 7-1: USB disconnect, device number 7 [ 1502.935948][T24955] usb 10-1: config 8 interface 75 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1502.957114][T28437] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5360'. [ 1503.022105][T24955] usb 10-1: config 8 interface 75 altsetting 1 endpoint 0xC has invalid maxpacket 2046, setting to 64 [ 1503.039592][T24955] usb 10-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1503.107582][T18630] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1503.178290][T28449] binder: 28435:28449 ioctl 40046210 0 returned -14 [ 1503.232888][T24955] usb 10-1: config 8 interface 75 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1503.329221][T24955] usb 10-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 1503.372208][T24955] usb 10-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 1503.409354][T24955] usb 10-1: config 8 interface 75 has no altsetting 0 [ 1503.557671][T24955] usb 10-1: New USB device found, idVendor=045e, idProduct=07c6, bcdDevice=64.2b [ 1503.584891][T24955] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.603970][T24955] usb 10-1: Product: syz [ 1503.613099][T24955] usb 10-1: Manufacturer: syz [ 1503.622570][T24955] usb 10-1: SerialNumber: syz [ 1503.713880][T24955] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1503.998556][T28420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.029858][T28420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.106022][T24955] r8152-cfgselector 10-1: USB disconnect, device number 33 [ 1504.213599][T28467] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5365'. [ 1504.270074][T28469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.317599][T28469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.495284][T19104] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1504.625067][T19104] usb 9-1: device descriptor read/64, error -71 [ 1504.786669][T28476] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5368'. [ 1504.865244][T19104] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1505.003965][T19104] usb 9-1: device descriptor read/64, error -71 [ 1505.118431][T19104] usb usb9-port1: attempt power cycle [ 1505.265127][T13365] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1505.335882][T13362] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1505.415058][T13365] usb 10-1: device descriptor read/64, error -71 [ 1505.505354][T19104] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1505.536989][T19104] usb 9-1: device descriptor read/8, error -71 [ 1505.538069][T13362] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1505.545304][T13377] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1505.581566][T13362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.615386][T13362] usb 7-1: Product: syz [ 1505.624189][T13362] usb 7-1: Manufacturer: syz [ 1505.633351][T13362] usb 7-1: SerialNumber: syz [ 1505.655219][T13365] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1505.679253][T13362] usb 7-1: config 0 descriptor?? [ 1505.701289][T13362] ch341 7-1:0.0: ch341-uart converter detected [ 1505.725061][T13377] usb 2-1: Using ep0 maxpacket: 16 [ 1505.741102][T13377] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1505.760665][T13377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.783035][T19104] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1505.794888][T13377] usb 2-1: Product: syz [ 1505.799095][T13377] usb 2-1: Manufacturer: syz [ 1505.804053][T13377] usb 2-1: SerialNumber: syz [ 1505.815041][T13365] usb 10-1: device descriptor read/64, error -71 [ 1505.825950][T19104] usb 9-1: device descriptor read/8, error -71 [ 1505.838284][T13377] usb 2-1: config 0 descriptor?? [ 1505.867354][T13377] as10x_usb: device has been detected [ 1505.873629][T13377] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1505.911745][T13362] usb 7-1: failed to receive control message: -121 [ 1505.912459][T13377] usb 2-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 1505.925122][T13362] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1505.940274][T13365] usb usb10-port1: attempt power cycle [ 1505.940618][T19104] usb usb9-port1: unable to enumerate USB device [ 1505.968163][T13377] as10x_usb: error during firmware upload part1 [ 1505.977531][T13377] Registered device Sky IT Digital Key (green led) [ 1506.070859][T28492] random: crng reseeded on system resumption [ 1506.111798][T13362] usb 2-1: USB disconnect, device number 8 [ 1506.152117][T13362] Unregistered device Sky IT Digital Key (green led) [ 1506.154255][T13362] as10x_usb: device has been disconnected [ 1506.285876][T13365] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1506.315497][T13365] usb 10-1: device descriptor read/8, error -71 [ 1506.554947][T13365] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1506.585777][T13365] usb 10-1: device descriptor read/8, error -71 [ 1506.705921][T13365] usb usb10-port1: unable to enumerate USB device [ 1507.055546][T13365] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1507.217240][T13365] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1507.225497][T13365] usb 2-1: config 0 has no interface number 0 [ 1507.231694][T13365] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1507.242207][T13365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.256882][T13365] usb 2-1: config 0 descriptor?? [ 1507.280057][T13365] usb 2-1: selecting invalid altsetting 1 [ 1507.288056][T13365] dvb_ttusb_budget: ttusb_init_controller: error [ 1507.294414][T13365] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1507.374505][T13365] DVB: Unable to find symbol cx22700_attach() [ 1507.418795][T13365] DVB: Unable to find symbol tda10046_attach() [ 1507.426958][T13365] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1507.496290][T13365] usb 2-1: USB disconnect, device number 9 [ 1508.344984][T19104] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1508.375101][T13365] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1508.495381][T19104] usb 9-1: device descriptor read/64, error -71 [ 1508.529878][T13365] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1508.541217][T13365] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.549598][T13365] usb 10-1: Product: syz [ 1508.553865][T13365] usb 10-1: Manufacturer: syz [ 1508.560452][T13365] usb 10-1: SerialNumber: syz [ 1508.571191][T13365] usb 10-1: config 0 descriptor?? [ 1508.642514][T13366] usb 7-1: USB disconnect, device number 8 [ 1508.669439][T13366] ch341 7-1:0.0: device disconnected [ 1508.723747][T28544] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5383'. [ 1508.734915][T19104] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1508.808505][T28548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1508.894926][T19104] usb 9-1: device descriptor read/64, error -71 [ 1508.924472][T28553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5385'. [ 1509.039259][T19104] usb usb9-port1: attempt power cycle [ 1509.240087][T28558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.299405][T28558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.404973][T19104] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1509.444046][T19104] usb 9-1: device descriptor read/8, error -71 [ 1509.675016][T13366] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1509.695171][T19104] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1509.725701][T19104] usb 9-1: device descriptor read/8, error -71 [ 1509.835220][T19104] usb usb9-port1: unable to enumerate USB device [ 1509.855689][T13366] usb 7-1: Using ep0 maxpacket: 32 [ 1509.866404][T13366] usb 7-1: config 8 has an invalid interface number: 75 but max is 0 [ 1509.874542][T13366] usb 7-1: config 8 has no interface number 0 [ 1509.894911][T13366] usb 7-1: config 8 interface 75 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1509.907165][T13366] usb 7-1: config 8 interface 75 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1509.918995][T13366] usb 7-1: config 8 interface 75 altsetting 1 endpoint 0xC has invalid maxpacket 2046, setting to 64 [ 1509.930844][T13366] usb 7-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1509.942077][T13366] usb 7-1: config 8 interface 75 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1509.953591][T13366] usb 7-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 1509.981162][T13366] usb 7-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 1509.992181][T13366] usb 7-1: config 8 interface 75 has no altsetting 0 [ 1510.007692][T13366] usb 7-1: New USB device found, idVendor=045e, idProduct=07c6, bcdDevice=64.2b [ 1510.018136][T13366] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.029141][T13366] usb 7-1: Product: syz [ 1510.033533][T13366] usb 7-1: Manufacturer: syz [ 1510.038230][T13366] usb 7-1: SerialNumber: syz [ 1510.057774][T13366] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1510.197819][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 1510.197836][ T30] audit: type=1326 audit(1750759645.830:8427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28584 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161d18e929 code=0x7ffc0000 [ 1510.227986][ T30] audit: type=1326 audit(1750759645.840:8428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28584 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f161d18e929 code=0x7ffc0000 [ 1510.252968][ T30] audit: type=1326 audit(1750759645.840:8429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28584 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161d18e929 code=0x7ffc0000 [ 1510.316104][ T30] audit: type=1326 audit(1750759645.840:8430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28584 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161d18e929 code=0x7ffc0000 [ 1510.344750][T13366] r8152-cfgselector 7-1: USB disconnect, device number 9 [ 1510.442090][ T30] audit: type=1326 audit(1750759645.930:8431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28584 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f161d18e929 code=0x7ffc0000 [ 1510.488427][T13365] usb 10-1: Firmware version (0.0) predates our first public release. [ 1510.508343][T13365] usb 10-1: Please update to version 0.2 or newer [ 1511.216772][T28601] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5398'. [ 1511.226824][T28601] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5398'. [ 1511.275622][T28601] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5398'. [ 1511.346509][T13366] usb 10-1: USB disconnect, device number 38 [ 1511.465367][T19104] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1511.649620][T19104] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.695227][T19104] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1511.729655][T19104] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1511.754856][T19104] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1511.762895][T19104] usb 9-1: SerialNumber: syz [ 1511.995890][T19104] usb 9-1: 0:2 : does not exist [ 1512.025843][T19104] usb 9-1: USB disconnect, device number 48 [ 1512.035213][T13366] usb 10-1: new low-speed USB device number 39 using dummy_hcd [ 1512.057626][T11034] udevd[11034]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1512.098551][T13365] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1512.198111][T13366] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1512.206433][T13366] usb 10-1: config 0 has no interface number 0 [ 1512.213059][T13366] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1512.224615][T13366] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1512.235646][T13366] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1512.245871][T13366] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.256865][T13366] usb 10-1: config 0 descriptor?? [ 1512.262788][T28609] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1512.271734][T13365] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.285933][T13366] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1512.296869][T13365] usb 7-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 1512.306075][T13365] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.325769][T13365] usb 7-1: config 0 descriptor?? [ 1512.495415][T13362] usb 10-1: USB disconnect, device number 39 [ 1512.565853][T28614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.585031][T28614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.775666][T13365] ortek 0003:05A4:8003.004C: invalid report_count 1553694380 [ 1512.783979][T13365] ortek 0003:05A4:8003.004C: item 0 4 1 9 parsing failed [ 1512.792617][T13365] ortek 0003:05A4:8003.004C: probe with driver ortek failed with error -22 [ 1512.961401][T13362] usb 7-1: USB disconnect, device number 10 [ 1513.114940][T13365] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1513.277964][T13365] usb 2-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config [ 1513.284957][T19104] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1513.288603][T13365] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1513.311575][T13365] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1513.322526][T13365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.333806][T13365] usb 2-1: config 0 descriptor?? [ 1513.342121][T13365] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1513.445070][T19104] usb 10-1: Using ep0 maxpacket: 32 [ 1513.451823][T19104] usb 10-1: config 8 has an invalid interface number: 75 but max is 0 [ 1513.460193][T19104] usb 10-1: config 8 has no interface number 0 [ 1513.466623][T19104] usb 10-1: config 8 interface 75 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1513.477642][T19104] usb 10-1: config 8 interface 75 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1513.488647][T19104] usb 10-1: config 8 interface 75 altsetting 1 endpoint 0xC has invalid maxpacket 2046, setting to 64 [ 1513.499667][T19104] usb 10-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1513.510429][T19104] usb 10-1: config 8 interface 75 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1513.543513][T19104] usb 10-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 1513.554599][T19104] usb 10-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 1513.565470][T19104] usb 10-1: config 8 interface 75 has no altsetting 0 [ 1513.585144][T19104] usb 10-1: New USB device found, idVendor=045e, idProduct=07c6, bcdDevice=64.2b [ 1513.597399][T19104] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.605636][T19104] usb 10-1: Product: syz [ 1513.610276][T19104] usb 10-1: Manufacturer: syz [ 1513.617564][T19104] usb 10-1: SerialNumber: syz [ 1513.636988][T19104] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1513.735269][T28633] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=7 (14 ns) > initial count (10 ns). Using initial count to start timer. [ 1513.918382][T28622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5406'. [ 1513.922037][T19104] r8152-cfgselector 10-1: USB disconnect, device number 40 [ 1513.928420][T28622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5406'. [ 1514.264951][T13381] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1514.424973][T13381] usb 7-1: Using ep0 maxpacket: 32 [ 1514.446277][T13381] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1514.460346][T13381] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1514.471911][T13381] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1514.483384][T13381] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1514.498508][T13381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.515266][T13381] usb 7-1: config 0 descriptor?? [ 1514.521012][T28640] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1514.552154][T13381] hub 7-1:0.0: USB hub found [ 1514.855180][T13365] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1514.948461][T13381] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1515.013746][T13365] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.035890][T13365] usb 10-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1515.068194][T13365] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1515.077698][T13365] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.100082][T13365] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1515.163211][T13365] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1515.166531][T13381] usbhid 7-1:0.0: can't add hid device: -71 [ 1515.188774][T13381] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1515.236154][T13381] usb 7-1: USB disconnect, device number 11 [ 1515.303386][T28648] delete_channel: no stack [ 1515.308556][T19104] usb 10-1: USB disconnect, device number 41 [ 1515.399539][T13365] IPVS: starting estimator thread 0... [ 1515.494934][T28661] IPVS: using max 33 ests per chain, 79200 per kthread [ 1515.713963][ T30] audit: type=1326 audit(1750759651.350:8432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28666 comm="syz.8.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504d98e929 code=0x7fc00000 [ 1515.812208][T28668] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1515.823500][T13381] IPVS: starting estimator thread 0... [ 1515.841157][T13365] usb 2-1: USB disconnect, device number 10 [ 1515.936582][T28670] IPVS: using max 30 ests per chain, 72000 per kthread [ 1516.028508][T13612] IPVS: stop unused estimator thread 0... [ 1516.080199][ T30] audit: type=1800 audit(1750759651.720:8433): pid=28679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5425" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1516.114986][T13381] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1516.275337][T13381] usb 9-1: Using ep0 maxpacket: 8 [ 1516.298503][T13381] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1516.307860][T28690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5428'. [ 1516.329181][T13381] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1516.359180][T13381] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.393386][T13381] usb 9-1: Product: syz [ 1516.411079][T13381] usb 9-1: Manufacturer: syz [ 1516.419454][T13381] usb 9-1: SerialNumber: syz [ 1516.427926][T13381] usb 9-1: config 0 descriptor?? [ 1516.457285][T13381] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1516.657678][T28705] veth1_virt_wifi: entered promiscuous mode [ 1516.664543][T28705] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5429'. [ 1516.691197][T28705] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1516.744896][T13365] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1516.885015][T13366] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1516.904920][T13365] usb 2-1: Using ep0 maxpacket: 16 [ 1516.912649][T13365] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.923371][T13365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1516.938707][T13365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1516.954691][T13365] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1516.965444][T13365] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1516.980460][T13365] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1517.003625][T13365] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1517.021328][T13365] usb 2-1: Manufacturer: syz [ 1517.035974][T13365] usb 2-1: config 0 descriptor?? [ 1517.059118][T13366] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1517.069201][T13366] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.077762][T13366] usb 10-1: Product: syz [ 1517.082254][T13366] usb 10-1: Manufacturer: syz [ 1517.089449][T13366] usb 10-1: SerialNumber: syz [ 1517.105880][T13366] usb 10-1: config 0 descriptor?? [ 1517.122451][T13366] ch341 10-1:0.0: ch341-uart converter detected [ 1517.345265][T13365] rc_core: IR keymap rc-hauppauge not found [ 1517.355195][T13365] Registered IR keymap rc-empty [ 1517.365838][T13365] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1517.396751][T13365] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1517.425145][T13365] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1517.448226][T13365] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input104 [ 1517.480239][T13365] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1517.515083][T13365] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1517.561369][T13365] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1517.585047][T13365] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1517.615024][T13365] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1517.654949][T13365] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1517.698226][T13365] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1517.725241][T28704] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5432'. [ 1517.765135][T13365] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1517.815886][T28704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1517.823876][T13365] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1517.864680][T28704] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5432'. [ 1517.895209][T13365] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1517.922935][T13365] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1517.941421][T13365] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1517.990521][T13365] usb 2-1: USB disconnect, device number 11 [ 1518.265850][T13381] gspca_zc3xx: reg_w_i err -71 [ 1518.286850][T13366] ch341-uart ttyUSB0: failed to read break control: -71 [ 1518.325677][T13366] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1518.386656][T13366] usb 10-1: USB disconnect, device number 42 [ 1518.414634][T13366] ch341 10-1:0.0: device disconnected [ 1518.895190][T13381] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1518.913916][T13381] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1518.947077][T13381] usb 9-1: USB disconnect, device number 49 [ 1519.304916][T13365] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1519.475296][T13365] usb 7-1: Using ep0 maxpacket: 8 [ 1519.485814][T13365] usb 7-1: config 0 has an invalid interface number: 176 but max is 2 [ 1519.492575][ T30] audit: type=1326 audit(1750759655.120:8434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28666 comm="syz.8.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f504d98e929 code=0x7fc00000 [ 1519.495642][T13365] usb 7-1: config 0 has an invalid interface number: 49 but max is 2 [ 1519.580475][T13365] usb 7-1: config 0 has no interface number 1 [ 1519.591630][T13365] usb 7-1: config 0 has no interface number 2 [ 1519.606713][T13365] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1519.624924][T13365] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.642783][T13365] usb 7-1: config 0 descriptor?? [ 1519.657836][T13365] qmi_wwan 7-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1519.865845][T13365] usb 7-1: Could not set interface, error -71 [ 1519.874942][T19104] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1519.917879][T13365] usb 7-1: USB disconnect, device number 12 [ 1520.024983][T19104] usb 9-1: device descriptor read/64, error -71 [ 1520.034901][T13381] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1520.206760][T13381] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1520.247603][T13381] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1520.267218][T13381] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1520.281834][T13381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.284948][T19104] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1520.307197][T13381] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1520.465184][T19104] usb 9-1: device descriptor read/64, error -71 [ 1520.521436][T13381] gspca_sn9c2028: read1 error -71 [ 1520.536034][T13381] gspca_sn9c2028: read1 error -71 [ 1520.555298][T13381] gspca_sn9c2028: read1 error -71 [ 1520.567570][T13381] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 1520.586697][T13381] usb 2-1: USB disconnect, device number 12 [ 1520.605815][T19104] usb usb9-port1: attempt power cycle [ 1520.913044][T28762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1520.985022][T19104] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1521.026322][T19104] usb 9-1: device descriptor read/8, error -71 [ 1521.274970][T19104] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1521.295586][T19104] usb 9-1: device descriptor read/8, error -71 [ 1521.315571][T28774] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5448'. [ 1521.335527][T28774] tipc: Invalid UDP bearer configuration [ 1521.335577][T28774] tipc: Enabling of bearer rejected, failed to enable media [ 1521.437301][ C1] hrtimer: interrupt took 62028 ns [ 1521.456525][T19104] usb usb9-port1: unable to enumerate USB device [ 1521.534880][T13381] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1521.686655][T13381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1521.707885][T13381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1521.729742][T13381] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1521.754892][T13381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.796537][T13381] usb 2-1: config 0 descriptor?? [ 1523.344942][T13365] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1523.404924][T25540] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1523.490103][T28802] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5456'. [ 1523.501972][T28802] netem: invalid attributes len -7 [ 1523.508922][T13365] usb 10-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.530910][T13365] usb 10-1: config 0 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1523.548324][T25540] usb 7-1: device descriptor read/64, error -71 [ 1523.564537][T13365] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1523.576159][T13365] usb 10-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 1523.585549][T13365] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.597731][T13365] usb 10-1: config 0 descriptor?? [ 1523.640843][T28804] netlink: 'syz.8.5457': attribute type 10 has an invalid length. [ 1523.652424][T28804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.661802][T28804] bridge_slave_1: left allmulticast mode [ 1523.669797][T28804] bridge_slave_1: left promiscuous mode [ 1523.677663][T28804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.697607][T28804] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1523.781180][T28807] netlink: 'syz.8.5458': attribute type 12 has an invalid length. [ 1523.793261][T28807] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5458'. [ 1523.814943][T25540] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1523.954951][T25540] usb 7-1: device descriptor read/64, error -71 [ 1523.997975][T28807] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5458'. [ 1524.009948][T28807] netlink: 'syz.8.5458': attribute type 9 has an invalid length. [ 1524.022961][T13365] wacom 0003:056A:0043.004D: item fetching failed at offset 5/7 [ 1524.031827][T28807] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1524.038924][T13365] wacom 0003:056A:0043.004D: parse failed [ 1524.039025][T13365] wacom 0003:056A:0043.004D: probe with driver wacom failed with error -22 [ 1524.054957][T28807] macvlan2: entered allmulticast mode [ 1524.060458][T28807] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1524.085361][T25540] usb usb7-port1: attempt power cycle [ 1524.214329][T28798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.245275][T28798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.274028][T13362] usb 10-1: USB disconnect, device number 43 [ 1524.395023][T13365] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1524.458310][T25540] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1524.467710][T13381] usbhid 2-1:0.0: can't add hid device: -71 [ 1524.477566][T13381] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1524.500419][T13381] usb 2-1: USB disconnect, device number 13 [ 1524.529899][T25540] usb 7-1: device descriptor read/8, error -71 [ 1524.555466][T13365] usb 9-1: Using ep0 maxpacket: 32 [ 1524.562831][T13365] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1524.580967][T13365] usb 9-1: config 0 has no interface number 0 [ 1524.593821][T13365] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1524.609959][T13365] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1524.620879][T13365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.631789][T13365] usb 9-1: Product: syz [ 1524.636782][T13365] usb 9-1: Manufacturer: syz [ 1524.641514][T13365] usb 9-1: SerialNumber: syz [ 1524.657937][T13365] usb 9-1: config 0 descriptor?? [ 1524.675694][T13365] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1524.696074][T13365] em28xx 9-1:0.132: Video interface 132 found: [ 1524.817798][T25540] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1524.848286][T25540] usb 7-1: device descriptor read/8, error -71 [ 1524.904948][T13381] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1524.963570][T28839] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.5466'. [ 1525.015328][T25540] usb usb7-port1: unable to enumerate USB device [ 1525.016231][T28839] nvme_fabrics: unknown parameter or missing value 'œ «' in ctrl creation request [ 1525.118897][T13381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1525.130762][T13381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1525.141670][T13365] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 1525.144058][T13381] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1525.161309][T13381] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 1525.170688][T13381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.189678][T13381] usb 2-1: config 0 descriptor?? [ 1525.846390][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5459'. [ 1525.864724][T13365] em28xx 9-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1525.881710][T13365] em28xx 9-1:0.132: board has no eeprom [ 1525.984955][T19104] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1526.125219][T28822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.139664][T28822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.165164][T19104] usb 10-1: Using ep0 maxpacket: 16 [ 1526.200328][T19104] usb 10-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1526.250225][T28822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.271225][T19104] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1526.301505][T28822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.307714][T19104] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1526.327349][T19104] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.357359][T28822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.399809][T19104] usb 10-1: Product: syz [ 1526.400935][T28822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.404115][T19104] usb 10-1: Manufacturer: syz [ 1526.443376][T19104] usb 10-1: SerialNumber: syz [ 1526.531250][T13381] usb 2-1: string descriptor 0 read error: -71 [ 1526.546318][T13381] uclogic 0003:5543:0047.004E: failed retrieving string descriptor #200: -71 [ 1526.558843][T13381] uclogic 0003:5543:0047.004E: failed retrieving pen parameters: -71 [ 1526.687765][T28844] netlink: 232 bytes leftover after parsing attributes in process `syz.9.5469'. [ 1526.709052][T28844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.712633][T13381] uclogic 0003:5543:0047.004E: failed probing pen v2 parameters: -71 [ 1526.718550][T28844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.762144][T13365] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1526.770866][T13381] uclogic 0003:5543:0047.004E: failed probing parameters: -71 [ 1526.771237][T13365] em28xx 9-1:0.132: analog set to bulk mode. [ 1526.812655][T13381] uclogic 0003:5543:0047.004E: probe with driver uclogic failed with error -71 [ 1526.832399][T28819] em28xx 9-1:0.132: Registering V4L2 extension [ 1526.921870][T19104] usb 10-1: 0:2 : does not exist [ 1526.930130][T13381] usb 2-1: USB disconnect, device number 14 [ 1527.016115][T19104] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1527.279447][T19104] usb 10-1: USB disconnect, device number 44 [ 1527.388105][T11034] udevd[11034]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1527.555921][T13381] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1527.825099][T13381] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 1528.039693][T13381] usb 2-1: config 0 has no interface number 0 [ 1528.055544][T13381] usb 2-1: config 0 interface 129 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1528.077912][T28819] em28xx 9-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1528.078304][T19104] usb 9-1: USB disconnect, device number 54 [ 1528.094401][T19104] em28xx 9-1:0.132: Disconnecting em28xx [ 1528.108189][T13381] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 1528.134448][T13381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.163672][T13381] usb 2-1: Product: syz [ 1528.184590][T13381] usb 2-1: Manufacturer: syz [ 1528.201999][T13381] usb 2-1: SerialNumber: syz [ 1528.239981][T13381] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1528.265344][T13381] r8152-cfgselector 2-1: config 0 descriptor?? [ 1528.299709][T28859] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1528.312807][T13381] r8152 2-1:0.129: Expected endpoints are not found [ 1528.450237][T28819] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 1528.471649][T28819] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 1528.510429][T28819] em28xx 9-1:0.132: No AC97 audio processor [ 1528.511553][T28859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.540303][T28859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.553317][T28859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.569909][T28874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.584121][T28859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.585955][T28819] usb 9-1: Decoder not found [ 1528.608178][T28874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.626919][T13381] r8152-cfgselector 2-1: USB disconnect, device number 15 [ 1528.704733][T28819] em28xx 9-1:0.132: failed to create media graph [ 1528.774755][T28819] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1528.911133][T28819] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1528.911218][T19104] em28xx 9-1:0.132: Closing input extension [ 1528.911595][T28876] ================================================================== [ 1528.911605][T28876] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 1528.911649][T28876] Read of size 8 at addr ffff888044098738 by task v4l_id/28876 [ 1528.911663][T28876] [ 1528.911672][T28876] CPU: 1 UID: 0 PID: 28876 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1528.911690][T28876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1528.911713][T28876] Call Trace: [ 1528.911719][T28876] [ 1528.911725][T28876] dump_stack_lvl+0x189/0x250 [ 1528.911750][T28876] ? __virt_addr_valid+0x1c8/0x5c0 [ 1528.911764][T28876] ? rcu_is_watching+0x15/0xb0 [ 1528.911786][T28876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1528.911808][T28876] ? rcu_is_watching+0x15/0xb0 [ 1528.911829][T28876] ? lock_release+0x4b/0x3e0 [ 1528.911850][T28876] ? __virt_addr_valid+0x1c8/0x5c0 [ 1528.911864][T28876] ? __virt_addr_valid+0x4a5/0x5c0 [ 1528.911879][T28876] print_report+0xd2/0x2b0 [ 1528.911898][T28876] ? v4l2_fh_open+0xc7/0x430 [ 1528.911918][T28876] kasan_report+0x118/0x150 [ 1528.911934][T28876] ? v4l2_fh_open+0xc7/0x430 [ 1528.911957][T28876] v4l2_fh_open+0xc7/0x430 [ 1528.911977][T28876] ? __pfx___mutex_lock+0x10/0x10 [ 1528.912001][T28876] em28xx_v4l2_open+0x157/0x9a0 [ 1528.912027][T28876] v4l2_open+0x20f/0x360 [ 1528.912046][T28876] chrdev_open+0x4c9/0x5e0 [ 1528.912062][T28876] ? __pfx_chrdev_open+0x10/0x10 [ 1528.912080][T28876] ? __pfx_chrdev_open+0x10/0x10 [ 1528.912094][T28876] do_dentry_open+0xdf0/0x1970 [ 1528.912116][T28876] vfs_open+0x3b/0x340 [ 1528.912132][T28876] ? path_openat+0x2ecd/0x3830 [ 1528.912152][T28876] path_openat+0x2ee5/0x3830 [ 1528.912171][T28876] ? arch_stack_walk+0xfc/0x150 [ 1528.912198][T28876] ? __pfx_path_openat+0x10/0x10 [ 1528.912217][T28876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.912258][T28876] do_filp_open+0x1fa/0x410 [ 1528.912277][T28876] ? __lock_acquire+0xab9/0xd20 [ 1528.912298][T28876] ? __pfx_do_filp_open+0x10/0x10 [ 1528.912327][T28876] ? _raw_spin_unlock+0x28/0x50 [ 1528.912345][T28876] ? alloc_fd+0x64c/0x6c0 [ 1528.912364][T28876] do_sys_openat2+0x121/0x1c0 [ 1528.912383][T28876] ? __pfx_do_sys_openat2+0x10/0x10 [ 1528.912402][T28876] ? exc_page_fault+0x76/0xf0 [ 1528.912425][T28876] ? do_user_addr_fault+0xc8a/0x1390 [ 1528.912445][T28876] __x64_sys_openat+0x138/0x170 [ 1528.912466][T28876] do_syscall_64+0xfa/0x3b0 [ 1528.912478][T28876] ? lockdep_hardirqs_on+0x9c/0x150 [ 1528.912498][T28876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.912513][T28876] ? clear_bhb_loop+0x60/0xb0 [ 1528.912529][T28876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.912543][T28876] RIP: 0033:0x7f2d568a7407 [ 1528.912557][T28876] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1528.912570][T28876] RSP: 002b:00007ffcf9100a30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1528.912586][T28876] RAX: ffffffffffffffda RBX: 00007f2d56fe2880 RCX: 00007f2d568a7407 [ 1528.912597][T28876] RDX: 0000000000000000 RSI: 00007ffcf9100f1a RDI: ffffffffffffff9c [ 1528.912608][T28876] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1528.912617][T28876] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1528.912626][T28876] R13: 00007ffcf9100c80 R14: 00007f2d57149000 R15: 00005591ca3e14d8 [ 1528.912643][T28876] [ 1528.912648][T28876] [ 1528.912653][T28876] Allocated by task 28819: [ 1528.912661][T28876] kasan_save_track+0x3e/0x80 [ 1528.912682][T28876] __kasan_kmalloc+0x93/0xb0 [ 1528.912694][T28876] __kmalloc_cache_noprof+0x230/0x3d0 [ 1528.912714][T28876] em28xx_v4l2_init+0x10b/0x2e70 [ 1528.912733][T28876] em28xx_init_extension+0x11d/0x1c0 [ 1528.912750][T28876] process_scheduled_works+0xae1/0x17b0 [ 1528.912772][T28876] worker_thread+0x8a0/0xda0 [ 1528.912793][T28876] kthread+0x70e/0x8a0 [ 1528.912808][T28876] ret_from_fork+0x3fc/0x770 [ 1528.912826][T28876] ret_from_fork_asm+0x1a/0x30 [ 1528.912841][T28876] [ 1528.912845][T28876] Freed by task 28819: [ 1528.912853][T28876] kasan_save_track+0x3e/0x80 [ 1528.912873][T28876] kasan_save_free_info+0x46/0x50 [ 1528.912890][T28876] __kasan_slab_free+0x62/0x70 [ 1528.912902][T28876] kfree+0x18e/0x440 [ 1528.912921][T28876] em28xx_v4l2_init+0x1683/0x2e70 [ 1528.912940][T28876] em28xx_init_extension+0x11d/0x1c0 [ 1528.912957][T28876] process_scheduled_works+0xae1/0x17b0 [ 1528.912977][T28876] worker_thread+0x8a0/0xda0 [ 1528.912998][T28876] kthread+0x70e/0x8a0 [ 1528.913012][T28876] ret_from_fork+0x3fc/0x770 [ 1528.913030][T28876] ret_from_fork_asm+0x1a/0x30 [ 1528.913044][T28876] [ 1528.913048][T28876] The buggy address belongs to the object at ffff888044098000 [ 1528.913048][T28876] which belongs to the cache kmalloc-8k of size 8192 [ 1528.913061][T28876] The buggy address is located 1848 bytes inside of [ 1528.913061][T28876] freed 8192-byte region [ffff888044098000, ffff88804409a000) [ 1528.913077][T28876] [ 1528.913082][T28876] The buggy address belongs to the physical page: [ 1528.913094][T28876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44098 [ 1528.913108][T28876] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1528.913120][T28876] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1528.913135][T28876] page_type: f5(slab) [ 1528.913152][T28876] raw: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 1528.913166][T28876] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1528.913180][T28876] head: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 1528.913192][T28876] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1528.913206][T28876] head: 00fff00000000003 ffffea0001102601 00000000ffffffff 00000000ffffffff [ 1528.913219][T28876] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1528.913228][T28876] page dumped because: kasan: bad access detected [ 1528.913239][T28876] page_owner tracks the page as allocated [ 1528.913245][T28876] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 27085, tgid 27084 (syz.9.5043), ts 1410977689662, free_ts 1398584751102 [ 1528.913272][T28876] post_alloc_hook+0x240/0x2a0 [ 1528.913287][T28876] get_page_from_freelist+0x21e4/0x22c0 [ 1528.913304][T28876] __alloc_frozen_pages_noprof+0x181/0x370 [ 1528.913321][T28876] alloc_pages_mpol+0x232/0x4a0 [ 1528.913334][T28876] allocate_slab+0x8a/0x3b0 [ 1528.913351][T28876] ___slab_alloc+0xbfc/0x1480 [ 1528.913378][T28876] __kmalloc_noprof+0x305/0x4f0 [ 1528.913390][T28876] ops_init+0x7b/0x5c0 [ 1528.913403][T28876] setup_net+0x219/0x4b0 [ 1528.913415][T28876] copy_net_ns+0x31b/0x4d0 [ 1528.913439][T28876] create_new_namespaces+0x3f3/0x720 [ 1528.913457][T28876] unshare_nsproxy_namespaces+0x11c/0x170 [ 1528.913475][T28876] ksys_unshare+0x4c8/0x8c0 [ 1528.913489][T28876] __x64_sys_unshare+0x38/0x50 [ 1528.913502][T28876] do_syscall_64+0xfa/0x3b0 [ 1528.913512][T28876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.913524][T28876] page last free pid 26839 tgid 26837 stack trace: [ 1528.913533][T28876] __free_frozen_pages+0xc71/0xe70 [ 1528.913546][T28876] __folio_put+0x21b/0x2c0 [ 1528.913559][T28876] migrate_pages_batch+0x2118/0x2830 [ 1528.913585][T28876] migrate_pages+0x1bcc/0x2930 [ 1528.913597][T28876] __se_sys_mbind+0xa3e/0xc30 [ 1528.913615][T28876] do_syscall_64+0xfa/0x3b0 [ 1528.913625][T28876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.913637][T28876] [ 1528.913640][T28876] Memory state around the buggy address: [ 1528.913647][T28876] ffff888044098600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1528.913656][T28876] ffff888044098680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1528.913665][T28876] >ffff888044098700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1528.913672][T28876] ^ [ 1528.913680][T28876] ffff888044098780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1528.913689][T28876] ffff888044098800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1528.913695][T28876] ================================================================== [ 1528.946824][T28876] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1528.946836][T28876] CPU: 1 UID: 0 PID: 28876 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1528.946853][T28876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1528.946861][T28876] Call Trace: [ 1528.946867][T28876] [ 1528.946873][T28876] dump_stack_lvl+0x99/0x250 [ 1528.946896][T28876] ? __asan_memcpy+0x40/0x70 [ 1528.946914][T28876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1528.946933][T28876] ? __pfx__printk+0x10/0x10 [ 1528.946951][T28876] panic+0x2db/0x790 [ 1528.946971][T28876] ? __pfx_panic+0x10/0x10 [ 1528.946991][T28876] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1528.947008][T28876] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1528.947025][T28876] ? print_memory_metadata+0x314/0x400 [ 1528.947043][T28876] ? v4l2_fh_open+0xc7/0x430 [ 1528.947062][T28876] check_panic_on_warn+0x89/0xb0 [ 1528.947078][T28876] ? v4l2_fh_open+0xc7/0x430 [ 1528.947096][T28876] end_report+0x78/0x160 [ 1528.947126][T28876] kasan_report+0x129/0x150 [ 1528.947140][T28876] ? v4l2_fh_open+0xc7/0x430 [ 1528.947162][T28876] v4l2_fh_open+0xc7/0x430 [ 1528.947182][T28876] ? __pfx___mutex_lock+0x10/0x10 [ 1528.947204][T28876] em28xx_v4l2_open+0x157/0x9a0 [ 1528.947228][T28876] v4l2_open+0x20f/0x360 [ 1528.947242][T28876] chrdev_open+0x4c9/0x5e0 [ 1528.947258][T28876] ? __pfx_chrdev_open+0x10/0x10 [ 1528.947275][T28876] ? __pfx_chrdev_open+0x10/0x10 [ 1528.947289][T28876] do_dentry_open+0xdf0/0x1970 [ 1528.947313][T28876] vfs_open+0x3b/0x340 [ 1528.947328][T28876] ? path_openat+0x2ecd/0x3830 [ 1528.947349][T28876] path_openat+0x2ee5/0x3830 [ 1528.947366][T28876] ? arch_stack_walk+0xfc/0x150 [ 1528.947391][T28876] ? __pfx_path_openat+0x10/0x10 [ 1528.947409][T28876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.947430][T28876] do_filp_open+0x1fa/0x410 [ 1528.947448][T28876] ? __lock_acquire+0xab9/0xd20 [ 1528.947467][T28876] ? __pfx_do_filp_open+0x10/0x10 [ 1528.947493][T28876] ? _raw_spin_unlock+0x28/0x50 [ 1528.947510][T28876] ? alloc_fd+0x64c/0x6c0 [ 1528.947527][T28876] do_sys_openat2+0x121/0x1c0 [ 1528.947545][T28876] ? __pfx_do_sys_openat2+0x10/0x10 [ 1528.947562][T28876] ? exc_page_fault+0x76/0xf0 [ 1528.947583][T28876] ? do_user_addr_fault+0xc8a/0x1390 [ 1528.947601][T28876] __x64_sys_openat+0x138/0x170 [ 1528.947621][T28876] do_syscall_64+0xfa/0x3b0 [ 1528.947644][T28876] ? lockdep_hardirqs_on+0x9c/0x150 [ 1528.947661][T28876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.947674][T28876] ? clear_bhb_loop+0x60/0xb0 [ 1528.947688][T28876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.947706][T28876] RIP: 0033:0x7f2d568a7407 [ 1528.947718][T28876] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1528.947730][T28876] RSP: 002b:00007ffcf9100a30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1528.947744][T28876] RAX: ffffffffffffffda RBX: 00007f2d56fe2880 RCX: 00007f2d568a7407 [ 1528.947754][T28876] RDX: 0000000000000000 RSI: 00007ffcf9100f1a RDI: ffffffffffffff9c [ 1528.947763][T28876] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1528.947771][T28876] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1528.947779][T28876] R13: 00007ffcf9100c80 R14: 00007f2d57149000 R15: 00005591ca3e14d8 [ 1528.947794][T28876] [ 1528.948244][T28876] Kernel Offset: disabled