last executing test programs: 12m3.871063532s ago: executing program 3 (id=779): r0 = syz_usb_connect(0x0, 0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac000000000101020000000000000000030000004800018006000340000400000600034000040000e00000020c000280050001022f0000001400018008000100e000000208000200ac1e000104000f8008000340000000060600124000c7664703000740000000062c0010800800014000000004080001400000800108000240000000fb0800034000007db0080003400000000708000c4000000004dcf087ae62a42d364d663f7bb1ab0074481dcf52b21a8338c3bf27193aa480b3ae36f2bb54c1dab6bef312b86887f2ca56bb4e16e4f60b4e493664391526ec7a64933104c3d5f57ed782b967276f5ed3"], 0xac}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080) (async) r2 = open(&(0x7f0000000180)='./file0\x00', 0x208000, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000005c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000008f00)="0697aa", 0x3) r4 = open$dir(&(0x7f0000000200)='./file0\x00', 0x101000, 0x2) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) 12m2.381510845s ago: executing program 3 (id=791): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2d02) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f00000000c0)={0x0, 0x6a1, 0x1}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x1018, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x40, 0x59, 0x10, 0x20, 0x1e2d, 0xb7, 0x2a57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1006, 0x4, 0x1, 0x2, 0x60, 0x1, [{{0x9, 0x4, 0x22, 0x4, 0xa, 0xff, 0x53, 0xdd, 0x9, [@hid_hid={0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x767}}, @generic={0x68, 0x8, "17a47fac4fc555cb91d8543010ce3f32065c128397ba7fb6e78a45d965347f35f5faea7e75447c3d6eddd8b69fd70506047fb133618dc8b050ae316778a09c7a08cb5ad067be1636c2b9dc1baa0a135b771a8c913300f47ccfd6cd6979871e71de77720847dc"}], [{{0x9, 0x5, 0x1, 0x10, 0x60, 0x7, 0x4, 0x4}}, {{0x9, 0x5, 0xf, 0x1, 0x3ff, 0x5, 0x8, 0x10, [@generic={0x100, 0x19, "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"}, @generic={0xd1, 0xc, "8fe5b58bb4bea7a0ae0352c8ae41e785a7f557610ec05bcd63f79e787deb4d75732860211bb380a7f20e7d5d000d654555d07f76eea2e913a75ebbe97b2695d472d69a9d2bca0d1f751f814f84778c3fd88ab0201db1be7324ac43d001210f30d807b9957baa326e7bd4861e23997c65f70d76d39f8e4d51e240d9d77ba580452e320b2aa863a4283fa71b811cb777afff72edaf7b15717481b7d97ac9e52e3f5af699b16625ed60d9efadb3eb5d666a40f77f328225ed27291cad7a8c4344b91550e61a573433ccad59f32719bff7"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x1, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xfff6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0xd5c}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x9, 0x2, 0x9, [@generic={0xc0, 0x24, "a2215d20783cf420a2e2544500b7d8474e161b96b5d2cd85b2879bfe29b17f2e06637a9f35659d4b2f87aee419120c2f75677f4a17087f852cdd395e46ecc53258c12003779068005073f800e4ae127bd4c220bb71b6d961144bf53bc6a381d152544087575a7bf2d7bc12ebb030d48e4a0132bd205781c3824f3c688a5aed9aba9f3ada9a7da56f5b342b8c61b43c0f02b7dad08af5fe4e03699e98f55f78078a9163728245163ce5853aca7d11db188c0128c7c426d99a15464f53e854"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x2, 0x4, 0xf}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x9, 0x69, 0x67, [@generic={0xa4, 0x7, "e6f76d94e84d0319f7174056207139fb8b6c97eeefc41ee87d800f6c382e91568ac03f8ad4c7723eaee28899a5fad6453a2dc0af1d5a8ec775098dea723309debdda681c6c687fbf600b8e9525e5ce9b81d9dc88f437403cc03a51ee532480ebe7c0328fc579eccb275c9c0107941aa446ac7fc0b97d06443e7a1a40e84649de5dfa7be80b827bb372f94bf0a1635e988b5c9fb32af782ec0b11b6c5b3691085a5db"}, @generic={0x8b, 0xc, "df31642f780006edda1774771137007f8746d31bd64afd72f0fe7656b89917c09a8d246e1192c96d04091a3e4206acf28d3b9a338a04e19a10326a603f92c3597fb08a5a4a36a76bdb9d381e741248209880a955b9d0616a43a4a1c11c5f8fb53848eade5b3c3dd1a3b65b3d3180438cc010bbcbf1c707661fcfece9a6495aa64784e1995da205aa17"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xd7, 0x2d, 0x7}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x4, 0xf8, 0x7f, [@generic={0x5a, 0x2d, "03940ec4c3a7f879468d36a490523d090ff90b1c724abee9a1480caa073162d4e56838c56d2601bbee30b407762de3b9876a75c7eee5b87d108f6138bec30238aafb6ff53b93863de811a0c1b690e9374c8b7c1cc614ce42"}, @generic={0x62, 0x30, "3d8fff188d46704a8b839b133a1495450c9377809c2417fd23fdc26573d738cf329fc312b88958977481d4ce65039742331fd0f79422e4ccf28c024974fd92ecf8badfa2f1e8ef47934db670cfec74aa1bdaadd3b2e7721aa1116e70d2b9717e"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0xe, 0xc, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfb, 0xcc}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x7}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xfc, 0xff, 0xa, [@generic={0xab, 0x24, "79253cda18753906f25ca65292d264f0ed4c97b4d60db87e7d7f3fef3ae9107b7ccd86c76f9a3c9e9c6bb300fd7567b7b532a0e5879eff323d4225299a10ce53f9da5b102876a1b414a8605890857c074af62f872d3b6679c412e7a617d549b809e0dd489cab1862768840a9768990abe27e5916fb14db3d6a97f613f921a89ddb7d822e804074b18684dd853aed657541f1ca2b6cb9a679244c1c20abc9289e25bec73009e6b6c87f"}, @generic={0xac, 0x21, "fe08921b2c8872d90a8cd9e30a5338648ff3df3162ba121c3786af5d12dd74596d8cfc423595b04ab32d0346835562a0518d3e03b3ed0073069f22c73b8d5cfe5116d7ecbe8e95274c874483dbc61cf2da883eb0920f7a34b187272c6f60eee5cc726e452d3cd010570bf8ba055e89a0d9fbc5664c2f9fbd81134db3fe9109f5c25bbd6b00ed7aa7ac65be1d6fbf25a0567aad908ed0610623aa5eef0737d00fe80a10189fa4856d9b13"}]}}]}}, {{0x9, 0x4, 0xef, 0x71, 0x8, 0x45, 0x1, 0x59, 0x7c, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, '~\tR<'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x85f, 0x5, 0xeb, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x4, 0xf}]}], [{{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0x5, 0x0, [@generic={0xc6, 0xa, "dc8f291b5fd2c46b7bd4f3437ff7dca94f014e2ebd381234830ff94f8efa7ffb6c14ee072f323f82199d887ca92804ba246ac8e2e21b9f409eb67b531ca68de72322c5f56ba5f2611778b395001640f930bb482731f824f2bb462185f600744a61f0cdd82d8dfb682dab1290a8260be520d7726fe18b4c1d6505acaa3577e7a6ce78adac20307bc0d5c8772fc858924393171ef6fb1a45d4d10563b1f54bc3238552a596e114eda5a8847057811d0f5c9e79697ce8f15f4841adcee59d7cb9611946f1d9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x9, 0x4, 0xa, [@generic={0x5c, 0x4, "1c5d6113e2dc4717d05fd64c5ccee0d19bc23fa400871fb7cd94b255e5be8d2472cfc101255deac4b2d5b39abe4d21e8843b415826ebb4128e12544b53ea4c413bad3a70580ea0db32471a6865fbfd7a3572522439a814ac949f"}, @uac_iso={0x7, 0x25, 0x1, 0x86, 0xe8, 0x80}]}}, {{0x9, 0x5, 0xb, 0x1, 0x440, 0x3, 0x72, 0x8, [@generic={0xe7, 0x21, "ba0850c222b6eeed0ca8ab070d10317de275a8ce1827fdfc3f1246d2b6c3a8f839256107c09985d30ce081f25294a80b3ca58f0ad8b3881365c0c93dcae94afe548fc83868dd05c62d0b2745b863b6f932ad07c6600dc4ff8899571e4c114f5292eb2f83196b22e909220b7d3089f2b940760146deaf3cd94b1145f63d5b35c12067183fcfa968cbefc5243364f89f30e4b8cc45f1d869402b864ea0c271477b0c577c89293efa72bea5ebdd3b815bde2f15383ec7f371c464faaa5fae2f0e019c4573aa188b9e71ed2b91fee74875727d69cb6efecf4acbdda9df74ffb7dbe6f0897961f0"}, @generic={0xc3, 0x21, "7e518a3373f62a51797aea088d774f31e57f494ac6fe1fcac34ccc74fdb864b7ea49f1b21cf81e9b4f43e9553a53bd98b6373c62024d1a3dfab34919a518f27dec3b8f9f079d0eb3e0c90194e1a9f8211bec3b4fd0bcae01d3cecee736c62ceebf350e21dae16dcf4af1f36bd68f979d3a80c655d126714249fe2347c9472604ea8e08b4ac31215c87b8e5fb3b50ffcfc11707ba7aedaeab47b60e9a510b1f58309fadeab54b87a982005473c9480290d79a8c4dacb0269ae30a6645e1026afd23"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x3, 0x6, 0x1}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x8, 0x4, 0x3}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x0, 0xe, 0x6}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x8, 0x6, 0x5f}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0xfe, 0x2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x82}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x5}]}}]}}, {{0x9, 0x4, 0x31, 0x9, 0xe, 0x45, 0x85, 0x14, 0x4, [@generic={0xae, 0xa, "8e9cfee9ace3c82d15b3f2bae25bc4c57c2ea39478cc54ad4985c561345b1bcf638fd609a32ef43db2eeb464ae482d5f9b0e016647d1cd39557210335fe292009cff4f7c4c76171587d788b80be8937a4b1ca70f933366d26794acb50f539468c7e85c786431519c76c6d9cfe9971421e342780ed95985542a776d32ea93462404caae8c69b5348c701b8eeaa37de10dfc9d0281a276d2a06b86e77e3b15d6f36ad3a757765775bb2f51ca58"}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xd, 0x2, 0x2}, [@obex={0x5}, @mbim={0xc, 0x24, 0x1b, 0xd9, 0x1000, 0x3, 0x0, 0x1000, 0x5b}, @acm={0x4, 0x24, 0x2, 0xc}, @mbim_extended={0x8, 0x24, 0x1c, 0x7fb9, 0x5}]}], [{{0x9, 0x5, 0x9, 0x1, 0x40, 0xf, 0x81, 0x4f}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x4, 0x7f, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0xfff8}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x7f, 0x7, 0x3, [@generic={0x42, 0xe, "88021788aab6fcc555d1967d7f597833f5b1a65cf27b1c2bcd2365841fa8b36925d8f64181536e8b70050b0269d9fe75278d779b7a37b31ee5f70796565705c4"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x200}]}}, {{0x9, 0x5, 0x85, 0x0, 0x40, 0xeb, 0x40, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x4e, 0xe5, 0x9, [@generic={0x3f, 0x21, "f49f71bab8f945acb01cd38340773962166b35b760fd6edf64347b4837658576754e87ec52754bf0e4bb0c4ecff49b621da3fd9ca6ec6b4c1a21769efc"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x0, 0x5, 0x81, [@generic={0x42, 0xc, "67b55cfc5fb16d016649da472cc29e25ba2d92a03cbbab038a00e246a59399000df8cb43ac7d17b242ab760dc489195ba889e377d69b78a82fee6d1aa3390563"}, @uac_iso={0x7, 0x25, 0x1, 0x86, 0x6}]}}, {{0x9, 0x5, 0x2, 0x107c8271ca7035ea, 0x3ff, 0x1, 0xa, 0x2}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x9, 0x3, 0x9, [@generic={0xc2, 0x3, "dfbb850eaed13f1ad9ab7dfe5509391230d1ec9fa34e64de0ce7f95adc26d54e2d601850a0b12fec1ea67891d981e2f3e12f950bdb6defb29ab8bf57018bd998a733274814fec3596fb8f65d2c99372caff66972edf13d9494e80159d641558894ba6b9eee8f59f60e9485a3427046f2fa197765e12e2b32faf5f838700a238efbacefa8144bf6a6ea3c5fd1f36a1b45e9c4d6b8ff09838ea6cfa44763fb59d8f5502dca8d891592672bc6b4365a4adb837f0713bfd8b6805a1f6b5b7095986e"}]}}, {{0x9, 0x5, 0x6, 0x6, 0x20, 0x6, 0xfc, 0x2, [@generic={0x29, 0xb, "01f253fa86d9c010234046f94e3c588c69fff1aa6da705c74fa75d81190175e8f992837ee4471f"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x7, 0x8, 0xc}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x81, 0x3, 0x9, [@generic={0x2b, 0x10, "001db9bad4af34edc936b3d55415d06b5c1b71f5b7bc36d6b526c535d5ca8e509ef295df5d766fa81c"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0xa, 0xc, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xa, 0xb0, 0xff}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6, 0x8, 0x1, [@generic={0xaa, 0x31, "7bd443de109d05c3cbbff1e337832284ef0a9a3a3e50ef0cbc12d13390017bc95690946251fca3d81835e976973ddaf896980d770385b571e82c94663ce13387dac45ed19b54393819d59665bb3cb0fb150c3473c1c934fafe6fc5aa25399b3620e906e054939a29bf3bf67097aa2b41ad6d78cecb0c7eba4f380fb5c96b6d3a17433786a45afadf8f23dc950619d66504413476e4eef4f3d8aa9d666cc10132248864470ff5f320"}, @generic={0x4a, 0x30, "6712d0330e7c384a7e478ffdc2a4dc708af422e1a076ad5ba687bba615434d8c6739b1d17ec0ca3359dbc265b9323b7d6bb471d133c02316bcba3c48e8707a4a005264853f625515"}]}}]}}, {{0x9, 0x4, 0xc8, 0x8, 0x6, 0xab, 0x81, 0x5a, 0x4, [], [{{0x9, 0x5, 0x5, 0x2, 0x0, 0x5, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1e45}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x60, 0x9, 0xa7, [@generic={0x14, 0xf, "ff5930820bdb7584ddc919a2a137a40eecf0"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x0, 0x9, 0xfc}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x80, 0x3, 0x3}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0xb, 0x48, 0x0, [@generic={0xd6, 0x11, "3f06d08665c0bb907c9fd7aa65c92b9261114c2483e6da98636c018f9d86ddef368537769fa8cbee3e36894b9d3b786c263e53901a1a54826d64e7ce7d1c8ddda0c47d210e1a456cde6c0a5c55d0f36abaeed19aa1a972a84cc01a04a21e0c919cecf8896aad776000b031c9380bc8ee35d7122edda0624c8280f7a3582bebdc79e2963918eec733e97084d4b1447cfa39c0a5e8707b9eb32e1de3d5ae89fde1e38e2c8cf71e3a8db18c99ad411506b7e95876a9ce33bfa2037c467baf79ffca3a27b885c619fd4667e577dac7e3823c3a485edc"}, @generic={0x4e, 0x31, "97ebbea24206b7f77be3e8dfad8fc6efa603870a133633fe1739e0491ce28bb0ec2c128d42dcd68d834025f075e7f6a26d0fb5684c13bc02ad13180a8ffff26fb98f966e311e939edc674942"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x6, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0xcf}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x2, 0x9, 0xe, 0x10, 0x81}, 0xf6, &(0x7f00000016c0)={0x5, 0xf, 0xf6, 0x6, [@generic={0xbe, 0x10, 0x3, "d574e450e295211d8f21c57e62ef73922c2e06a65b0d399129648adde18cc85587030f16fcc63db3bf4524d360d2ef417c2d39798f8377cf4289c349644a21aa1700f180f3aca84c10531a095df281286ade7982bc7239c553817943847c849d5f8e73c64db4cf17be16f07ef34368e6af8bc7b46c0f7168bc1bc9a29f61a8bce405b68854b5f3548a3b1ad2b487729aaa1fab696b04dd749f3a9acb66e050f7fedd619e257c78920d35ceb83dce8ca10845f0588d1675ce4b4412"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x99, 0x4c4c}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x6, 0xfa}, @wireless={0xb, 0x10, 0x1, 0xc, 0x65ab970329d3d87c, 0x4, 0x3, 0x2, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "3bf61324d15fd247e9b373bf9da2cba9"}]}, 0x6, [{0x9, &(0x7f0000000180)=@string={0x9, 0x3, "5a79c17674652d"}}, {0x3c, &(0x7f00000017c0)=ANY=[@ANYBLOB="3c035f6003e7028c645a5d6e16bb689ed7d236b0ad3295fa6491a4867ce93c1c9484a5b05a29fcbb3d0d5e3a9c955ef12884124415ffeb4d73ec0c07eb29dd461db6f8496b3c5eb2228525f938c78a7091d46b6ac518d484d38307a7720a2755ce4941c15ccff85f984476dcb60af4efae345c57ff9ccc500ede1faef7748bfcb671d8a5a9f8fa124df91299650a215553715a11d547a2c4ed8880e00425295443be292ba460e32857a4ed79438d34c7efa205e63031b68c5a4a9f62b63f289cc0e297c21cb035cabedf034db2f0a10b7d8c209c004090f45031336383239439e2b385395c3a4d0e0c95040e242514a7c2e5840b29fc20"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40a}}, {0x2b, &(0x7f0000000280)=@string={0x2b, 0x3, "85d00b9a54078744e16860b45fe99f670145ba43313fa2ddc8bea598c1598cb287e768258c66ac59a9"}}, {0x58, &(0x7f0000000380)=@string={0x58, 0x3, "878e9a646e347b4484218ae248a4b55809621c16683d05d3a87f98ea438b390819040b0d085b0a018282540415b1ee937aefdc6fa384e291943a04b8937607847c817f40c443e0273b94b44a2b6ab947302cf6a1446d"}}, {0x8d, &(0x7f0000000480)=@string={0x8d, 0x3, "80b1592c409492a9f9540731738495839975a06522841fb49a90347037962933f7d7399a357de02c0f15b9fe333af311033a9ab9c44ba320cbb6b470f84cfd1b47481caca01bf32d78ce02ab22e1775068ac471b008fc8b617f3b36a055fd9b0afc1b2ac57b537354d66d776e9e9cc25d74aee92ed6501e783b04f84f153b9935d9a2321fc9ce0b2551295"}}]}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000e8ffffff00020000000003"], 0x48) tkill(r4, 0x13) wait4(r4, 0x0, 0x4000000a, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), r3) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000004800)={0x94c, r5, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x71}}}}, [@NL80211_ATTR_NAN_FUNC={0x328, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "f7020f3067d7"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "8dcc0c06f8c3"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1e8, 0xd, 0x0, 0x1, [{0x8d, 0x0, "231d27731bd63e30916c1fc51c0a775febf9e153de43d99a092b832bc2370b7b9f67ef5fdabd0bd2921e47cedc173222fd807c147848856d2224e1a64b222b6130ad0dc64a1afeeeb4cba634cd6ea150625ecfa976d327d90c31ee83f33f13471c4fa4ca1bdba0616f56e6ec09dd23240fa41a649a7a1d6e7124db2d883d3a85488600106cb572a28a"}, {0xb3, 0x0, "3b9be42cbebd93e1ce747c973864a4b14928e6fa23d528a5fdc55d5d179429281db3df98d7de34e1e09f836789eaca64fbe9a854d42278ced6cd09e67d797f9d7d0f7ac90de3860267f320017afb38bc5e73dda1312d0829deb9dfbf741dd8a5841584f525b89367e0320609750144ceb45424daaad3ac18bfb553c5621ba7b74fd96a695bc42ff3fe7666abcd3b226b2b8dacab9e0ab5bd807b75a2b702b89553ad5410600c3169ceff115692fff9"}, {0xa0, 0x0, "7ac37075e9fc536ed1c94b3bf83c5676538db78b5cc603ff192ac10ed5ada7522f119ae13775169b8e371206977b81ab6fede86cd2d9a25617514ae9d41e2e4e9fe093f800701b6829b01921b06b35e49486dff05e99ee99085a8066a78f2af3323b76a9213891070d525fdc15142f11b8653b6e1b3f6dc3a764e1dd9156d7cec8310c1604ec5949b2849e783a8a5014ecea18b7764bb8cffcb450d7"}]}, @NL80211_NAN_FUNC_SRF={0x114, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xff}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x370, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2b0, 0xe, 0x0, 0x1, [{0xa, 0x0, "1e0c3db37d81"}, {0x16, 0x0, "efad494834eed3052b65b1b5a41d7194d7b8"}, {0x89, 0x0, "0a429c61669e4f20fa52e39e08eb8f51d03193f86a689b779258ef204a3778154bd34307e746a4ce4b36a6d92b2f86b5431961626c2199005ee7a15fc61a6b45935bcbd5eef1e4599d7fe6c2cbd647447d3cb37af350ba8ae81e6acaee8e6e196ed28e1215b99267c65ab0cb82d9586dcf626afda5e2127ebf8fe49ecf5e5c1d0c378a4614"}, {0xa0, 0x0, "0729efa5ddd3c0c44112b571e0ada4fb9a162331ef9ad2c65bac9aa0dd3be6905c73443367a5d80449fe24479a07525d0f0b1b9d78cc3a45c7bd728dcf54c186505137ffe27b5683b5d32c4832ab16ab2cca2c7cf66b576a77238b9d0c19dcebabe66c111b0bf6556af3cdff485a2362c64fb78944788d70b3b160eb66edfb6d7ea22aa7630a98fb57ae0701d37430b2442ca8576abc8e8ed6d2f738"}, {0x33, 0x0, "4dea8251b4c4f54db27ed8df14de176f60fff1502b188cdce57f64b938fc614eb5aa1af7a5b916088a659acd5e96b7"}, {0x127, 0x0, "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"/291}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x9a, 0xb, "9f02e755776e29b5bbc7b17a567c3aeb49bf16048dde7ea76d742899745eb3e170506988bdebc894503558fd2ad8a56e909a5b3d96c54785d964be5453906dcabd7a5df7379af86c0ed11131e78660a6179324d1e7acd0313744240bd9673456da4a24410df57b61966346618558b9adcb4575f076870c23069bf8c2b94f257127a44c0090f7e5b5d6c3f65d7ce919606e958391aa15"}, @NL80211_NAN_FUNC_TTL={0x8}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x86}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x14, 0xd, 0x0, 0x1, [{0xe, 0x0, "d55feb3e94561790b8d2"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xe9}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x24c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x23c, 0xd, 0x0, 0x1, [{0x6f, 0x0, "e27708b935826597d0db0673c8ded45fd79e5c8e633c8fb0453aa63201628efe09041482636c7941ba66d00de3fad9333bf5e7a34808967474e3143cffc458a8d9d0c86dd3820824bd5fa50f3dc619e0fbe854fa1637ccdac7c5516274ddd213b5970e5cec0644df8a9254"}, {0x6e, 0x0, "800c9b8f86fa7a483ccc64e2549dc364755a03da1128b08c0ef6c44d11af8938180a8c8e1aa89db7e0a9cef3f64c98c7b26fb45cb8d35c5168d30758a567a8e95fb8a71255389b08526c45b8b7200c8336b86e1351170057558aaf96381d252b5e4b601c9c7f03358a42"}, {0xc6, 0x0, "9e754933fddf748432d303a25513d8f727911dbf840165ecc18a4a2f271d294ba15aac58f8123c68d5146873886a2e7d462f8cb8786085b5004b201d28dc553aac52726e270b4b09f112694068300854c52827cc9c23d695cf20361126d05eca9ed5e9d5b8dc8e594a12e6cce8b095223a2026c16594394cb6d9bdae749ac8fdc9744650acc61f0c772db752ce8254de8c427ca6b0e9a37eab7a99b97e593a3bdf8eb296f137440f06db036740cc336941403a064ebf21bc0e73486d7d5df3010d1c"}, {0x5b, 0x0, "3a9d3d9c942746c583e14a863322b9a4bc3da463697174cd267a98ce3e79c9a0fe02ea470bf0a4ae6255986850c8ad7bc5e421e80d9d0a576f2343995f10b13ab392bc5d5032484e94020a46fecb48101907f41a5ab360"}, {0x32, 0x0, "3627348a5a1ca4ba8e67a43af8b12cc5494a21c4050b8ef93b8ed3ee7a5944b71afcd2c415aef48f15afc56e6963"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}]}]}, 0x94c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r6 = getuid() ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002f00)={&(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmmsg$unix(r3, &(0x7f0000002f80)=[{{&(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001940)="2d6debc8caf41f32f33b2d671340780b9d54e47f5915e1c9a54ae8df1f278b8eec547288092d32e0285e14b2a2ca8318b97ec99a87708de90a876535769b45cb07a032b281398f6034445c6946c83e96bbefed6afa08c96374f15e0b02f25c285f4680a73d165c42f335122d855f4441ab80a9759416eb1fdc55b230b8aa803740ebe8c52c94dec621e2f6036b7de71d2c7667dca084060f304354340fdac556c2fb5dc28e7c65b42ea93ae4fb82a4b8f906bd09da47d50a5811d4de437dcc9a37571cebe05c1a01ec560c36a2bf59af0cc697c772561a11f768aa7912", 0xdd}, {0x0}, {&(0x7f0000001a40)="9988ce6a9b42fc2ca1130f5ea38d9157725680df309da12cefa4555ee26a202868ea9542319473761fa437b030dcaa524436b75ce18533dabedeb79831cbc431b27fa37a117ea9579ffa757ec5f66052e0f1e8af0d0f2d37ad6ac0", 0x5b}, {&(0x7f0000000400)="ad186ff21e99b4a3e9f6d4a01f146b30f4e5e74f687982fa9c92f77fef6cc176", 0x20}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="21199ac63599ac9943fc3be534dfb5cbd86619dd26f8b0b0456e1a3aa4add42d15e324cc44c4be1ab9afb8a1e3f8b60fe71f6ad199a996f3cfddc1b88344c481487cbee9b0fcc132e6a334ec9a362c4ddaa316a7", 0x54}, {&(0x7f0000002b40)="d3e567931fc25d35ecbbc1f5d5a68f535c5862ee0c20a82beee16397661c8316af62592ab65b5c6b74a06318b7d57cf5ff50de13ad2db6a22ef1ff79518d0ee7130d8b5cec469cc8385583f192a95303c239dda52340b44753db581511f32af12df8f870b2b81b7a8961b0d26f54b2315943ac360ca42f9ebdf8ff5493f9db7e3c543ca9d751a7247f25c71c4c123deb326fea5540a17663b6f6da4c77b960e7cc8f62615da7bc867003b113278b98100f702e806ef5606f9c07459121df9c0746", 0xc1}, {&(0x7f0000002c40)="5229687a7f61ff3cd9e9baaa7c03ad981eb95dd369074e421089abce61f61786ee0a9811", 0x24}, {&(0x7f0000002c80)="23653283140abedf11c3df6a2e7701fe26150bf5b745f71caef632d10a3519d145c6b91dba3e7431487c9f309a4977605f44faad996853fedf51e72604afd14cc7e1f7fd06d5cf0506d41efcd392401349cd651be57cff", 0x57}, {&(0x7f0000002d00)="f51582326e2e864032b5647b4145bb4aa78d1678df4f43b5cd85f19e867b625ee244f816b495ac05c789aba3525a597f2a097b22164f6bdeb753d0e673fb4811f214e426532a2170f135161a32fb2830060108421b68cab01221ef9e9e93b892a80b40602bf9fe968cd87597b036791273c15ae5d354b3aad319c42bee36eeba7309ebb21e3262ed01f0ba9b4058d38cbe25eecb77c5bdc1bb2bfa7e7c9598e654ade84ddfb596f09dda69c7c384de6be1a079c51892f20c41f5ae9fb7176f138bf3bf50909bc45cafb78ffb413202e3d6e89ce39b33af6bbf69cdffac8e6ced", 0xe0}], 0xa, &(0x7f0000002f40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000002000000000000082fbb6000001000000", @ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r8], 0x40, 0x44800}}], 0x1, 0x40) r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x501c0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000600)={0xfffffeb3, 0x34324d59, 0x6f175ca72b88213b, @discrete={0xfffffffe, 0x8}}) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000100)=0x5) r10 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r10, 0x400c4807, &(0x7f0000000040)={0x3, 0x1, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="781002000000025f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 11m59.325594557s ago: executing program 3 (id=805): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000700)={'nat\x00', 0x4, "dea50c52"}, &(0x7f0000001740)=0x2c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000001e40), 0x2400, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r1, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 11m59.24068889s ago: executing program 3 (id=806): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="58793f07510a8d6595cbb7a383a4643dc45e04ef059a15b30ae5325388c3f429a87b8da446ebd6eb99e875a05fffed0fbdc3cf8f49d98f1056fa6a2a78f39d36963628c66e222a9843f77b202fc3390705cc63e1687067d9c23b2847c12e1c5b6654919a4a2bc2726b8bc43609e486a0f0deb836ae380a1c", @ANYRESHEX=r3, @ANYRES32=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x49b, &(0x7f0000000400)={0x0, 0xcc90, 0x100, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x3513, 0x217, 0xa1, 0x0, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010112, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, r11, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xc}, @val={0x8}, @void}}}, 0x24}}, 0x0) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r13, 0x29, 0x31, &(0x7f0000000200)=0x7ffe, 0x4) bind$inet6(r13, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r13, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r13, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 11m58.821308773s ago: executing program 3 (id=809): socket$nl_route(0x10, 0x3, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_gettime(r2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {r3, r4+60000000}}, &(0x7f0000000140)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 11m58.698489872s ago: executing program 3 (id=811): fcntl$notify(0xffffffffffffffff, 0x402, 0x69) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f00000069c0)=[{0x0}, {0xfffffffffffffffc}], 0x2}, 0x3284}], 0x2, 0x102, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 11m58.350206098s ago: executing program 32 (id=811): fcntl$notify(0xffffffffffffffff, 0x402, 0x69) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f00000069c0)=[{0x0}, {0xfffffffffffffffc}], 0x2}, 0x3284}], 0x2, 0x102, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 22.411152974s ago: executing program 1 (id=3892): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "a8"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x2, 0x20) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000003c0)={0x1, 0x0, {0x10b37d, 0x80000001, 0x3014, 0x2, 0x6, 0x7, 0x2, 0x2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfc, 0x0, 0xfc, 0x9, 0x0, 0x401, 0xfffe, 0x0, 0x0, 0x40000045}}) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x10, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r5, @ANYBLOB="60bc010004a701003c00128009000100626f6e6400"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 22.2328489s ago: executing program 1 (id=3893): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000007c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0xefb}, 0x82aa}}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000002200)='./file2\x00', 0xffffffffffffff9c, 0x0, 0x4) (async) r3 = syz_io_uring_setup(0xe42, &(0x7f0000000800)={0x0, 0x2119, 0x4, 0x2}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) (async) io_uring_enter(r3, 0x6f58, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000002c0)={0x11, 0x13, 0x5, 0xe, 0x2, 0x2, 0x6, 0x37, 0xffffffffffffffff}) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x438, 0x268, 0x180, 0xc0, 0x350, 0x350, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ip={@remote, @loopback, 0xffffffff, 0x0, 'veth0_macvtap\x00', 'team_slave_0\x00', {}, {}, 0x2e}, 0x0, 0xffffffffffffff7a, 0xc8, 0x0, {}, [@inet=@rpfilter={{}, {0x9}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x51, 0x29, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, [@inet=@rpfilter={{}, {0x3}}, @common=@icmp={{}, {0x3, "b888", 0x1}}]}, @TTL={0x28}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00', {}, {}, 0x11, 0x0, 0x43}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @rand_addr=0x64010101, 0x0, 0xffffff00, 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98, 0x0, {}, [@inet=@rpfilter={{}, {0x8}}, @common=@ttl={{}, {0x0, 0x8b}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x8e, 0x98}, {0x28}}}}, 0xfffffffffffffda6) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r9, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000a2fa6c405fbb286e6f764d3ce829ba356c1ec3003aeb9cce98c29f67a2af89b3eaefa2180077904edbe1b88f33e7c77091dfcde134069bbde93a81a907d30e7b43c740bd3fefb2a8705e1999a1138823baf39139abbd963862fb0500000000000000c2f678a0ba0b3dc7e73ea5d2c1f853dcffeb51e6d69069aabc9a", @ANYRES16=r10, @ANYBLOB="00022bbd7000ffdbdf255e0000000800220112030000080026006c0900000800a100fcffffff0800a100010000000800a100f7ffffff0800220114030000080026006c090000"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x1000) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f00000005c0)='*[u@(*+\x00', &(0x7f0000000600)='./file1\x00', r7) 21.384850829s ago: executing program 1 (id=3896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x102}}, 0xb4}}, 0x0) 21.243225718s ago: executing program 1 (id=3897): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x519800, 0x0) 20.254728656s ago: executing program 1 (id=3903): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x2, 0x20) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000003c0)={0x1, 0x0, {0x10b37d, 0x80000001, 0x1016, 0x2, 0x6, 0x7, 0x2, 0x2}}) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x10, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r3, @ANYBLOB="60bc010004a701003c00128009000100626f6e6400"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 20.020735242s ago: executing program 1 (id=3906): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x1001}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r2 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x20}, 0x1, 0x0, 0x0, 0x20010}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) accept4(r7, &(0x7f0000000240)=@nfc_llcp, &(0x7f0000000140)=0x80, 0x80800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r9, &(0x7f0000000200)={@void, @void, @eth={@empty, @random="0300", @val, {@mpls_mc={0x8848, {[], @llc={@snap={0xab, 0x1ff, "f8", "d44534", 0x802}}}}}}}, 0x1e) 19.751349252s ago: executing program 33 (id=3906): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x1001}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r2 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x20}, 0x1, 0x0, 0x0, 0x20010}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) accept4(r7, &(0x7f0000000240)=@nfc_llcp, &(0x7f0000000140)=0x80, 0x80800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r9, &(0x7f0000000200)={@void, @void, @eth={@empty, @random="0300", @val, {@mpls_mc={0x8848, {[], @llc={@snap={0xab, 0x1ff, "f8", "d44534", 0x802}}}}}}}, 0x1e) 10.833382576s ago: executing program 0 (id=3952): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4040004) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="251bd0feb722750befe13938a0eb54f3fe1086"], 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x24, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002000)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000002003e00ecffffff940200000000000040000000000000000000000000000000000000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e20000000000000001000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e779a5b1d12adddb9f93fcbcd5233d83657be712f27e55f318f4540272bd1f7da8f45a031230efae91048e9f0f323f1a612bf502f22b15053d7dbd6ae061890a8dd2debe4b62549b80c13e9cfbf139c6"], 0x678) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0xffffffffffffffff, 0x1) dup(r1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000200)='0', 0x1) r3 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r5) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0xa, @pix={0x2, 0x0, 0x30314247, 0x0, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x1}}) syz_open_dev$sg(0x0, 0x0, 0x8002) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="2c0000000420000000000000", @ANYRES32=r2, @ANYBLOB="05cc85e64e604ded4df4a5f0c4621e3d8c88d49bba3e4d4a8dfdf48623bc2e9b8182ee0bfb8fbc967ffaca41166f7779fb9ca13b6b65376fdf2c25dcccbf2b4f2d7cb115a0032d2c939c0b69b6a72fbf6f7306856862417302fae5b6daac374c66c9faeaaf8510c14f8c412b8984625fc32f04159315f820eb1824a7382c007e66e730afbcf0779472062cb008c684", @ANYRES64=0x0], 0x20) 8.138620079s ago: executing program 0 (id=3958): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) 7.764811521s ago: executing program 5 (id=3960): syz_usb_connect(0x5, 0x9b, &(0x7f0000003240)={{0x12, 0x1, 0x250, 0xe3, 0xce, 0xe7, 0x10, 0x54c, 0x2e1, 0x6f97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x2, 0x8, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0xa, 0x4, 0xc, 0xef, 0x62, 0xfd, [], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x8, 0x9, 0xf8}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x9, 0xf8}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x2, 0x3, 0x6}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x2, 0x3, 0x2}}]}}]}}]}}, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0}) 7.376519463s ago: executing program 0 (id=3963): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2d02) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f00000000c0)={0x0, 0x6a1, 0x1}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x3, 0xf54, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x40, 0x59, 0x10, 0x20, 0x1e2d, 0xb7, 0x2a57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf42, 0x4, 0x1, 0x2, 0x60, 0x1, [{{0x9, 0x4, 0x22, 0x4, 0xa, 0xff, 0x53, 0xdd, 0x9, [@hid_hid={0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x767}}, @generic={0x68, 0x8, "17a47fac4fc555cb91d8543010ce3f32065c128397ba7fb6e78a45d965347f35f5faea7e75447c3d6eddd8b69fd70506047fb133618dc8b050ae316778a09c7a08cb5ad067be1636c2b9dc1baa0a135b771a8c913300f47ccfd6cd6979871e71de77720847dc"}], [{{0x9, 0x5, 0x1, 0x10, 0x60, 0x7, 0x4, 0x4}}, {{0x9, 0x5, 0xf, 0x1, 0x3ff, 0x5, 0x8, 0x10, [@generic={0x100, 0x19, "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"}, @generic={0xd1, 0xc, "8fe5b58bb4bea7a0ae0352c8ae41e785a7f557610ec05bcd63f79e787deb4d75732860211bb380a7f20e7d5d000d654555d07f76eea2e913a75ebbe97b2695d472d69a9d2bca0d1f751f814f84778c3fd88ab0201db1be7324ac43d001210f30d807b9957baa326e7bd4861e23997c65f70d76d39f8e4d51e240d9d77ba580452e320b2aa863a4283fa71b811cb777afff72edaf7b15717481b7d97ac9e52e3f5af699b16625ed60d9efadb3eb5d666a40f77f328225ed27291cad7a8c4344b91550e61a573433ccad59f32719bff7"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x1, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xfff6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0xd5c}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x9, 0x2, 0x9, [@generic={0xc0, 0x24, "a2215d20783cf420a2e2544500b7d8474e161b96b5d2cd85b2879bfe29b17f2e06637a9f35659d4b2f87aee419120c2f75677f4a17087f852cdd395e46ecc53258c12003779068005073f800e4ae127bd4c220bb71b6d961144bf53bc6a381d152544087575a7bf2d7bc12ebb030d48e4a0132bd205781c3824f3c688a5aed9aba9f3ada9a7da56f5b342b8c61b43c0f02b7dad08af5fe4e03699e98f55f78078a9163728245163ce5853aca7d11db188c0128c7c426d99a15464f53e854"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x2, 0x4, 0xf}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x9, 0x69, 0x67, [@generic={0xa4, 0x7, "e6f76d94e84d0319f7174056207139fb8b6c97eeefc41ee87d800f6c382e91568ac03f8ad4c7723eaee28899a5fad6453a2dc0af1d5a8ec775098dea723309debdda681c6c687fbf600b8e9525e5ce9b81d9dc88f437403cc03a51ee532480ebe7c0328fc579eccb275c9c0107941aa446ac7fc0b97d06443e7a1a40e84649de5dfa7be80b827bb372f94bf0a1635e988b5c9fb32af782ec0b11b6c5b3691085a5db"}, @generic={0x8b, 0xc, "df31642f780006edda1774771137007f8746d31bd64afd72f0fe7656b89917c09a8d246e1192c96d04091a3e4206acf28d3b9a338a04e19a10326a603f92c3597fb08a5a4a36a76bdb9d381e741248209880a955b9d0616a43a4a1c11c5f8fb53848eade5b3c3dd1a3b65b3d3180438cc010bbcbf1c707661fcfece9a6495aa64784e1995da205aa17"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xd7, 0x2d, 0x7}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x4, 0xf8, 0x7f, [@generic={0x5a, 0x2d, "03940ec4c3a7f879468d36a490523d090ff90b1c724abee9a1480caa073162d4e56838c56d2601bbee30b407762de3b9876a75c7eee5b87d108f6138bec30238aafb6ff53b93863de811a0c1b690e9374c8b7c1cc614ce42"}, @generic={0x62, 0x30, "3d8fff188d46704a8b839b133a1495450c9377809c2417fd23fdc26573d738cf329fc312b88958977481d4ce65039742331fd0f79422e4ccf28c024974fd92ecf8badfa2f1e8ef47934db670cfec74aa1bdaadd3b2e7721aa1116e70d2b9717e"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0xe, 0xc, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfb, 0xcc}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x7}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xfc, 0xff, 0xa, [@generic={0xab, 0x24, "79253cda18753906f25ca65292d264f0ed4c97b4d60db87e7d7f3fef3ae9107b7ccd86c76f9a3c9e9c6bb300fd7567b7b532a0e5879eff323d4225299a10ce53f9da5b102876a1b414a8605890857c074af62f872d3b6679c412e7a617d549b809e0dd489cab1862768840a9768990abe27e5916fb14db3d6a97f613f921a89ddb7d822e804074b18684dd853aed657541f1ca2b6cb9a679244c1c20abc9289e25bec73009e6b6c87f"}, @generic={0xac, 0x21, "fe08921b2c8872d90a8cd9e30a5338648ff3df3162ba121c3786af5d12dd74596d8cfc423595b04ab32d0346835562a0518d3e03b3ed0073069f22c73b8d5cfe5116d7ecbe8e95274c874483dbc61cf2da883eb0920f7a34b187272c6f60eee5cc726e452d3cd010570bf8ba055e89a0d9fbc5664c2f9fbd81134db3fe9109f5c25bbd6b00ed7aa7ac65be1d6fbf25a0567aad908ed0610623aa5eef0737d00fe80a10189fa4856d9b13"}]}}]}}, {{0x9, 0x4, 0xef, 0x71, 0x8, 0x45, 0x1, 0x59, 0x7c, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, '~\tR<'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x85f, 0x5, 0xeb, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x4, 0xf}]}], [{{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0x5, 0x0, [@generic={0xc6, 0xa, "dc8f291b5fd2c46b7bd4f3437ff7dca94f014e2ebd381234830ff94f8efa7ffb6c14ee072f323f82199d887ca92804ba246ac8e2e21b9f409eb67b531ca68de72322c5f56ba5f2611778b395001640f930bb482731f824f2bb462185f600744a61f0cdd82d8dfb682dab1290a8260be520d7726fe18b4c1d6505acaa3577e7a6ce78adac20307bc0d5c8772fc858924393171ef6fb1a45d4d10563b1f54bc3238552a596e114eda5a8847057811d0f5c9e79697ce8f15f4841adcee59d7cb9611946f1d9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x9, 0x4, 0xa, [@generic={0x5c, 0x4, "1c5d6113e2dc4717d05fd64c5ccee0d19bc23fa400871fb7cd94b255e5be8d2472cfc101255deac4b2d5b39abe4d21e8843b415826ebb4128e12544b53ea4c413bad3a70580ea0db32471a6865fbfd7a3572522439a814ac949f"}, @uac_iso={0x7, 0x25, 0x1, 0x86, 0xe8, 0x80}]}}, {{0x9, 0x5, 0xb, 0x1, 0x440, 0x3, 0x72, 0x8, [@generic={0xe7, 0x21, "ba0850c222b6eeed0ca8ab070d10317de275a8ce1827fdfc3f1246d2b6c3a8f839256107c09985d30ce081f25294a80b3ca58f0ad8b3881365c0c93dcae94afe548fc83868dd05c62d0b2745b863b6f932ad07c6600dc4ff8899571e4c114f5292eb2f83196b22e909220b7d3089f2b940760146deaf3cd94b1145f63d5b35c12067183fcfa968cbefc5243364f89f30e4b8cc45f1d869402b864ea0c271477b0c577c89293efa72bea5ebdd3b815bde2f15383ec7f371c464faaa5fae2f0e019c4573aa188b9e71ed2b91fee74875727d69cb6efecf4acbdda9df74ffb7dbe6f0897961f0"}, @generic={0xc3, 0x21, "7e518a3373f62a51797aea088d774f31e57f494ac6fe1fcac34ccc74fdb864b7ea49f1b21cf81e9b4f43e9553a53bd98b6373c62024d1a3dfab34919a518f27dec3b8f9f079d0eb3e0c90194e1a9f8211bec3b4fd0bcae01d3cecee736c62ceebf350e21dae16dcf4af1f36bd68f979d3a80c655d126714249fe2347c9472604ea8e08b4ac31215c87b8e5fb3b50ffcfc11707ba7aedaeab47b60e9a510b1f58309fadeab54b87a982005473c9480290d79a8c4dacb0269ae30a6645e1026afd23"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x3, 0x6, 0x1}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x8, 0x4, 0x3}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x0, 0xe, 0x6}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x8, 0x6, 0x5f}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0xfe, 0x2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x82}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x5}]}}]}}, {{0x9, 0x4, 0x31, 0x9, 0xb, 0x45, 0x85, 0x14, 0x4, [@generic={0xc6, 0xa, "8e9cfee9ace3c82d15b3f2bae25bc4c57c2ea39478cc54ad4985c561345b1bcf638fd609a32ef43db2eeb464ae482d5f9b0e016647d1cd39557210335fe292009cff4f7c4c76171587d788b80be8937a4b1ca70f933366d26794acb50f539468c7e85c786431519c76c6d9cfe9971421e342780ed95985542a776d32ea93462404caae8c69b5348c701b8eeaa37de10dfc9d0281a276d2a06b86e77e3b15d6f36ad3a757765775bb2f51ca58229b691fdf777dbb551deaaf73a1126981f1887e0ab6bc19"}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xd, 0x2, 0x2}, [@obex={0x5}, @mbim={0xc, 0x24, 0x1b, 0xd9, 0x1000, 0x3, 0x0, 0x1000, 0x5b}, @acm={0x4, 0x24, 0x2, 0xc}, @mbim_extended={0x8, 0x24, 0x1c, 0x7fb9, 0x5}]}], [{{0x9, 0x5, 0x9, 0x1, 0x40, 0xf, 0x81, 0x4f}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x4, 0x7f, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0xfff8}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x7f, 0x7, 0x3, [@generic={0x42, 0xe, "88021788aab6fcc555d1967d7f597833f5b1a65cf27b1c2bcd2365841fa8b36925d8f64181536e8b70050b0269d9fe75278d779b7a37b31ee5f70796565705c4"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x200}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x4e, 0xe5, 0x9, [@generic={0x3c, 0x21, "f49f71bab8f945acb01cd38340773962166b35b760fd6edf64347b4837658576754e87ec52754bf0e4bb0c4ecff49b621da3fd9ca6ec6b4c1a21"}]}}, {{0x9, 0x5, 0x2, 0x107c8271ca7035ea, 0x3ff, 0x1, 0xa, 0x2}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x9, 0x3, 0x9, [@generic={0xc2, 0x3, "dfbb850eaed13f1ad9ab7dfe5509391230d1ec9fa34e64de0ce7f95adc26d54e2d601850a0b12fec1ea67891d981e2f3e12f950bdb6defb29ab8bf57018bd998a733274814fec3596fb8f65d2c99372caff66972edf13d9494e80159d641558894ba6b9eee8f59f60e9485a3427046f2fa197765e12e2b32faf5f838700a238efbacefa8144bf6a6ea3c5fd1f36a1b45e9c4d6b8ff09838ea6cfa44763fb59d8f5502dca8d891592672bc6b4365a4adb837f0713bfd8b6805a1f6b5b7095986e"}]}}, {{0x9, 0x5, 0x6, 0x6, 0x20, 0x6, 0xfc, 0x2, [@generic={0x29, 0xb, "01f253fa86d9c010234046f94e3c588c69fff1aa6da705c74fa75d81190175e8f992837ee4471f"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x81, 0x3, 0x9}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0xa, 0xc, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xa, 0xb0, 0xff}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6, 0x8, 0x1, [@generic={0xaa, 0x31, "7bd443de109d05c3cbbff1e337832284ef0a9a3a3e50ef0cbc12d13390017bc95690946251fca3d81835e976973ddaf896980d770385b571e82c94663ce13387dac45ed19b54393819d59665bb3cb0fb150c3473c1c934fafe6fc5aa25399b3620e906e054939a29bf3bf67097aa2b41ad6d78cecb0c7eba4f380fb5c96b6d3a17433786a45afadf8f23dc950619d66504413476e4eef4f3d8aa9d666cc10132248864470ff5f320"}]}}]}}, {{0x9, 0x4, 0xc8, 0x8, 0x6, 0xab, 0x81, 0x5a, 0x4, [], [{{0x9, 0x5, 0x5, 0x2, 0x0, 0x5, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1e45}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x60, 0x9, 0xa7, [@generic={0x14, 0xf, "ff5930820bdb7584ddc919a2a137a40eecf0"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x0, 0x9, 0xfc}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x80, 0x3, 0x3}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0xb, 0x48, 0x0, [@generic={0xd6, 0x11, "3f06d08665c0bb907c9fd7aa65c92b9261114c2483e6da98636c018f9d86ddef368537769fa8cbee3e36894b9d3b786c263e53901a1a54826d64e7ce7d1c8ddda0c47d210e1a456cde6c0a5c55d0f36abaeed19aa1a972a84cc01a04a21e0c919cecf8896aad776000b031c9380bc8ee35d7122edda0624c8280f7a3582bebdc79e2963918eec733e97084d4b1447cfa39c0a5e8707b9eb32e1de3d5ae89fde1e38e2c8cf71e3a8db18c99ad411506b7e95876a9ce33bfa2037c467baf79ffca3a27b885c619fd4667e577dac7e3823c3a485edc"}, @generic={0x4e, 0x31, "97ebbea24206b7f77be3e8dfad8fc6efa603870a133633fe1739e0491ce28bb0ec2c128d42dcd68d834025f075e7f6a26d0fb5684c13bc02ad13180a8ffff26fb98f966e311e939edc674942"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x6, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0xcf}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x2, 0x9, 0xe, 0x10, 0x81}, 0xf6, &(0x7f00000016c0)={0x5, 0xf, 0xf6, 0x6, [@generic={0xbe, 0x10, 0x3, "d574e450e295211d8f21c57e62ef73922c2e06a65b0d399129648adde18cc85587030f16fcc63db3bf4524d360d2ef417c2d39798f8377cf4289c349644a21aa1700f180f3aca84c10531a095df281286ade7982bc7239c553817943847c849d5f8e73c64db4cf17be16f07ef34368e6af8bc7b46c0f7168bc1bc9a29f61a8bce405b68854b5f3548a3b1ad2b487729aaa1fab696b04dd749f3a9acb66e050f7fedd619e257c78920d35ceb83dce8ca10845f0588d1675ce4b4412"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x99, 0x4c4c}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x6, 0xfa}, @wireless={0xb, 0x10, 0x1, 0xc, 0x65ab970329d3d87c, 0x4, 0x3, 0x2, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "3bf61324d15fd247e9b373bf9da2cba9"}]}, 0x6, [{0x9, &(0x7f0000000180)=@string={0x9, 0x3, "5a79c17674652d"}}, {0x3c, &(0x7f00000017c0)=ANY=[@ANYBLOB="3c035f6003e7028c645a5d6e16bb689ed7d236b0ad3295fa6491a4867ce93c1c9484a5b05a29fcbb3d0d5e3a9c955ef12884124415ffeb4d73ec0c07eb29dd461db6f8496b3c5eb2228525f938c78a7091d46b6ac518d484d38307a7720a2755ce4941c15ccff85f984476dcb60af4efae345c57ff9ccc500ede1faef7748bfcb671d8a5a9f8fa124df91299650a215553715a11d547a2c4ed8880e00425295443be292ba460e32857a4ed79438d34c7efa205e63031b68c5a4a9f62b63f289cc0e297c21cb035cabedf034db2f0a10b7d8c209c004090f45031336383239439e2b385395c3a4d0e0c95040e242514a7c2e5840b29fc20"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40a}}, {0x2b, &(0x7f0000000280)=@string={0x2b, 0x3, "85d00b9a54078744e16860b45fe99f670145ba43313fa2ddc8bea598c1598cb287e768258c66ac59a9"}}, {0x58, &(0x7f0000000380)=@string={0x58, 0x3, "878e9a646e347b4484218ae248a4b55809621c16683d05d3a87f98ea438b390819040b0d085b0a018282540415b1ee937aefdc6fa384e291943a04b8937607847c817f40c443e0273b94b44a2b6ab947302cf6a1446d"}}, {0x8d, &(0x7f0000000480)=@string={0x8d, 0x3, "80b1592c409492a9f9540731738495839975a06522841fb49a90347037962933f7d7399a357de02c0f15b9fe333af311033a9ab9c44ba320cbb6b470f84cfd1b47481caca01bf32d78ce02ab22e1775068ac471b008fc8b617f3b36a055fd9b0afc1b2ac57b537354d66d776e9e9cc25d74aee92ed6501e783b04f84f153b9935d9a2321fc9ce0b2551295"}}]}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000e8ffffff00020000000003"], 0x48) tkill(r4, 0x13) wait4(r4, 0x0, 0x4000000a, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), r3) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000004800)={0x94c, r5, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x71}}}}, [@NL80211_ATTR_NAN_FUNC={0x328, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "f7020f3067d7"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "8dcc0c06f8c3"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1e8, 0xd, 0x0, 0x1, [{0x8d, 0x0, "231d27731bd63e30916c1fc51c0a775febf9e153de43d99a092b832bc2370b7b9f67ef5fdabd0bd2921e47cedc173222fd807c147848856d2224e1a64b222b6130ad0dc64a1afeeeb4cba634cd6ea150625ecfa976d327d90c31ee83f33f13471c4fa4ca1bdba0616f56e6ec09dd23240fa41a649a7a1d6e7124db2d883d3a85488600106cb572a28a"}, {0xb3, 0x0, "3b9be42cbebd93e1ce747c973864a4b14928e6fa23d528a5fdc55d5d179429281db3df98d7de34e1e09f836789eaca64fbe9a854d42278ced6cd09e67d797f9d7d0f7ac90de3860267f320017afb38bc5e73dda1312d0829deb9dfbf741dd8a5841584f525b89367e0320609750144ceb45424daaad3ac18bfb553c5621ba7b74fd96a695bc42ff3fe7666abcd3b226b2b8dacab9e0ab5bd807b75a2b702b89553ad5410600c3169ceff115692fff9"}, {0xa0, 0x0, "7ac37075e9fc536ed1c94b3bf83c5676538db78b5cc603ff192ac10ed5ada7522f119ae13775169b8e371206977b81ab6fede86cd2d9a25617514ae9d41e2e4e9fe093f800701b6829b01921b06b35e49486dff05e99ee99085a8066a78f2af3323b76a9213891070d525fdc15142f11b8653b6e1b3f6dc3a764e1dd9156d7cec8310c1604ec5949b2849e783a8a5014ecea18b7764bb8cffcb450d7"}]}, @NL80211_NAN_FUNC_SRF={0x114, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xff}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x370, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2b0, 0xe, 0x0, 0x1, [{0xa, 0x0, "1e0c3db37d81"}, {0x16, 0x0, "efad494834eed3052b65b1b5a41d7194d7b8"}, {0x89, 0x0, "0a429c61669e4f20fa52e39e08eb8f51d03193f86a689b779258ef204a3778154bd34307e746a4ce4b36a6d92b2f86b5431961626c2199005ee7a15fc61a6b45935bcbd5eef1e4599d7fe6c2cbd647447d3cb37af350ba8ae81e6acaee8e6e196ed28e1215b99267c65ab0cb82d9586dcf626afda5e2127ebf8fe49ecf5e5c1d0c378a4614"}, {0xa0, 0x0, "0729efa5ddd3c0c44112b571e0ada4fb9a162331ef9ad2c65bac9aa0dd3be6905c73443367a5d80449fe24479a07525d0f0b1b9d78cc3a45c7bd728dcf54c186505137ffe27b5683b5d32c4832ab16ab2cca2c7cf66b576a77238b9d0c19dcebabe66c111b0bf6556af3cdff485a2362c64fb78944788d70b3b160eb66edfb6d7ea22aa7630a98fb57ae0701d37430b2442ca8576abc8e8ed6d2f738"}, {0x33, 0x0, "4dea8251b4c4f54db27ed8df14de176f60fff1502b188cdce57f64b938fc614eb5aa1af7a5b916088a659acd5e96b7"}, {0x127, 0x0, "e4709574160cf5e1cf5dc57443e83bcfaa54147c695a059544b60481f081ea215650ac76e8db5741db335926ebd806d7b3f3c9535f77e7022b61ab0688b534914a25ba895fd316e81d6db87f77ad5b06a10e78a6e8c1db51a7fbdfc1cf2f9decb0b9d6df554e75128579e2291088dc68dd1b7fc6150998157649e34bebdd0c5a5653f9745c58af2e6b276f2ace0393fd999dd382549ec3a8697d623f6496dfc4f4ccf6250286ee39d45188129629aab07aa8568d6137904d73ed98ab5151e8321c0bb49cc26988e9554a7ec81dad2d1a945e8f17356a5cef54098e8e684177942bdc872ed02879b84ff1933b8b50477ee1154771bfa3b79ea46182dafc72001b0890012dca408c5fcf93ac88ea734587b0be2e6a9bd99b00"/291}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x9a, 0xb, "9f02e755776e29b5bbc7b17a567c3aeb49bf16048dde7ea76d742899745eb3e170506988bdebc894503558fd2ad8a56e909a5b3d96c54785d964be5453906dcabd7a5df7379af86c0ed11131e78660a6179324d1e7acd0313744240bd9673456da4a24410df57b61966346618558b9adcb4575f076870c23069bf8c2b94f257127a44c0090f7e5b5d6c3f65d7ce919606e958391aa15"}, @NL80211_NAN_FUNC_TTL={0x8}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x86}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x14, 0xd, 0x0, 0x1, [{0xe, 0x0, "d55feb3e94561790b8d2"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xe9}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x24c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x23c, 0xd, 0x0, 0x1, [{0x6f, 0x0, "e27708b935826597d0db0673c8ded45fd79e5c8e633c8fb0453aa63201628efe09041482636c7941ba66d00de3fad9333bf5e7a34808967474e3143cffc458a8d9d0c86dd3820824bd5fa50f3dc619e0fbe854fa1637ccdac7c5516274ddd213b5970e5cec0644df8a9254"}, {0x6e, 0x0, "800c9b8f86fa7a483ccc64e2549dc364755a03da1128b08c0ef6c44d11af8938180a8c8e1aa89db7e0a9cef3f64c98c7b26fb45cb8d35c5168d30758a567a8e95fb8a71255389b08526c45b8b7200c8336b86e1351170057558aaf96381d252b5e4b601c9c7f03358a42"}, {0xc6, 0x0, "9e754933fddf748432d303a25513d8f727911dbf840165ecc18a4a2f271d294ba15aac58f8123c68d5146873886a2e7d462f8cb8786085b5004b201d28dc553aac52726e270b4b09f112694068300854c52827cc9c23d695cf20361126d05eca9ed5e9d5b8dc8e594a12e6cce8b095223a2026c16594394cb6d9bdae749ac8fdc9744650acc61f0c772db752ce8254de8c427ca6b0e9a37eab7a99b97e593a3bdf8eb296f137440f06db036740cc336941403a064ebf21bc0e73486d7d5df3010d1c"}, {0x5b, 0x0, "3a9d3d9c942746c583e14a863322b9a4bc3da463697174cd267a98ce3e79c9a0fe02ea470bf0a4ae6255986850c8ad7bc5e421e80d9d0a576f2343995f10b13ab392bc5d5032484e94020a46fecb48101907f41a5ab360"}, {0x32, 0x0, "3627348a5a1ca4ba8e67a43af8b12cc5494a21c4050b8ef93b8ed3ee7a5944b71afcd2c415aef48f15afc56e6963"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}]}]}, 0x94c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r6 = getuid() ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002f00)={&(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmmsg$unix(r3, &(0x7f0000002f80)=[{{&(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001940)="2d6debc8caf41f32f33b2d671340780b9d54e47f5915e1c9a54ae8df1f278b8eec547288092d32e0285e14b2a2ca8318b97ec99a87708de90a876535769b45cb07a032b281398f6034445c6946c83e96bbefed6afa08c96374f15e0b02f25c285f4680a73d165c42f335122d855f4441ab80a9759416eb1fdc55b230b8aa803740ebe8c52c94dec621e2f6036b7de71d2c7667dca084060f304354340fdac556c2fb5dc28e7c65b42ea93ae4fb82a4b8f906bd09da47d50a5811d4de437dcc9a37571cebe05c1a01ec560c36a2bf59af0cc697c772561a11f768aa7912", 0xdd}, {0x0}, {&(0x7f0000001a40)="9988ce6a9b42fc2ca1130f5ea38d9157725680df309da12cefa4555ee26a202868ea9542319473761fa437b030dcaa524436b75ce18533dabedeb79831cbc431b27fa37a117ea9579ffa757ec5f66052e0f1e8af0d0f2d37ad6ac0", 0x5b}, {&(0x7f0000000400)="ad186ff21e99b4a3e9f6d4a01f146b30f4e5e74f687982fa9c92f77fef6cc176", 0x20}, {&(0x7f0000001ac0)="7f3e66728e7c4875318e0999ce33879c4ff17ed8b811ec94aa71fb3bfa4ca06f58aaf16eea9ea8a6c00fd75878accbe79f36053988bf1cf444fd7e174c274dcbba4dfa95db57d30841bd8fba73ec26ac3b15b86a90b954d28e27b9acd05c59eae5617f344e4de5459ccde583b3cb690ea9462afc7cb72c7fa9f685571bccbdfc6185525a68c4e709b6f79f7643a52790e8aeee069b828d20f24542c226b02590550a05188cd8ee3afb3a596c068f35cf2bd0194d5b90935fe0caacc9e56f362ae18c7eb02964f539b6f334b2711d04e3707aca8311a7ee64527b2198cb010a8aa421f68882e7ded9a047ca487cd9d7fa05cbfdd6f57526550ee712f2989ee0aeb14388ac7535cafa0ac067785fcb42c5b994202f18d9642895581a988523a50fa67d235f0017269f3774f514f578153bf6c937db797204de1c5b55a36019de7d69d8c6656dcd1c853b0c3b14d23c15b7c6c2175e0acdb5de0a3319b81aba6dceea5271fb5ec5cb8258ed6bfb585006cf7efc4c9e11a4ff16fe464e1cc39eb32f3b3d24f11e5eae30eb26dda28392339a9ce58c628aab181c1890bcf5383e03e91f6413a33444bc721c75eafabb2d6e2f6b9ddf10719dadcc7d7806f4a45eab21b088ea1a3ab29dca01a0245cd6ab06fe9d38a790a8920e6f4c1f02fcc9cdb78db1da160c803d490273b11eae292273610a83519429aed6832eff293469a542c29048fd91496c94ca8cbe18ee9cebe216660e250ddf50f4a8b1a3f1333c917ec26834a69ed96f795f9d131e10f9d70496f8568a338c38c4915f387915c20de8085a907ddbc46f46a4fd31c6859846012de6e25bc002ffc49c74a7ceb271189c94f62c35a6db5243e66d14cce8eba256bcbf682a2a0d4a5976f453296547f8bf5e7a706a373cba4ac026d69fc7c88e8653664076adb03a53f32d693e2acad05eede7977b68b95eb359d9a84b2fe25feb3fffd7cfa35c89174b99d621ba5715175390ead22e5d57e34a9a63fbbabf0d6c5567da8467d2663146c087f7402894a86883ef920f548f9cc466eb9545a2f15e9f3ba0e0b28f0d5e3b48b573455f4fb3c96b109cde6d18e9d1bd876b30c49f756e92a9965822ddcb74953988fd5dd315c3a3e4bf4e71d589ab9ce55563514174ee3d32b7b745c7d4cbdbbfabea110362a8b7efde0d1a6a1165d82a81f6ef9908eed357667350ebc4548c10235f2379f4b2716e8ed0f6ccfacf5cdc1f2e7eb4dd5528165c4d7f407ad83f87ac520b90b2fd39e3c82b4233e991ebe9681fde5d34b627b24be4a94098671c7b7affe0a70cef2c2ca6e47accc08eff697d1166df8824b0fff685356e3cbe8df26066e94f2dd59171d32d69270b6f3905d1790b5de5964fdd89e3d25d6de290e980bf59733ca7928ccba3c681961c6d9e297ad25b2e444d10511dbb6dabb45522e1cd84a6db7e044f4415f74b7f7ab032b02f72cd7e1f664b200d7c1be5664ac47c0f8e70c125f67dc4d00abfa7cd15ba955fa964d1b3fb4a7467e18044d5ca9ee21f3108ce26c9533f38f58eca477dfa6ed40c85646d2b098308bcf1ed3f64025fea9c325c9836d0e8b0dfe4b65113a4fec04a06905ac1977c6e21eb74ab724e0f5cbffc764689cfb435bdf99f18eb5d98a52a0f27aa53c417546306c448c964ff2a2cc6658e46a58d1053efe59699e3011245e1d5f2d287eda8e43e683436ce1bef2902747e51e5a5d1d87854a9d259db4c08400bed3ebc9be077c39dffc3636b1972cabc5f06ba14c69e1d1d94b830b0494ddfc7a2e8093a7bdd1974c385acc9f44b304816dcc9780b7b6fc7855da051c32c6fe6db56d4f3a09e0e971950d1ed074589210f0a38797e645f6580ca467e3c1dfbc529007ae596363b0668540dfabef351cc55a28e59c8f77d44abc15fe3851090a809c6a905ce4653ca12fdf03fcd24c04fcf7dc7e7f121a5c2abc7d032238a11a0ef41cc290b8daa594b8a9ca25c9360ca333e81e6ed44ab961091c8b1609e34ebb3794186fafd91c47bd89647aaa98cb7df9932d132bf756c9d724a5befc434b439e5ad19ddfb174472a6bc42258c3a9446616158e375de0ec41156fd9aa407589d94ad332511535094317face6ddba3e45d106e7de14605488e92c824a76a681e411529ebd0736853a0f322f91f05acff3cf8eedb4489da8742d03bd2fd4d355f915d24ead79b82d5478be063b135a45774c29015cc8a97ed01f224bf8652a1f71ec931c4cdbd242f6694a05d8b05aa358b5cb1eab18cd5773077e87cd1921961a65f4ab1436a2329acda22d672cec0eac590abffc1ac6cd7b45ad20b29ba2e0b61a9ed4630c070c0d6f44e0c1944b37966c069c33cb34786f0520fb4cc06513c67db3e8c76d898061af74e7e3686c5ab507b87a7c89c7d94175466b542f0ef9e3e81d3b8e23adb5d19fd235f82121cdeb0ace5df9c2b1695717a57d8c2b1c9456ddddd07acee98a801220b3bc971a4ee26c49e2f11eb16c3cf1c924d6f604659109e95b4be5d8a91eede857ae10db34c78a9e62f1adeccd1e1d10457573c54da17bbc37d2f3b1d2df4349f3e7324851a6dfbba32726ce6100ae530a0f7b1f488334e809791f66a942338a3bbdc32189262b0159ba6af966fa26199353b877fd8b61f047fbc58d91dd1fd072d3fd623772e3deff2783fd288f3b1e6659d712c764804cab5d0bb1df1e4d32b5653bbcb2eaef941c39c37287d754ee80fdbc59743711519dd36ed19dcc7c00deee9e8dbab654d77bdf44b23442c092f9f8731076205f0d86c0cf54dad732b5138f157fde77aad00f5c33e6587da1d2f5bf09c2100fb733daeaa41cfdf3f3ba0110edf54fd3d7c4cb142565fa1c49c48051f183cec724f343df83e32c44d33973ce63aee4fec4da1b1bc151761c6949d81ce3c5151a75a37c5e09f15f73db6035d1af070cae03d39facb00176e33540e397ee8be5e65313e1b57a7762937f5a3ae7c9b9641a8a1bc61dda74ef926fb5d5b16444059b79cabf60f1ef34752d56aa84ad876bcc194fa490996d01bee0ddff47a6535b4c45328b79dfb151a04d41597ab41c8a148d82a973078a82ff40982b1a8f5b2d9e7d0be1f80b0568f02159c6305860b12a022ffdb5a1c645a44a03cdf81034a820aa00ebb282774d01e4eefa25e481bdd02b1e0aa1869dcf1f855367af32f535f9157f341c6340f4c8c181938a0b41597d155466a51f1c8b0214ee06c27500bccd86bf8b399ea6c6a99031a7e9be4b38d57f9e6fcda75d25a28a3e8ea3dc5d91cd1cff693ec8762215ee9e41f93db0b01fe8d29c3e0f7249761858ed61ed445eea8cd34d6e953b828904e8fd7ab13d6d522f35040066e6b3545ca43130ec2e4b6d03e567abf68392dd7bc664e58d980c9039dcbc6c4dbe0e518672cb1d49fa29e688502198416c4c4507d3c43290f8f93b08e959b24741b2fff35851d599fca0befc97fbc9dab0cdb68a7b56ef3c1982599fd7c64bf271008e0ab5ad7ea855eb131a4a2bc24232a46574bdd7cb5b47a78bfeaa276fafaa0688204b48d238ace53e1cd77b155266bc1c523ab8a36ce4df248d32b8f78eeb1748b7427f50e37f786bcfb228d576bce80703f2dda45030b610a4029fd0ecd3e8873c89291afa356c97e2065f3f21823458589ecea322bad43c9d2b5c9d2521f4c4e7e45e4bbc4dbf6852c3bd405b0c663c301a69da573d1735ae57e872d39057cc4d853aeefd7f049245731587e3932a868dd07395dfd02d10481e0028fd6c9ffc2653e248aba2b28133b63ac65eac31e9b2bc437b2556a92cba28fcd29ab7508285ea6ab3bd75df4c4ee99ed329a9d4315a2e3f1a8ffd162adac3b5d53dc9433c6c5f2dba3342b4fb245e38b73b26e72de4b53a5b0613210463bfdac53044f0844274047e1eb794edbe8a230721004a54ca7ac5fceec2c073c0c64a83a0d565fdb57e5548ff9a835d2f6e2ac4fcf6dc39a27d72d7b095a97b9bcc67c99cbc61330bd0ebedd9f850611190b4224739d4cd7537af0e9cb70598b5eca7e5ddf0a2baabc04d019857b3eabcd147c0dd19eab5467a6e698c16cbd5bcb968dc5ce60f7a2b37dcdfda130a9ef5399086199a3ae8fdf56ef83a36558430b540bde50936b4c51b734ff2719e4910b15dc99f1f828e9a684d20f85bc19b54d0f54a39a7234a429f1d31c0834135000896920e1c40546b83651cf02bc80f8252e905badcfd31d68b5f2b49db6b1a10416eab59d0a6bf02d044ba5340d2eed8e0cb867549786d9fb0d383552ffaaa5584571b317d89f75807a6947618f29cd6183c6a48d3003eac1b4f5ef98f80bd0abb8f25346d8bef780c6d926181f42335f6ba1c36fd85e7ef4ffc1b2d9ba8c4c5c68faafb4021d6f0e29c463581844e0b390063cc4ec1f518bd09e7bb81f6226f3102fa4c990df4f56463bae5787c411c75c9d5acf561a1f7c5cb52e905829a87e58fdf9945ed126d09dc2c0f9124afa0950a7c59012177722610692da6ce378a90f5623f1a628f5293bf960ac7ad3c756d4e82eb93e46973f9b30a6eb8c3145f111050569fe45464ab7a746ed8b9ef8de87a6a2365e88ed9a571639cf5bd0e8398dacd99e4628b0149203efc77ebb43811696b18f8cccd12e519f05d06c106a412a72932a7332a29e32cf9daff5cb4d25257f1d381ff0fe2c3bb640a5664408675ec65141d055a6cec36df5c10b95a80bf91ccee77a9f74ea6c6a0d4167d18826dadf5431d2a699c29aa022f4fa00b83a08cbfeeecc5644bf560bbfdc96f42d82f40216417a28b6fdebaf8a97bf5b6e8bab4a3d0b196c3734aac625469d6acb04739c6cc882f031f6a9d7be793801d66efae2c9bfb78f9e358f6b52560f2353f54b751b52ece97af2135ac21333f83243276d253e1d40d4fa09558edbeb26a0ebc2d2c9bd5492ae4e1624020398e80cec7ed6d36661a108b418a54887976af291d6f94045e4ee583489eac99f179eec3c455bfd7cf9928a7749913af9ac1fb6695da098b9a8767366005124b1fa215d69a5ce0d156f276ca4714ec7c1b345dbc69e4650e13d66b9248e0ac8fd265e792707aa641124edbe6cb177fbac82aca9bef6bea9d9536abc8936119e0a70555f94df3233fbb8bc91a70ad003229f9f590dbbcbd3c77e31e6cf189d7d3ef66455a149a89f465564fa6bf3db3882a39ff7277dfe9105ba10fcfe0dd0ee3488c0ba26a646fc3516f1e531b85ca17905746e4f599a96dbdd168db7f9e2c37a9aefe6f3fb8849f7724e754b809f02e1755aeb5272dc26b60d6c972b25a7bd06affcfdfd792d921fd7741f0af334b45a2d315655ea687b224788719676e9ae6ac281644339ac99526d5c00c94b2cc526729037eb82694d9395eecbc660aa3db5dd73668b518c69d7004fa60ea6a73ca0f330126e7eab37fb5aa572144bb83c4360bc14637d408cbf7a2b01104ab7ca14ce1e87f6d3d138aa49d4f25070a14f7a57c62db055b84e36a634991e183be1fa2adaa67a07726cb73e6b4ad466987008fddcc47e8cc8f3f3c86c6e12756942d382fedba467aafa6f9c0c33bdc9e9ac34184b9bf0344ce60ba53f0b59581b22461610e785060a78dedbb0c47fe1eb51ab89cdbe670b5879632211c5d3c3a9cf6a6eb872eaf601d9b420293c60fb1b36c23cd3d686acafd74022449141e15afe4a716b016199e5f62510196ab8e2b1bdfc6c03a04138a42822b1d5bdf101d93fad8e2676bfb8550f864bd84e14140d3ff92eb4e36f48b7976ae47ae8c51bef8618dc7e5f396e1b49ce69ae8dcc32a8bad589002", 0x1000}, {&(0x7f0000002ac0)="21199ac63599ac9943fc3be534dfb5cbd86619dd26f8b0b0456e1a3aa4add42d15e324cc44c4be1ab9afb8a1e3f8b60fe71f6ad199a996f3cfddc1b88344c481487cbee9b0fcc132e6a334ec9a362c4ddaa316a7", 0x54}, {&(0x7f0000002b40)="d3e567931fc25d35ecbbc1f5d5a68f535c5862ee0c20a82beee16397661c8316af62592ab65b5c6b74a06318b7d57cf5ff50de13ad2db6a22ef1ff79518d0ee7130d8b5cec469cc8385583f192a95303c239dda52340b44753db581511f32af12df8f870b2b81b7a8961b0d26f54b2315943ac360ca42f9ebdf8ff5493f9db7e3c543ca9d751a7247f25c71c4c123deb326fea5540a17663b6f6da4c77b960e7cc8f62615da7bc867003b113278b98100f702e806ef5606f9c07459121df9c0746", 0xc1}, {&(0x7f0000002c40)="5229687a7f61ff3cd9e9baaa7c03ad981eb95dd369074e421089abce61f61786ee0a9811", 0x24}, {&(0x7f0000002c80)="23653283140abedf11c3df6a2e7701fe26150bf5b745f71caef632d10a3519d145c6b91dba3e7431487c9f309a4977605f44faad996853fedf51e72604afd14cc7e1f7fd06d5cf0506d41efcd392401349cd651be57cff", 0x57}, {&(0x7f0000002d00)="f51582326e2e864032b5647b4145bb4aa78d1678df4f43b5cd85f19e867b625ee244f816b495ac05c789aba3525a597f2a097b22164f6bdeb753d0e673fb4811f214e426532a2170f135161a32fb2830060108421b68cab01221ef9e9e93b892a80b40602bf9fe968cd87597b036791273c15ae5d354b3aad319c42bee36eeba7309ebb21e3262ed01f0ba9b4058d38cbe25eecb77c5bdc1bb2bfa7e7c9598e654ade84ddfb596f09dda69c7c384de6be1a079c51892f20c41f5ae9fb7176f138bf3bf50909bc45cafb78ffb413202e3d6e89ce39b33af6bbf69cdffac8e6ced", 0xe0}], 0xa, &(0x7f0000002f40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000002000000000000082fbb6000001000000", @ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r8], 0x40, 0x44800}}], 0x1, 0x40) r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x501c0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000600)={0xfffffeb3, 0x34324d59, 0x6f175ca72b88213b, @discrete={0xfffffffe, 0x8}}) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000100)=0x5) r10 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r10, 0x400c4807, &(0x7f0000000040)={0x3, 0x1, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="781002000000025f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.253644752s ago: executing program 5 (id=3967): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f00000000c0)=[{0x0, 0xfffe}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000240)) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newqdisc={0x238, 0x24, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff8, 0x3}, {0xfff2, 0x6}, {0xb, 0xfff4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x1}, @TCA_PIE_BETA={0x8, 0x5, 0x16}, @TCA_PIE_TARGET={0x8, 0x1, 0x2430bdcb}, @TCA_PIE_LIMIT={0x8, 0x2, 0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff0001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x20007f}, @TCA_STAB={0x190, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0x9, 0x4, 0x2, 0x4, 0xe, 0x3}}, {0xa, 0x2, [0x2, 0x7ab, 0x8]}}, {{0x1c, 0x1, {0xef, 0x1, 0x6, 0xfffffff8, 0x0, 0xa94, 0x8, 0x2}}, {0x8, 0x2, [0x3, 0x7]}}, {{0x1c, 0x1, {0x10, 0x4, 0x2, 0x2, 0x1, 0x4, 0xd8, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x4, 0x7, 0xefe7, 0x8, 0x3, 0x5, 0x1, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x6, 0x6, 0x0, 0xffff, 0x0, 0x6, 0x6, 0x3}}, {0xa, 0x2, [0x1ff, 0x9855, 0x81]}}, {{0x1c, 0x1, {0x7, 0x5, 0x9, 0xffffffff, 0x0, 0x6, 0x1, 0x1}}, {0x6, 0x2, [0xe]}}, {{0x1c, 0x1, {0x6, 0x2, 0x0, 0x40, 0x2, 0x4, 0x2, 0x3}}, {0xa, 0x2, [0x1ff, 0x9ac, 0x2]}}, {{0x1c, 0x1, {0xd0, 0xe3, 0x9f29, 0x6, 0x0, 0x9, 0x8, 0x8}}, {0x14, 0x2, [0x4, 0x6fd, 0xd9f, 0x5, 0xa5e8, 0x9, 0x3, 0x7]}}, {{0x1c, 0x1, {0xd, 0x4, 0x7, 0x0, 0x1, 0x10, 0x0, 0x4}}, {0xc, 0x2, [0x9, 0x0, 0x4c4, 0x0]}}, {{0x1c, 0x1, {0xff, 0xe, 0x4, 0xc74, 0x0, 0x8009, 0xe, 0x6}}, {0x10, 0x2, [0x6, 0x4, 0x4, 0x4, 0xae0, 0x1]}}]}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x3, "887f7df57bee6cc199e90d43d08b139f"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ffffffc}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0xe, 0x6}}]}, 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000200), 0x51, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x80ffffd, 0x0, 0x1, 0xa, 0x7f, 0x7}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071109d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66", 0x5, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) 5.858132511s ago: executing program 0 (id=3970): rt_sigreturn() r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c9"}]}], {0x14}}, 0x7c}}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)="e82e1337342e041af4016b9c0f45e00222083a2edcab0360d5", 0x19}, {&(0x7f0000000080)="39c371fe34e848f962c5e0bdf7673b611a3f39610fe7c118a3cb6ac3e686eeb16ae9abcb20efb38f8c1c64f0b1c70c2ae5875111bb3f57712230738df9ac95162f585a3bc5411eba2da8c91d505b2f0767241e1e169f7358b909dc11fd147d00f1850951f03663a525f4797ca5182ab64928f3c2936c990b36940258df28e6779220550d754a14f99d660dfb478beaccce14ba80eaadc76e4c7fec0bf1505a38dd3170648261db5c224ddee8eadb48a80efc452165276c636bc26c609b1fdcd13820114f18250159fdc1554bf04efe5cac25", 0xd2}, {&(0x7f0000000180)="3ee578efae29325393b32fff860113ff335bc71475e2f2ee4639484182795dfa5171c846dd629fcfc6676abfca34dd5ab769a4e83d7248f25b4f17fdc9dcb03e60aab3a32508b52cfac4203572fd4ec6288a7b952289d4b1e4161c27da0bc2e7a75ab1f3987821d1f542bb4fcbede0324c61164d27496e06034db35987da5c892d0f75bf51ddedcde845eb95157e3cb9e1c8535b91fe66d15f51a7d5be5c6546d9e2277f0db86f0f9ae6b5a68417848570067bdebfb8c1916760b71568e69631e1bf836c3b86cfab06b91277c2424bfd2e", 0xd1}, {&(0x7f00000002c0)="957921d0104afa1ab99dbcef6a6dc29ee3fe9677f657378132aafe223e61f7e093a99bd25f0bd84d75b2bd431b6db5477c0f2ca317cc8fd79ccec54303d36736dcf0c4a7c05c39061014da1106b4c2613eca94479259004ae1a0ebbd146aec1c3990ff4652accb1912484df34fa104c88fba46455dbcce89c332c4e4fec9164ba5abf71ce97da9f8140881eff3", 0x8d}], 0x4) 4.800825958s ago: executing program 4 (id=3975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xac}}, 0x0) 4.768749709s ago: executing program 5 (id=3976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0xff, 0x100000000000001, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="180100001300010026bd7000fcdbdf25737464726e67000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002400000020"], 0x118}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4.683219887s ago: executing program 4 (id=3977): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/196) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) socket$inet6(0x10, 0x80000, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x9000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffc2f) ftruncate(r0, 0x2007ffb) mmap$snddsp_status(&(0x7f000045f000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x82000000) ftruncate(r0, 0x20000000000006) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100008010bd40820529009dbb0000000109022400011b00001009040000022a3e740009058bff7f0000100109050b362f"], 0x0) 4.560815951s ago: executing program 6 (id=3978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x7, 0x5, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) unshare(0x2a020480) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0007080000f2a8da9e76aa070d39"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.174074213s ago: executing program 0 (id=3981): socket(0x40000000015, 0x5, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xab77, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r3, 0xb}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0xc58, 0x0, 0x2, r3, 0x6}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x4000005, 0x3, 0x6b, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) fcntl$getown(r4, 0x9) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x692, 0x3, 0xb49, 0x44, 0x8, 0x7fffffff, 0x1}, 0x0) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000004c0)=""/224, 0x0, 0x800, 0xffff23ae, 0x60a217eb1d69cd32}, 0x20) setsockopt$inet6_buf(r5, 0x29, 0x3d, &(0x7f0000000380)="e2300bcd6240dc2c11f710a4cabbdea71f2c9d795fb7d24af5c685103a99b63f3fe7bead2c81f78a7ba06b2a21991d30626826abd958da44e5e223af18568126038e6127297ce677ab25048b42e86053ab34d2c1fc0812458ed0879de884e8f84d8a2ec1c48b7d64e445f723ad9f3231d8e5fc548332acc135b753610cc89f32118935471a48cbe4b7f863e4c90e647b896630da61cf4182c919ca9398a9a2fe3808f5e2c61ad25017abfe935ea303ca45e39413ad2c99", 0xb7) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 3.100544404s ago: executing program 4 (id=3982): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0xb, r1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @random="a538f3ff4632", @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4}, @generic={0xa, 0x2}]}}, {0x17, 0x7c, 0x0, @multicast1}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x2e0e, 0x0, 0x0, 0xffffffffffffffa2) mkdirat(r3, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xffffff7f}]}}]}, 0x38}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3a69a81a2de3cec7, 0x12, r8, 0x58fd5000) r9 = syz_open_dev$media(&(0x7f00000000c0), 0x3, 0x802) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000f00)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r11 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000751000/0x2000)=nil}) dup(r11) 1.681655652s ago: executing program 4 (id=3984): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0x12c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a"], 0x1c}}, 0x0) 1.483681437s ago: executing program 6 (id=3985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xb4}, 0x1, 0xf5}, 0x0) 1.478479945s ago: executing program 5 (id=3986): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="2e0000001c0073fc0000000400fd000007000003", @ANYRES32=r1, @ANYBLOB="020047040a0002"], 0x30}}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x82, &(0x7f00000006c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010121}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@remote}, {@private=0xa010102}, {@dev}, {@private}]}]}}}}}}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast2}, {0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x8}}}, 0xc0}}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0x2, 0x0, 0x3, {0x100, 0xffffffff}}) rt_sigaction(0x10, &(0x7f0000000180)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f10027460f38e741c44240f29a3b470000ddb5c43b3be5c436fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0, {[0x9]}}, 0x0, 0x8, &(0x7f0000000100)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x3, 0xeeee8000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfc0a8b9145e9a34b}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x9, 0x6, 0xa836c4328f5dbec5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 1.392004954s ago: executing program 6 (id=3987): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601801e13"], 0x26c0}}, 0x4010) 1.261036503s ago: executing program 5 (id=3988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt(r1, 0x100, 0x3, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000000)=""/57, 0x39}) fcntl$notify(0xffffffffffffffff, 0x402, 0x25) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) read$char_usb(r3, &(0x7f00000003c0)=""/204, 0xcc) r4 = socket$igmp6(0xa, 0x3, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}}}, 0x1c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCEXCL(r7, 0x540c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="0111bf"]}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000100)=0x9, 0x4) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 1.222007847s ago: executing program 2 (id=3989): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) 1.200948198s ago: executing program 6 (id=3990): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb29}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bfcf00000000000055090100000000009500000000000000bf91000000000000b70200f7cd0000008500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 823.883399ms ago: executing program 4 (id=3991): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000002, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) read$FUSE(r1, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r3, &(0x7f0000001980)=[{{&(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = dup3(0xffffffffffffffff, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, 0xffffffffffffffff, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r0, 0x400, 0x21, r4, 0x0) 682.964928ms ago: executing program 2 (id=3992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="840200001b000100000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000e9100000000000000000600000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000a00100001"], 0x284}}, 0x0) 610.776604ms ago: executing program 2 (id=3993): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$video4linux(&(0x7f0000000380), 0x2, 0x20) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x10, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000f7810000000000000400", @ANYRES32=r2, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 523.379889ms ago: executing program 2 (id=3994): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x8000, 0x7}) sendmsg$AUDIT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x2, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e408000100010000000800010001000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1f, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x8, 0x0, r1, &(0x7f0000000000)="98", 0x1, 0x3e7ffffffc, 0x0, 0x10}]) (async) io_pgetevents(r2, 0xd, 0x2, &(0x7f0000000300)=[{}, {}], &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) r4 = getpgrp(0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async) rt_sigqueueinfo(r4, 0x33, &(0x7f0000000100)={0x3b, 0xd767ed, 0x1000}) 432.821978ms ago: executing program 5 (id=3995): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x80081) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000180)={0x1, 0x9, 0x4, 0x1, 0x5}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 432.025599ms ago: executing program 2 (id=3996): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000300)=""/205, 0xcd) r2 = accept(r0, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x1) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0xfff}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x60}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) accept4$alg(r0, 0x0, 0x0, 0x0) (async) read$alg(r1, &(0x7f0000000300)=""/205, 0xcd) (async) accept(r0, 0x0, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x1) (async) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0xfff}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x60}], 0x1, 0x0) (async) recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) (async) 245.86245ms ago: executing program 6 (id=3997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 238.85327ms ago: executing program 2 (id=3998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x3ff, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000263d5140200e01012166000000010902120001000000000904"], 0x0) 104.90428ms ago: executing program 6 (id=3999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="400006000d34decbb42ce65d7ff39098914f1ea447090de82af34c83b496e2a6b7525d9ebe5c01471a80ea46490961cf5da225929c72aee2b4d65b25b43296c585d056ce913377b1f5cc9e3b32292ccbb9cde135c68d84d4f6fc4a342ac6a10e0a9d9955354301827d42f3d079fa9aaec53eca97a9dbf622886ce6daa4b4a18185f38aa6653c02cf8838b3c93476967d5a6b32e82ade5213e86b033419b22258fb11be3d16c2f9a91493bbc1a36426ce", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r7, 0x0, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000611288000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x2a020400) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r9, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8001, &(0x7f00000049c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mkdirat(r7, &(0x7f0000001dc0)='./file0\x00', 0x84) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 62.046876ms ago: executing program 4 (id=4000): bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x41, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x8002) chdir(0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x515001, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r4, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x10, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xbc}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000980)=ANY=[], 0x24c) listen(0xffffffffffffffff, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x80, 0x1, 0x3, 0x1}, 0xfffffe8f) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601801e13"], 0x26c0}}, 0x4010) 0s ago: executing program 0 (id=4001): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0x12c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): ed with error -5 [ 919.762895][ T5886] sierra 2-1:0.153: Sierra USB modem converter detected [ 919.814779][ T5886] usb 2-1: USB disconnect, device number 77 [ 919.833195][ T5886] sierra 2-1:0.153: device disconnected [ 920.201082][T19641] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 920.207647][T19641] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 920.228778][T19641] vhci_hcd vhci_hcd.0: Device attached [ 920.240709][T19641] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 920.247232][T19641] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 920.296871][T19646] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 920.303509][T19646] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 920.313932][T19641] vhci_hcd vhci_hcd.0: Device attached [ 920.321346][T19646] vhci_hcd vhci_hcd.0: Device attached [ 920.354257][T19641] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 920.360824][T19641] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 920.374829][T19641] vhci_hcd vhci_hcd.0: Device attached [ 920.386899][T19641] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 920.393537][T19641] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 920.402016][T19641] vhci_hcd vhci_hcd.0: Device attached [ 920.425165][ T5947] vhci_hcd: vhci_device speed not set [ 920.484405][ T5947] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 920.622378][T13546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.694126][ T5886] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 920.884047][ T5886] usb 6-1: device descriptor read/64, error -71 [ 920.985008][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.154016][ T5886] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 921.305247][ T5886] usb 6-1: device descriptor read/64, error -71 [ 921.328093][T13057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.341042][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.434336][ T5886] usb usb6-port1: attempt power cycle [ 921.465712][T19651] vhci_hcd: connection closed [ 921.465961][ T7905] vhci_hcd: stop threads [ 921.481166][T19649] vhci_hcd: connection closed [ 921.482319][T19647] vhci_hcd: connection closed [ 921.487226][T19644] vhci_hcd: connection closed [ 921.492067][T19642] vhci_hcd: connection reset by peer [ 921.516006][ T7905] vhci_hcd: release socket [ 921.528992][ T7905] vhci_hcd: disconnect device [ 921.544053][ T7905] vhci_hcd: stop threads [ 921.557330][ T7905] vhci_hcd: release socket [ 921.573106][ T7905] vhci_hcd: disconnect device [ 921.589998][ T7905] vhci_hcd: stop threads [ 921.606816][ T7905] vhci_hcd: release socket [ 921.619162][ T7905] vhci_hcd: disconnect device [ 921.636474][T13546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.644984][ T7905] vhci_hcd: stop threads [ 921.651623][ T7905] vhci_hcd: release socket [ 921.669561][ T7905] vhci_hcd: disconnect device [ 921.690271][ T7905] vhci_hcd: stop threads [ 921.711030][ T7905] vhci_hcd: release socket [ 921.725760][ T7905] vhci_hcd: disconnect device [ 921.784237][ T5886] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 921.837453][ T5886] usb 6-1: device descriptor read/8, error -71 [ 921.868823][T19669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3571'. [ 921.907703][T15581] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 921.969042][T15581] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 922.001802][T15581] bond0: active interface up! [ 922.035478][T13546] usb 1-1: USB disconnect, device number 87 [ 922.084024][ T5886] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 922.143203][ T5886] usb 6-1: device descriptor read/8, error -71 [ 922.232047][T19674] fuse: Bad value for 'fd' [ 922.245122][T19674] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3573'. [ 922.269583][T19676] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3573'. [ 922.284506][ T5886] usb usb6-port1: unable to enumerate USB device [ 922.304307][T13057] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 922.470657][T13057] usb 5-1: Using ep0 maxpacket: 16 [ 922.496130][T13057] usb 5-1: unable to get BOS descriptor or descriptor too short [ 922.515103][T13057] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 922.533551][T13057] usb 5-1: can't read configurations, error -71 [ 922.644052][ T5886] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 922.664103][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.794023][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 923.011782][T19699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3579'. [ 923.585984][T19709] x_tables: duplicate underflow at hook 1 [ 923.706779][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.037147][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.206180][T19716] FAULT_INJECTION: forcing a failure. [ 924.206180][T19716] name failslab, interval 1, probability 0, space 0, times 0 [ 924.219270][T19716] CPU: 0 UID: 0 PID: 19716 Comm: syz.4.3584 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 924.219294][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 924.219305][T19716] Call Trace: [ 924.219313][T19716] [ 924.219322][T19716] dump_stack_lvl+0x189/0x250 [ 924.219354][T19716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 924.219377][T19716] ? __pfx__printk+0x10/0x10 [ 924.219401][T19716] ? __pfx___might_resched+0x10/0x10 [ 924.219424][T19716] should_fail_ex+0x414/0x560 [ 924.219448][T19716] should_failslab+0xa8/0x100 [ 924.219472][T19716] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 924.219495][T19716] ? __alloc_skb+0x112/0x2d0 [ 924.219520][T19716] __alloc_skb+0x112/0x2d0 [ 924.219545][T19716] netlink_sendmsg+0x5c6/0xb30 [ 924.219576][T19716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.219600][T19716] ? aa_sock_msg_perm+0x94/0x160 [ 924.219622][T19716] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 924.219641][T19716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.219662][T19716] __sock_sendmsg+0x219/0x270 [ 924.219685][T19716] ____sys_sendmsg+0x505/0x830 [ 924.219713][T19716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 924.219746][T19716] ? import_iovec+0x74/0xa0 [ 924.219771][T19716] ___sys_sendmsg+0x21f/0x2a0 [ 924.219796][T19716] ? __pfx____sys_sendmsg+0x10/0x10 [ 924.219855][T19716] ? __fget_files+0x2a/0x420 [ 924.219876][T19716] ? __fget_files+0x3a0/0x420 [ 924.219908][T19716] __x64_sys_sendmsg+0x19b/0x260 [ 924.219933][T19716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 924.219974][T19716] ? do_syscall_64+0xba/0x210 [ 924.220000][T19716] do_syscall_64+0xf6/0x210 [ 924.220028][T19716] ? clear_bhb_loop+0x60/0xb0 [ 924.220049][T19716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.220066][T19716] RIP: 0033:0x7f4570f8e969 [ 924.220083][T19716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.220101][T19716] RSP: 002b:00007f4571e02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.220121][T19716] RAX: ffffffffffffffda RBX: 00007f45711b5fa0 RCX: 00007f4570f8e969 [ 924.220134][T19716] RDX: 0000000004000044 RSI: 0000200000000440 RDI: 0000000000000005 [ 924.220147][T19716] RBP: 00007f4571e02090 R08: 0000000000000000 R09: 0000000000000000 [ 924.220158][T19716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.220169][T19716] R13: 0000000000000000 R14: 00007f45711b5fa0 R15: 00007f45712dfa28 [ 924.220199][T19716] [ 924.463070][ C0] vkms_vblank_simulate: vblank timer overrun [ 924.744354][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.214024][ T5881] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 925.384305][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 925.397662][ T5881] usb 5-1: config 0 has an invalid interface number: 206 but max is 0 [ 925.412603][ T5881] usb 5-1: config 0 has no interface number 0 [ 925.470066][ T5881] usb 5-1: New USB device found, idVendor=5a57, idProduct=0260, bcdDevice=32.59 [ 925.480129][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.513376][ T5881] usb 5-1: Product: syz [ 925.550217][ T5881] usb 5-1: Manufacturer: syz [ 925.558261][ T5881] usb 5-1: SerialNumber: syz [ 925.600668][ T5881] usb 5-1: config 0 descriptor?? [ 925.705482][ T5947] vhci_hcd: vhci_device speed not set [ 925.752241][ T5886] usb 2-1: unable to get BOS descriptor or descriptor too short [ 925.765507][ T5886] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 925.773301][ T5886] usb 2-1: can't read configurations, error -71 [ 925.795742][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.849156][T19737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3592'. [ 925.880116][T15581] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 925.921513][T15581] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 925.993885][T15581] bond0: active interface up! [ 926.048487][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 926.048505][ T30] audit: type=1326 audit(1747710465.880:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19750 comm="syz.1.3596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff58418e969 code=0x0 [ 926.101501][T19753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3585'. [ 926.131857][T19754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.135457][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3585'. [ 926.153370][T19754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.614149][ T5886] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 926.734100][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 926.771695][T19762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.780295][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 926.786364][T19762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.796709][ T5886] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 926.805626][ T5886] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 926.816470][ T5886] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 926.828089][ T5886] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 926.838736][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.843183][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.846886][ T5886] usb 2-1: Product: syz [ 926.859310][ T5886] usb 2-1: Manufacturer: syz [ 926.865113][ T5886] usb 2-1: SerialNumber: syz [ 926.905089][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 926.912437][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 926.922422][ T9] usb 6-1: config 248 has an invalid interface number: 51 but max is 0 [ 926.931069][ T9] usb 6-1: config 248 has no interface number 0 [ 926.941157][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0 [ 926.950598][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.958822][ T9] usb 6-1: Product: syz [ 926.963191][ T9] usb 6-1: Manufacturer: syz [ 926.969184][ T9] usb 6-1: SerialNumber: syz [ 927.015638][T15041] usb usb38-port1: attempt power cycle [ 927.069997][T13057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.188098][T19758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.198988][T19758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.575640][T15041] usb usb38-port1: unable to enumerate USB device [ 927.706060][T19772] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3601'. [ 927.872538][T15041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.188049][ T5881] usb 5-1: USB disconnect, device number 74 [ 928.507192][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 928.833140][ T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:248.51/input/input73 [ 928.860131][ T5187] bcm5974 6-1:248.51: could not read from device [ 928.876974][ T9] usb 6-1: USB disconnect, device number 16 [ 928.904538][T15041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.993918][ T5881] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 929.073604][ T5886] usb 2-1: 0:2 : does not exist [ 929.141597][ T5886] usb 2-1: USB disconnect, device number 79 [ 929.161210][T19795] vlan3: entered promiscuous mode [ 929.166416][ T5881] usb 5-1: device descriptor read/64, error -71 [ 929.318597][T19797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.339928][T19797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.424288][ T5881] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 929.524801][ T30] audit: type=1326 audit(1747710469.360:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19800 comm="syz.1.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58418e969 code=0x7ffc0000 [ 929.594584][ T5881] usb 5-1: device descriptor read/64, error -71 [ 929.599717][ T30] audit: type=1326 audit(1747710469.360:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19800 comm="syz.1.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58418e969 code=0x7ffc0000 [ 929.643051][ T30] audit: type=1326 audit(1747710469.390:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19800 comm="syz.1.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff58418d2d0 code=0x7ffc0000 [ 929.688265][ T30] audit: type=1326 audit(1747710469.390:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19800 comm="syz.1.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff58418e56b code=0x7ffc0000 [ 929.706932][T19797] x_tables: duplicate underflow at hook 1 [ 929.717035][ T5881] usb usb5-port1: attempt power cycle [ 929.717947][ T30] audit: type=1326 audit(1747710469.390:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19800 comm="syz.1.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff58418e56b code=0x7ffc0000 [ 929.751785][ T30] audit: type=1326 audit(1747710469.390:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19800 comm="syz.1.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff58418e56b code=0x7ffc0000 [ 929.779298][ T30] audit: type=1326 audit(1747710469.390:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19800 comm="syz.1.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff58418e56b code=0x7ffc0000 [ 929.802592][T19806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3612'. [ 929.811680][ T5886] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 929.825061][ T30] audit: type=1326 audit(1747710469.510:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19800 comm="syz.1.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff58418e56b code=0x7ffc0000 [ 929.848193][ T30] audit: type=1326 audit(1747710469.580:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19800 comm="syz.1.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff58418e56b code=0x7ffc0000 [ 929.948264][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.995182][ T5886] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 930.016557][ T5886] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.031561][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 930.040128][ T5886] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 930.057132][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.074197][ T5881] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 930.083542][ T5886] usb 2-1: config 0 descriptor?? [ 930.104241][T13057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.114735][ T5881] usb 5-1: device descriptor read/8, error -71 [ 930.134313][T19796] [U]  [ 930.311783][ T5886] usbhid 2-1:0.0: can't add hid device: -71 [ 930.317984][ T5886] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 930.329860][ T5886] usb 2-1: USB disconnect, device number 80 [ 930.345019][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 930.374141][ T5881] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 930.394670][ T5881] usb 5-1: device descriptor read/8, error -71 [ 930.494256][ T5947] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 930.504460][ T5881] usb usb5-port1: unable to enumerate USB device [ 930.513904][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 930.521015][ T9] usb 6-1: config 0 has an invalid interface number: 206 but max is 0 [ 930.529350][ T9] usb 6-1: config 0 has no interface number 0 [ 930.538984][ T9] usb 6-1: New USB device found, idVendor=5a57, idProduct=0260, bcdDevice=32.59 [ 930.548149][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.557702][ T9] usb 6-1: Product: syz [ 930.561868][ T9] usb 6-1: Manufacturer: syz [ 930.566691][ T9] usb 6-1: SerialNumber: syz [ 930.573329][ T9] usb 6-1: config 0 descriptor?? [ 930.646286][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 930.652971][ T5947] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 930.663617][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.676053][ T5947] usb 1-1: config 0 descriptor?? [ 930.683571][ T5947] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 930.692673][ T5947] usb 1-1: Detected FT4232H [ 930.914652][ T5947] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 930.930679][T19819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3617'. [ 930.940052][T13057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.984548][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.246167][T13057] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 931.313797][T19834] vlan2: entered promiscuous mode [ 931.456983][T13057] usb 2-1: Using ep0 maxpacket: 8 [ 931.485845][T13057] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.544714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.561398][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.567752][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.604192][T19838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.614336][T13057] usb 2-1: config 1 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 931.629640][T19838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.717474][T13057] usb 2-1: config 1 interface 0 has no altsetting 0 [ 931.738274][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3623'. [ 931.796693][T13057] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 931.867652][T13057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.940705][T13057] usb 2-1: Product: syz [ 931.960483][T13057] usb 2-1: Manufacturer: syz [ 931.989978][T13057] usb 2-1: SerialNumber: syz [ 932.024446][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.360260][T19846] trusted_key: encrypted_key: insufficient parameters specified [ 932.538757][T19847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.552891][T19847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.968962][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 932.969011][ T30] audit: type=1326 audit(1747710472.800:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4570f2ab39 code=0x7ffc0000 [ 933.032953][ T30] audit: type=1326 audit(1747710472.800:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4570f2ab39 code=0x7ffc0000 [ 933.060246][ T30] audit: type=1326 audit(1747710472.800:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4570f2ab39 code=0x7ffc0000 [ 933.087969][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.144294][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.259355][T13057] usb 2-1: bad CDC descriptors [ 933.273374][T13057] usb 2-1: USB disconnect, device number 81 [ 933.380813][ T30] audit: type=1326 audit(1747710472.800:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4570f2ab39 code=0x7ffc0000 [ 933.403208][ C0] vkms_vblank_simulate: vblank timer overrun [ 933.662053][ T30] audit: type=1326 audit(1747710472.800:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4570f2ab39 code=0x7ffc0000 [ 933.684415][ C0] vkms_vblank_simulate: vblank timer overrun [ 933.776445][ T30] audit: type=1326 audit(1747710472.800:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570f8e969 code=0x7ffc0000 [ 933.857584][ T30] audit: type=1326 audit(1747710472.800:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4570f2ab39 code=0x7ffc0000 [ 933.931779][ T30] audit: type=1326 audit(1747710472.800:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570f8e969 code=0x7ffc0000 [ 933.993716][ T30] audit: type=1326 audit(1747710472.800:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4570f2ab39 code=0x7ffc0000 [ 934.059088][ T30] audit: type=1326 audit(1747710472.800:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19849 comm="syz.4.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4570f2ab39 code=0x7ffc0000 [ 934.104687][T15041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.249827][ T5891] usb 6-1: USB disconnect, device number 17 [ 934.574586][ T5947] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 934.582550][ T5947] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 934.593492][ T5947] usb 1-1: USB disconnect, device number 88 [ 934.603365][ T5947] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 934.640105][ T5947] ftdi_sio 1-1:0.0: device disconnected [ 934.753971][T15041] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 934.784098][T13057] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 934.946011][T13057] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.953977][T15041] usb 2-1: Using ep0 maxpacket: 16 [ 934.963165][T15041] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.974455][T13057] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 934.984108][T15041] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.044360][T15041] usb 2-1: config 0 interface 0 has no altsetting 0 [ 935.051073][T15041] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 935.060599][T15041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.071997][T13057] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 935.080025][T15041] usb 2-1: config 0 descriptor?? [ 935.105871][T13057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.125585][T13057] usb 5-1: Product: syz [ 935.129762][T13057] usb 5-1: Manufacturer: syz [ 935.144428][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.172268][T13057] usb 5-1: SerialNumber: syz [ 935.196327][T13057] usb 5-1: config 0 descriptor?? [ 935.476286][T19877] tipc: Started in network mode [ 935.498568][T19877] tipc: Node identity ac1414aa, cluster identity 4711 [ 935.499081][T19862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.527573][T19877] tipc: Enabled bearer , priority 10 [ 935.586381][T19877] tipc: Enabled bearer , priority 0 [ 935.590126][T15041] mcp2200 0003:04D8:00DF.002E: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 935.614747][T19862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.647720][T13057] usb 5-1: USB disconnect, device number 79 [ 935.866526][T15041] usb 2-1: USB disconnect, device number 82 [ 936.185233][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.193370][T15041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.331710][T19886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3636'. [ 936.381679][T19886] FAULT_INJECTION: forcing a failure. [ 936.381679][T19886] name failslab, interval 1, probability 0, space 0, times 0 [ 936.425795][T19886] CPU: 1 UID: 0 PID: 19886 Comm: syz.0.3636 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 936.425817][T19886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 936.425827][T19886] Call Trace: [ 936.425835][T19886] [ 936.425843][T19886] dump_stack_lvl+0x189/0x250 [ 936.425875][T19886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 936.425897][T19886] ? __pfx__printk+0x10/0x10 [ 936.425915][T19886] ? __pfx___might_resched+0x10/0x10 [ 936.425933][T19886] ? fs_reclaim_acquire+0x7d/0x100 [ 936.425962][T19886] should_fail_ex+0x414/0x560 [ 936.425987][T19886] should_failslab+0xa8/0x100 [ 936.426010][T19886] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 936.426032][T19886] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 936.426049][T19886] ? __alloc_skb+0x112/0x2d0 [ 936.426075][T19886] __alloc_skb+0x112/0x2d0 [ 936.426100][T19886] rtmsg_ifinfo_build_skb+0x84/0x260 [ 936.426127][T19886] rtmsg_ifinfo+0x8c/0x1a0 [ 936.426152][T19886] netif_state_change+0x29e/0x3a0 [ 936.426175][T19886] ? __pfx_netif_state_change+0x10/0x10 [ 936.426201][T19886] ? netif_change_flags+0xe8/0x1a0 [ 936.426228][T19886] do_setlink+0x2eb6/0x40d0 [ 936.426253][T19886] ? lockdep_hardirqs_on+0x9c/0x150 [ 936.426285][T19886] ? __pfx_do_setlink+0x10/0x10 [ 936.426305][T19886] ? __pfx_bond_opt_parse+0x10/0x10 [ 936.426336][T19886] ? bond_option_miimon_set+0x2e3/0x720 [ 936.426363][T19886] ? __bond_opt_set+0x446/0xee0 [ 936.426387][T19886] ? bond_changelink+0x223e/0x25e0 [ 936.426418][T19886] ? __pfx_bond_changelink+0x10/0x10 [ 936.426434][T19886] ? rtnl_newlink+0x8db/0x1c70 [ 936.426452][T19886] ? rcu_is_watching+0x15/0xb0 [ 936.426470][T19886] ? __pfx___mutex_lock+0x10/0x10 [ 936.426502][T19886] ? ns_capable+0x8a/0xf0 [ 936.426522][T19886] ? rtnl_link_get_net_capable+0x16a/0x350 [ 936.426546][T19886] rtnl_newlink+0x160b/0x1c70 [ 936.426564][T19886] ? kasan_save_track+0x3e/0x80 [ 936.426595][T19886] ? __pfx_rtnl_newlink+0x10/0x10 [ 936.426648][T19886] ? kasan_quarantine_put+0xdd/0x220 [ 936.426673][T19886] ? lockdep_hardirqs_on+0x9c/0x150 [ 936.426700][T19886] ? nlmon_xmit+0xb0/0x100 [ 936.426720][T19886] ? kmem_cache_free+0x192/0x3f0 [ 936.426749][T19886] ? __local_bh_enable_ip+0x12d/0x1c0 [ 936.426767][T19886] ? lockdep_hardirqs_on+0x9c/0x150 [ 936.426788][T19886] ? __local_bh_enable_ip+0x12d/0x1c0 [ 936.426805][T19886] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 936.426834][T19886] ? aa_get_newest_label+0xf7/0x5d0 [ 936.426857][T19886] ? __lock_acquire+0xaac/0xd20 [ 936.426906][T19886] ? __pfx_rtnl_newlink+0x10/0x10 [ 936.426925][T19886] rtnetlink_rcv_msg+0x7cf/0xb70 [ 936.426949][T19886] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 936.426968][T19886] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 936.426993][T19886] ? ref_tracker_free+0x63a/0x7d0 [ 936.427011][T19886] ? __copy_skb_header+0xa7/0x550 [ 936.427043][T19886] netlink_rcv_skb+0x21c/0x490 [ 936.427065][T19886] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 936.427086][T19886] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 936.427127][T19886] ? netlink_deliver_tap+0x2e/0x1b0 [ 936.427146][T19886] ? netlink_deliver_tap+0x2e/0x1b0 [ 936.427172][T19886] netlink_unicast+0x758/0x8d0 [ 936.427203][T19886] netlink_sendmsg+0x805/0xb30 [ 936.427233][T19886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.427257][T19886] ? aa_sock_msg_perm+0x94/0x160 [ 936.427277][T19886] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 936.427297][T19886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.427318][T19886] __sock_sendmsg+0x219/0x270 [ 936.427340][T19886] ____sys_sendmsg+0x505/0x830 [ 936.427367][T19886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 936.427398][T19886] ? import_iovec+0x74/0xa0 [ 936.427424][T19886] ___sys_sendmsg+0x21f/0x2a0 [ 936.427448][T19886] ? __pfx____sys_sendmsg+0x10/0x10 [ 936.427509][T19886] ? __fget_files+0x2a/0x420 [ 936.427530][T19886] ? __fget_files+0x3a0/0x420 [ 936.427562][T19886] __x64_sys_sendmsg+0x19b/0x260 [ 936.427587][T19886] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 936.427627][T19886] ? do_syscall_64+0xba/0x210 [ 936.427652][T19886] do_syscall_64+0xf6/0x210 [ 936.427679][T19886] ? clear_bhb_loop+0x60/0xb0 [ 936.427701][T19886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.427718][T19886] RIP: 0033:0x7f99a8b8e969 [ 936.427734][T19886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.427749][T19886] RSP: 002b:00007f99a99a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 936.427769][T19886] RAX: ffffffffffffffda RBX: 00007f99a8db5fa0 RCX: 00007f99a8b8e969 [ 936.427782][T19886] RDX: 0000000004000044 RSI: 0000200000000440 RDI: 0000000000000005 [ 936.427794][T19886] RBP: 00007f99a99a2090 R08: 0000000000000000 R09: 0000000000000000 [ 936.427805][T19886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.427816][T19886] R13: 0000000000000000 R14: 00007f99a8db5fa0 R15: 00007f99a8edfa28 [ 936.427846][T19886] [ 936.955280][ T5886] tipc: Node number set to 2886997162 [ 937.118502][T19903] veth0: entered promiscuous mode [ 937.162208][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3643'. [ 937.203918][ T5886] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 937.226608][T15041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.334083][ T5886] usb 2-1: device descriptor read/64, error -71 [ 937.413933][T13057] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 937.575675][ T5886] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 937.598992][T13057] usb 5-1: config 0 has no interfaces? [ 937.637238][T13057] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 937.663735][T13057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.672812][T13057] usb 5-1: Product: syz [ 937.679587][T13057] usb 5-1: Manufacturer: syz [ 937.684422][T13057] usb 5-1: SerialNumber: syz [ 937.704930][T13057] usb 5-1: config 0 descriptor?? [ 937.732807][T19913] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3645'. [ 937.753427][T19912] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3644'. [ 937.754341][ T5886] usb 2-1: device descriptor read/64, error -71 [ 937.820175][T19915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3646'. [ 937.888736][ T5886] usb usb2-port1: attempt power cycle [ 938.096516][T19913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.118262][T19913] bond_slave_0: left promiscuous mode [ 938.135894][T19913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.158131][T19913] bond_slave_1: left promiscuous mode [ 938.177676][T19913] bond0 (unregistering): Released all slaves [ 938.254436][ T5886] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 938.278194][T15041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.350188][ T5886] usb 2-1: device descriptor read/8, error -71 [ 938.797343][ T5886] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 938.851641][T19926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.911545][T19926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.984866][ T5886] usb 2-1: device descriptor read/8, error -71 [ 939.104495][ T5886] usb usb2-port1: unable to enumerate USB device [ 939.226827][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.237393][T19940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3653'. [ 939.304078][T13057] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 939.304758][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.433950][T13057] usb 1-1: device descriptor read/64, error -71 [ 939.674944][T13057] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 939.807391][ T5881] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 939.830609][T13057] usb 1-1: device descriptor read/64, error -71 [ 939.949972][T13057] usb usb1-port1: attempt power cycle [ 939.970879][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 939.991892][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.013929][ T5881] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 940.023045][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.107614][ T5881] usb 2-1: config 0 descriptor?? [ 940.134064][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 940.159245][ T5947] usb 5-1: USB disconnect, device number 80 [ 940.240936][T19964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.251431][T19964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.262070][T19964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.276272][T19964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.284914][T19964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.293410][T19964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.302971][T19964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.313420][T19963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.324089][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 940.333472][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 940.346749][ T9] usb 6-1: config 9 has an invalid interface number: 5 but max is 0 [ 940.355020][T13057] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 940.363912][ T9] usb 6-1: config 9 has no interface number 0 [ 940.370125][ T9] usb 6-1: config 9 interface 5 altsetting 9 endpoint 0x9 has an invalid bInterval 181, changing to 7 [ 940.381495][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.390392][T13057] usb 1-1: device descriptor read/8, error -71 [ 940.418867][ T9] usb 6-1: config 9 interface 5 has no altsetting 0 [ 940.442910][ T9] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 940.453279][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.465416][ T9] usb 6-1: Product: syz [ 940.469691][ T9] usb 6-1: Manufacturer: syz [ 940.476927][ T9] usb 6-1: SerialNumber: syz [ 940.504217][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.576686][ T5881] isku 0003:1E7D:319C.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 940.656732][ T5881] isku 0003:1E7D:319C.002F: couldn't init struct isku_device [ 940.658768][T13057] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 940.705862][ T5881] isku 0003:1E7D:319C.002F: couldn't install keyboard [ 940.716295][T13057] usb 1-1: device descriptor read/8, error -71 [ 940.743728][ T9] usb 6-1: USB disconnect, device number 18 [ 940.753983][ T5881] isku 0003:1E7D:319C.002F: probe with driver isku failed with error -32 [ 940.854418][T13057] usb usb1-port1: unable to enumerate USB device [ 941.493152][T19976] tc_dump_action: action bad kind [ 941.519147][ T5891] usb 2-1: USB disconnect, device number 87 [ 941.911724][T19974] netlink: 'syz.5.3664': attribute type 10 has an invalid length. [ 941.932817][T19974] veth1_macvtap: left promiscuous mode [ 941.951062][T19974] team0: Device veth1_macvtap failed to register rx_handler [ 941.958885][ T5891] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 942.138598][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 942.161893][ T5891] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 942.180665][ T5891] usb 2-1: config 0 has no interface number 0 [ 942.230628][ T5891] usb 2-1: config 0 interface 184 has no altsetting 0 [ 942.253346][ T5891] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 942.294119][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.312439][ T5891] usb 2-1: Product: syz [ 942.332774][ T5891] usb 2-1: Manufacturer: syz [ 942.350308][ T47] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 942.358070][ T5891] usb 2-1: SerialNumber: syz [ 942.389442][ T5891] usb 2-1: config 0 descriptor?? [ 942.407584][ T5891] smsc75xx v1.0.0 [ 942.534093][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 942.562972][ T47] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 942.582196][ T47] usb 6-1: config 8 has no interface number 0 [ 942.633416][ T47] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 942.674262][ T47] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 942.714201][ T47] usb 6-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 942.744168][ T47] usb 6-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 942.774282][ T47] usb 6-1: config 8 interface 206 has no altsetting 0 [ 942.794477][ T47] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 942.814229][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.822335][ T47] usb 6-1: Product: syz [ 942.852855][ T47] usb 6-1: Manufacturer: syz [ 942.862312][ T47] usb 6-1: SerialNumber: syz [ 943.038180][ T5891] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 943.093479][ T5891] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 943.434129][ T5884] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 943.589511][ T47] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 943.611587][ T47] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 943.621368][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 943.633533][ T5884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 943.652341][ T47] usb 6-1: USB disconnect, device number 19 [ 943.660610][ T5884] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 943.678749][ T5884] usb 1-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 943.688621][ T47] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 943.699578][ T5884] usb 1-1: Product: syz [ 943.703790][ T5884] usb 1-1: Manufacturer: syz [ 943.712531][ T47] garmin_gps 6-1:8.206: device disconnected [ 943.718933][ T5884] usb 1-1: SerialNumber: syz [ 943.740129][ T5884] usb 1-1: config 0 descriptor?? [ 943.765371][ T5884] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 943.794149][T13546] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 943.848902][T20018] vti0: entered promiscuous mode [ 943.855790][T20018] vti0: entered allmulticast mode [ 943.956024][T13546] usb 5-1: unable to get BOS descriptor or descriptor too short [ 943.974491][T13546] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 944.009537][T13546] usb 5-1: config 1 has no interface number 1 [ 944.017330][T13546] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 944.048325][T13546] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.074009][T13546] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.093614][T13546] usb 5-1: Product: syz [ 944.100141][T20024] loop2: detected capacity change from 0 to 7 [ 944.115506][T20024] loop2: p1 [ 944.122489][T20024] loop2: partition table partially beyond EOD, truncated [ 944.130216][T13546] usb 5-1: Manufacturer: syz [ 944.135251][T13546] usb 5-1: SerialNumber: syz [ 944.150686][T20024] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 944.243531][T19979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.273000][ T6418] udevd[6418]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 944.285347][T19979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.342029][T20029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 944.380764][ T5884] gspca_zc3xx: reg_w_i err -71 [ 944.447757][ T5891] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 944.477250][ T5891] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 944.489397][ T5891] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 944.508085][ T5891] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 944.526427][ T5891] usb 2-1: USB disconnect, device number 88 [ 944.572612][T20011] netlink: 'syz.0.3677': attribute type 32 has an invalid length. [ 944.581885][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 944.593740][T20011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3677'. [ 944.747147][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 944.761818][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 944.803032][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.812196][T13546] usb 5-1: found format II with max.bitrate = 26774, frame size=2 [ 944.833342][ T9] usb 6-1: config 0 descriptor?? [ 944.841038][T13546] usb 5-1: found format II with max.bitrate = 26774, frame size=2 [ 944.851710][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 944.861019][T13546] usb 5-1: failed to enable PITCH for EP 0x82 [ 944.949435][T13546] usb 5-1: USB disconnect, device number 81 [ 944.994595][ T5884] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 945.020607][ T5884] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 945.036285][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 945.078980][T20028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.098015][ T5884] usb 1-1: USB disconnect, device number 93 [ 945.120685][T20028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.327914][ T9] gspca_sonixj: reg_r err -32 [ 945.332766][ T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 945.384844][ T5884] net_ratelimit: 5 callbacks suppressed [ 945.384862][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.444561][ T5891] usb 6-1: USB disconnect, device number 20 [ 945.550997][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.649524][T20047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3688'. [ 945.708398][ T13] bond0: (slave bond_slave_0): interface is now down [ 945.737671][ T13] bond0: (slave bond_slave_1): interface is now down [ 945.747277][ T13] bond0: now running without any active interface! [ 945.869475][T20062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3692'. [ 945.908400][T20063] loop2: detected capacity change from 0 to 7 [ 945.918633][ T13] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 945.930944][T20063] loop2: p1 [ 945.939699][ T13] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 945.941579][T20067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3693'. [ 945.961143][ T13] bond0: active interface up! [ 945.966254][T20063] loop2: partition table partially beyond EOD, truncated [ 945.978977][T20063] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 946.090291][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 946.254096][ T5947] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 946.314027][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 946.429972][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 946.441741][ T5947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 946.455134][ T5947] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 946.464381][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.479211][ T5947] usb 5-1: config 0 descriptor?? [ 946.484376][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 946.493431][T20070] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 946.501250][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 946.519565][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 946.536698][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 946.546197][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.554346][ T9] usb 6-1: Product: syz [ 946.558562][ T9] usb 6-1: Manufacturer: syz [ 946.563162][ T9] usb 6-1: SerialNumber: syz [ 946.571096][ T9] usb 6-1: config 0 descriptor?? [ 946.594301][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.708741][T20077] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3698'. [ 946.727929][ T5947] cherry 0003:046A:0023.0030: collection stack underflow [ 946.751506][ T5947] cherry 0003:046A:0023.0030: item 0 2 0 12 parsing failed [ 946.777193][ T5947] cherry 0003:046A:0023.0030: probe with driver cherry failed with error -22 [ 946.853216][T20082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3700'. [ 946.865151][T20082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.875539][T20082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.923467][T13057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.939907][ T5891] usb 5-1: USB disconnect, device number 82 [ 947.042723][T20072] kvm: pic: non byte write [ 947.056070][ T9] usb 6-1: USB disconnect, device number 21 [ 947.124034][ T5884] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 947.284003][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 947.299341][T20092] netlink: set zone limit has 8 unknown bytes [ 947.320164][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.354089][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.374346][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 947.433949][ T5884] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 947.518593][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.589624][ T5884] usb 1-1: config 0 descriptor?? [ 947.634323][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.122424][T20107] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3706'. [ 948.412670][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3708'. [ 948.664162][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.749686][T20127] Cannot find del_set index 4 as target [ 948.768490][T20127] netlink: 'syz.4.3712': attribute type 39 has an invalid length. [ 949.038008][T20133] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 949.127367][T20135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3717'. [ 949.328071][T20144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3719'. [ 949.632696][T20160] netlink: 'syz.1.3724': attribute type 27 has an invalid length. [ 949.674036][ T5891] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 949.862991][T20160] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.870484][T20160] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.914047][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 949.922512][ T5891] usb 5-1: config 0 has an invalid interface number: 206 but max is 0 [ 949.955417][ T5891] usb 5-1: config 0 has no interface number 0 [ 950.009815][ T5891] usb 5-1: New USB device found, idVendor=5a57, idProduct=0260, bcdDevice=32.59 [ 950.047844][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.058064][ T5891] usb 5-1: Product: syz [ 950.062369][ T5891] usb 5-1: Manufacturer: syz [ 950.067568][ T5891] usb 5-1: SerialNumber: syz [ 950.085031][ T5891] usb 5-1: config 0 descriptor?? [ 950.103497][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.235781][T20160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.259771][T20160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.481043][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.492041][T20160] vlan0: left allmulticast mode [ 950.504259][T12628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.514100][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3722'. [ 950.543430][T20160] veth0_vlan: left allmulticast mode [ 950.651022][T20160] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.674070][T20160] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.709346][T20160] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.729004][T20160] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.813226][T20160] vlan2: left allmulticast mode [ 950.829988][T20160] bond0: left allmulticast mode [ 950.839016][T20160] bond_slave_0: left allmulticast mode [ 950.858819][T20160] bond_slave_1: left allmulticast mode [ 950.880804][ T5884] usbhid 1-1:0.0: can't add hid device: -71 [ 950.892465][ T5884] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 950.950727][ T5884] usb 1-1: USB disconnect, device number 94 [ 951.126054][T20172] loop2: detected capacity change from 0 to 7 [ 951.147000][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.155590][T20172] loop2: p1 [ 951.160859][T20172] loop2: partition table partially beyond EOD, truncated [ 951.168466][T20172] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 951.319701][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 951.474146][ T5884] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 951.532394][T20181] fuse: Bad value for 'fd' [ 951.655934][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 951.662929][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 951.685407][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.705566][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 951.732802][ T5884] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 951.751519][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.775287][ T5884] usb 1-1: config 0 descriptor?? [ 951.951024][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 951.965226][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 951.974155][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 951.986082][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 951.998381][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 952.024820][T12628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.184449][T15030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.226446][ T5884] usbhid 1-1:0.0: can't add hid device: -71 [ 952.232437][ T5884] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 952.322402][ T5884] usb 1-1: USB disconnect, device number 95 [ 952.480985][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 952.583657][T20186] chnl_net:caif_netlink_parms(): no params data found [ 952.610498][ T5884] usb 5-1: USB disconnect, device number 83 [ 952.833233][T20186] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.841038][T20186] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.850008][T20186] bridge_slave_0: entered allmulticast mode [ 952.858196][T20186] bridge_slave_0: entered promiscuous mode [ 952.869292][T20186] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.878106][T20186] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.918574][T20186] bridge_slave_1: entered allmulticast mode [ 952.986732][T20186] bridge_slave_1: entered promiscuous mode [ 953.053749][T20207] syzkaller1: entered promiscuous mode [ 953.063817][T20207] syzkaller1: entered allmulticast mode [ 953.172543][T20186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.226400][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.399584][T20186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.492144][T20186] team0: Port device team_slave_0 added [ 953.511725][T20186] team0: Port device team_slave_1 added [ 953.523113][T20215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3739'. [ 953.544263][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.631415][T15581] bond0: (slave bond_slave_0): interface is now down [ 953.649874][T20186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.670207][T15581] bond0: (slave bond_slave_1): interface is now down [ 953.677085][T20186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.774891][ T7905] bond0: (slave bond_slave_0): interface is now down [ 953.793414][T20186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.852822][T20186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.853914][ T7905] bond0: (slave bond_slave_1): interface is now down [ 953.871224][T20186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.930562][T20186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.962948][ T3468] bond0: (slave bond_slave_0): interface is now down [ 954.000213][ T3468] bond0: (slave bond_slave_1): interface is now down [ 954.024411][ T5837] Bluetooth: hci3: command tx timeout [ 954.071468][T20226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3742'. [ 954.078690][T20186] hsr_slave_0: entered promiscuous mode [ 954.087027][ T3468] bond0: (slave bond_slave_0): interface is now down [ 954.101132][ T3468] bond0: (slave bond_slave_1): interface is now down [ 954.110658][T20186] hsr_slave_1: entered promiscuous mode [ 954.117452][T20186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 954.125680][T20186] Cannot create hsr debugfs directory [ 954.184336][ T7904] bond0: (slave bond_slave_0): interface is now down [ 954.193721][ T7904] bond0: (slave bond_slave_1): interface is now down [ 954.264375][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.274869][ T7905] bond0: (slave bond_slave_0): interface is now down [ 954.323870][ T7905] bond0: (slave bond_slave_1): interface is now down [ 954.401569][ T7904] bond0: (slave bond_slave_0): interface is now down [ 954.421053][ T7904] bond0: (slave bond_slave_1): interface is now down [ 954.524238][ T7904] bond0: (slave bond_slave_0): interface is now down [ 954.531045][ T7904] bond0: (slave bond_slave_1): interface is now down [ 954.584191][T15038] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 954.604984][ T3468] bond0: (slave bond_slave_0): interface is now down [ 954.623090][ T3468] bond0: (slave bond_slave_1): interface is now down [ 954.687287][T20246] gtp0: entered promiscuous mode [ 954.714540][ T3468] bond0: (slave bond_slave_0): interface is now down [ 954.738441][ T3468] bond0: (slave bond_slave_1): interface is now down [ 954.795512][ T5881] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 954.836380][T15038] usb 5-1: Using ep0 maxpacket: 16 [ 954.841637][ T7904] bond0: (slave bond_slave_0): interface is now down [ 954.856483][ T7904] bond0: (slave bond_slave_1): interface is now down [ 954.869445][T15038] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.885846][T20248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.894331][T15038] usb 5-1: config 0 has no interfaces? [ 954.899836][T15038] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 954.909730][T20248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.944459][ T3468] bond0: (slave bond_slave_0): interface is now down [ 954.968913][ T3468] bond0: (slave bond_slave_1): interface is now down [ 954.982152][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 954.988226][T15038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.064991][T15038] usb 5-1: config 0 descriptor?? [ 955.159556][ T3468] bond0: (slave bond_slave_0): interface is now down [ 955.304171][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.330847][ T3468] bond0: (slave bond_slave_1): interface is now down [ 955.423966][ T13] bond0: (slave bond_slave_0): interface is now down [ 955.481931][T20265] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3755'. [ 955.522006][ T13] bond0: (slave bond_slave_1): interface is now down [ 955.534690][T20263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3754'. [ 956.114251][ T5837] Bluetooth: hci3: command tx timeout [ 956.370707][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.488458][T20186] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 956.585074][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.635434][T20186] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 956.701387][T20186] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 956.830430][T20186] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 957.047771][T20186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.123978][ T5884] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 957.145960][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.189746][T20186] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.205840][ T3468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.214997][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.228585][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.268439][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.275644][ T7905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.388774][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.393971][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 957.406306][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.439804][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.480882][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.488091][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.509725][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 957.610197][ T5884] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 957.656705][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.782996][ T5884] usb 1-1: config 0 descriptor?? [ 958.109859][T20186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.165712][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 958.194108][ T5837] Bluetooth: hci3: command tx timeout [ 958.225223][ T5881] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 958.232872][ T5881] usb 2-1: can't read configurations, error -71 [ 958.400126][T15038] usb 5-1: USB disconnect, device number 84 [ 958.443140][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.580377][T20186] veth0_vlan: entered promiscuous mode [ 958.703379][T20186] veth1_vlan: entered promiscuous mode [ 958.725903][T20286] xt_hashlimit: size too large, truncated to 1048576 [ 958.798197][T20289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3761'. [ 958.861985][T20186] veth0_macvtap: entered promiscuous mode [ 958.957643][T20186] veth1_macvtap: entered promiscuous mode [ 959.208324][T20186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.343107][T20186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.404656][T20186] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.443941][T20186] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.464440][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.554215][T20186] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.584230][T20186] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.941220][ T7906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.042385][ T7906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.148652][T15581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.229451][T15581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.238070][ T5884] usbhid 1-1:0.0: can't add hid device: -71 [ 960.247362][ T5884] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 960.294051][ T5837] Bluetooth: hci3: command tx timeout [ 960.314028][T13058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.342540][ T5884] usb 1-1: USB disconnect, device number 97 [ 960.504504][T20299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3764'. [ 960.573939][ T7906] bond0: (slave bond_slave_0): interface is now down [ 960.605130][ T7906] bond0: (slave bond_slave_1): interface is now down [ 960.616460][T20304] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 960.627900][T20305] FAULT_INJECTION: forcing a failure. [ 960.627900][T20305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.641030][ T7906] bond0: now running without any active interface! [ 960.660710][T20281] vivid-007: ================= START STATUS ================= [ 960.690266][T20281] vivid-007: Enable Output Cropping: true [ 960.710259][T20281] vivid-007: Enable Output Composing: true [ 960.718560][T20281] vivid-007: Enable Output Scaler: true [ 960.725857][T20281] vivid-007: Tx RGB Quantization Range: Automatic [ 960.741295][T20281] vivid-007: Transmit Mode: HDMI [ 960.748578][T20305] CPU: 0 UID: 0 PID: 20305 Comm: syz.4.3765 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 960.748601][T20305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 960.748612][T20305] Call Trace: [ 960.748620][T20305] [ 960.748629][T20305] dump_stack_lvl+0x189/0x250 [ 960.748657][T20305] ? __lock_acquire+0xaac/0xd20 [ 960.748682][T20305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 960.748704][T20305] ? __pfx__printk+0x10/0x10 [ 960.748723][T20305] ? __might_fault+0xb0/0x130 [ 960.748756][T20305] should_fail_ex+0x414/0x560 [ 960.748780][T20305] _copy_from_user+0x2d/0xb0 [ 960.748806][T20305] snd_seq_ioctl+0x1d8/0x420 [ 960.748832][T20305] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 960.748870][T20305] ? __fget_files+0x3a0/0x420 [ 960.748892][T20305] ? __fget_files+0x2a/0x420 [ 960.748916][T20305] ? bpf_lsm_file_ioctl+0x9/0x20 [ 960.748939][T20305] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 960.748957][T20305] __se_sys_ioctl+0xf9/0x170 [ 960.748979][T20305] do_syscall_64+0xf6/0x210 [ 960.749002][T20305] ? clear_bhb_loop+0x60/0xb0 [ 960.749023][T20305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.749040][T20305] RIP: 0033:0x7f4570f8e969 [ 960.749056][T20305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.749071][T20305] RSP: 002b:00007f4571e02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 960.749089][T20305] RAX: ffffffffffffffda RBX: 00007f45711b5fa0 RCX: 00007f4570f8e969 [ 960.749103][T20305] RDX: 00002000000004c0 RSI: 0000000040a85321 RDI: 0000000000000003 [ 960.749115][T20305] RBP: 00007f4571e02090 R08: 0000000000000000 R09: 0000000000000000 [ 960.749126][T20305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.749136][T20305] R13: 0000000000000000 R14: 00007f45711b5fa0 R15: 00007f45712dfa28 [ 960.749169][T20305] [ 960.749800][T20281] vivid-007: Hotplug Present: 0x00000000 [ 960.949705][T20281] vivid-007: RxSense Present: 0x00000000 [ 960.962999][T20281] vivid-007: EDID Present: 0x00000000 [ 960.969773][T20281] vivid-007: ================== END STATUS ================== [ 961.035199][ T5921] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 961.167190][ T5921] usb 6-1: device descriptor read/64, error -71 [ 961.417339][ T5921] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 961.544673][ T5881] net_ratelimit: 1 callbacks suppressed [ 961.544691][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.559005][ T5921] usb 6-1: device descriptor read/64, error -71 [ 961.628774][T13058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.701025][T20328] loop2: detected capacity change from 0 to 7 [ 961.707743][ T5921] usb usb6-port1: attempt power cycle [ 961.731609][T20328] loop2: p1 [ 961.769690][T20328] loop2: partition table partially beyond EOD, truncated [ 961.779796][T20328] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 961.893933][ T5947] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 961.939609][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 962.094133][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 962.108219][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.118898][ T5921] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 962.146832][ T5947] usb 5-1: config 0 has no interfaces? [ 962.162420][ T5921] usb 6-1: device descriptor read/8, error -71 [ 962.172180][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 962.183088][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.208548][ T5947] usb 5-1: config 0 descriptor?? [ 962.234104][ T5884] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 962.253339][T20340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3777'. [ 962.275111][T13057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.332926][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.343392][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.352532][T13058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.379086][T20342] FAULT_INJECTION: forcing a failure. [ 962.379086][T20342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.396727][T20342] CPU: 0 UID: 0 PID: 20342 Comm: syz.2.3778 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 962.396746][T20342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 962.396753][T20342] Call Trace: [ 962.396758][T20342] [ 962.396764][T20342] dump_stack_lvl+0x189/0x250 [ 962.396786][T20342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 962.396801][T20342] ? __pfx__printk+0x10/0x10 [ 962.396818][T20342] should_fail_ex+0x414/0x560 [ 962.396832][T20342] _copy_to_user+0x31/0xb0 [ 962.396848][T20342] simple_read_from_buffer+0xe1/0x170 [ 962.396864][T20342] proc_fail_nth_read+0x1df/0x250 [ 962.396880][T20342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 962.396896][T20342] ? rw_verify_area+0x258/0x650 [ 962.396907][T20342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 962.396921][T20342] vfs_read+0x1fd/0x980 [ 962.396936][T20342] ? __pfx___mutex_lock+0x10/0x10 [ 962.396950][T20342] ? __pfx_vfs_read+0x10/0x10 [ 962.396962][T20342] ? __fget_files+0x2a/0x420 [ 962.396978][T20342] ? __fget_files+0x3a0/0x420 [ 962.396990][T20342] ? __fget_files+0x2a/0x420 [ 962.397007][T20342] ksys_read+0x145/0x250 [ 962.397018][T20342] ? __fget_files+0x2a/0x420 [ 962.397031][T20342] ? __pfx_ksys_read+0x10/0x10 [ 962.397044][T20342] ? do_syscall_64+0xba/0x210 [ 962.397061][T20342] do_syscall_64+0xf6/0x210 [ 962.397074][T20342] ? clear_bhb_loop+0x60/0xb0 [ 962.397086][T20342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.397096][T20342] RIP: 0033:0x7f5e5e18d37c [ 962.397106][T20342] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 962.397114][T20342] RSP: 002b:00007f5e5ef92030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 962.397126][T20342] RAX: ffffffffffffffda RBX: 00007f5e5e3b5fa0 RCX: 00007f5e5e18d37c [ 962.397133][T20342] RDX: 000000000000000f RSI: 00007f5e5ef920a0 RDI: 0000000000000004 [ 962.397140][T20342] RBP: 00007f5e5ef92090 R08: 0000000000000000 R09: 0000000000000000 [ 962.397146][T20342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.397152][T20342] R13: 0000000000000000 R14: 00007f5e5e3b5fa0 R15: 00007f5e5e4dfa28 [ 962.397168][T20342] [ 962.616079][ C0] vkms_vblank_simulate: vblank timer overrun [ 962.785776][ T5921] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 962.796809][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.827227][ T5921] usb 6-1: device descriptor read/8, error -71 [ 962.854012][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 962.881593][ T5884] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 962.904836][T15581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.924839][ T5884] usb 2-1: config 0 has no interface number 0 [ 962.934315][ T5921] usb usb6-port1: unable to enumerate USB device [ 962.959145][T20323] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3770'. [ 962.969881][T13058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.980240][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.988830][ T5884] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 963.003155][ T5884] usb 2-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 963.011870][ T5884] usb 2-1: Product: syz [ 963.019466][ T5884] usb 2-1: Manufacturer: syz [ 963.026084][ T5884] usb 2-1: SerialNumber: syz [ 963.033323][ T5884] usb 2-1: config 0 descriptor?? [ 963.044673][ T5884] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 963.069403][ T5884] snd-usb-audio 2-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 963.112938][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 963.253660][ T5884] usb 2-1: USB disconnect, device number 91 [ 963.362383][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3779'. [ 963.824118][ T5921] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 964.178439][T20371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3786'. [ 964.453921][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 964.490803][T12628] usb 5-1: USB disconnect, device number 85 [ 964.593949][T13057] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 964.793929][T13057] usb 2-1: device descriptor read/64, error -71 [ 964.853545][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.930328][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 964.955778][T20371] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.987936][T20371] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.992044][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.997890][T20371] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.015729][T20371] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.034323][T13057] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 965.053754][ T5921] usb 1-1: Product: syz [ 965.078451][ T5921] usb 1-1: Manufacturer: syz [ 965.088600][ T5921] usb 1-1: SerialNumber: syz [ 965.130699][ T5921] usb 1-1: config 0 descriptor?? [ 965.174178][T13057] usb 2-1: device descriptor read/64, error -71 [ 965.189614][ T5921] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 965.208337][T20376] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3788'. [ 965.217743][ T5921] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 965.227755][ T7904] bond0: (slave bond_slave_0): interface is now down [ 965.257542][ T7904] bond0: (slave bond_slave_1): interface is now down [ 965.284781][T13057] usb usb2-port1: attempt power cycle [ 965.308103][ T7904] bond0: now running without any active interface! [ 965.516052][T20384] xt_hashlimit: size too large, truncated to 1048576 [ 965.524636][T20382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.533443][T20382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.643984][T13057] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 965.674885][T13058] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 965.736235][T13057] usb 2-1: device descriptor read/8, error -71 [ 965.869953][T13058] usb 6-1: Using ep0 maxpacket: 32 [ 965.910697][T13058] usb 6-1: config 1 has an invalid interface number: 137 but max is 0 [ 965.935526][T13058] usb 6-1: config 1 has no interface number 0 [ 965.984166][T13057] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 966.006405][T13058] usb 6-1: config 1 interface 137 has no altsetting 0 [ 966.050469][T13058] usb 6-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 966.067843][T13058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.076270][T13057] usb 2-1: device descriptor read/8, error -71 [ 966.116405][T13058] usb 6-1: Product: syz [ 966.124541][T13058] usb 6-1: Manufacturer: syz [ 966.144362][T13058] usb 6-1: SerialNumber: syz [ 966.187856][T13057] usb usb2-port1: unable to enumerate USB device [ 966.544452][T20383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.576959][T20383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.234518][ T5921] net_ratelimit: 1830 callbacks suppressed [ 967.234539][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.024348][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.049451][T13057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.064810][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.209319][T13058] pl2303 6-1:1.137: required endpoints missing [ 968.264834][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.353074][T20395] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 968.369915][T13058] usb 6-1: USB disconnect, device number 26 [ 968.409846][ T5921] usb 1-1: USB disconnect, device number 98 [ 968.854328][ T5921] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 969.015958][ T5921] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 969.050389][ T5921] usb 1-1: config 0 has no interface number 0 [ 969.060113][ T5947] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 969.086821][ T5921] usb 1-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 969.101727][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.142706][ T5921] usb 1-1: config 0 interface 128 has no altsetting 0 [ 969.158956][ T5921] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 969.187527][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.216312][ T5921] usb 1-1: Product: syz [ 969.220530][ T5921] usb 1-1: Manufacturer: syz [ 969.225510][ T5921] usb 1-1: SerialNumber: syz [ 969.232294][ T5921] usb 1-1: config 0 descriptor?? [ 969.274119][T13058] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 969.299892][ T5921] radio-si470x 1-1:0.128: could not find interrupt in endpoint [ 969.312286][ T5921] radio-si470x 1-1:0.128: probe with driver radio-si470x failed with error -5 [ 969.323883][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 969.334326][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.344932][ T5921] usbhid 1-1:0.128: couldn't find an input interrupt endpoint [ 969.362018][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.422099][ T5947] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 969.443924][T13058] usb 6-1: Using ep0 maxpacket: 16 [ 969.455801][T13058] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.470033][T13058] usb 6-1: config 0 has no interfaces? [ 969.476990][T13058] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 969.492503][T13058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.496067][ T5947] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 969.522087][T13058] usb 6-1: config 0 descriptor?? [ 969.570377][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.629532][T20398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.644301][T12629] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 969.653748][T20398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.669376][T13058] usb 1-1: USB disconnect, device number 99 [ 969.687567][ T5947] usb 5-1: config 0 descriptor?? [ 969.762654][T20411] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3797'. [ 969.816660][T12629] usb 2-1: config 0 has no interfaces? [ 969.828379][T12629] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 969.852931][T12629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.871591][T12629] usb 2-1: Product: syz [ 969.876492][T12629] usb 2-1: Manufacturer: syz [ 969.881253][T12629] usb 2-1: SerialNumber: syz [ 969.889989][T12629] usb 2-1: config 0 descriptor?? [ 970.020885][T20405] netlink: del zone limit has 4 unknown bytes [ 970.417523][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.430851][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3799'. [ 970.554185][ T5884] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 970.780988][ T5884] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 970.796042][ T5884] usb 1-1: config 0 has no interface number 0 [ 970.811404][ T5884] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 970.826412][ T5884] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 970.840878][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.850434][ T5884] usb 1-1: Product: syz [ 970.860851][ T5884] usb 1-1: Manufacturer: syz [ 970.866380][ T5884] usb 1-1: SerialNumber: syz [ 970.882513][ T5884] usb 1-1: config 0 descriptor?? [ 970.889055][T20421] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 971.114098][T20421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.135163][T20421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.155204][ T5884] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 971.163467][ T5884] usb 1-1: MIDIStreaming interface descriptor not found [ 971.240822][ T5884] usb 1-1: USB disconnect, device number 100 [ 971.464801][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.763119][T20402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.803443][ T5921] usb 5-1: USB disconnect, device number 86 [ 972.231885][T13057] usb 6-1: USB disconnect, device number 27 [ 972.340524][ T978] usb 2-1: USB disconnect, device number 96 [ 972.556795][ T5921] net_ratelimit: 1 callbacks suppressed [ 972.556811][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.720195][T20442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.729088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.741044][T20442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.751132][T20430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.763151][T20442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.772295][T13058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.824445][T20442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.852119][T13058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.864110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.879864][T20445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3808'. [ 972.885674][T20442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.148288][ T978] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 973.336523][T20461] netdevsim netdevsim2: Direct firmware load for JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F failed with error -2 [ 973.405863][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 973.406583][T20461] netdevsim netdevsim2: Falling back to sysfs fallback for: JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F [ 973.475995][ T978] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 973.504077][ T978] usb 6-1: config 8 has no interface number 0 [ 973.513920][ T978] usb 6-1: config 8 interface 206 has no altsetting 0 [ 973.537794][ T978] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 973.550002][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.558641][ T978] usb 6-1: Product: syz [ 973.562953][ T978] usb 6-1: Manufacturer: syz [ 973.568074][ T978] usb 6-1: SerialNumber: syz [ 973.574653][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 973.574668][ T30] audit: type=1326 audit(1747710513.410:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20462 comm="syz.0.3814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99a8b8e969 code=0x0 [ 973.602696][ C0] vkms_vblank_simulate: vblank timer overrun [ 973.763189][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3811'. [ 973.822176][ T978] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 973.841276][ T978] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 973.861408][ T978] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 973.954371][ T5881] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 974.036283][T20447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.062085][T20447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.128022][T13058] usb 6-1: USB disconnect, device number 28 [ 974.145816][ T5881] usb 1-1: config 6 has an invalid interface number: 137 but max is 0 [ 974.147243][T13058] garmin_gps 6-1:8.206: device disconnected [ 974.191323][ T5881] usb 1-1: config 6 has no interface number 0 [ 974.232892][ T5881] usb 1-1: config 6 interface 137 has no altsetting 0 [ 974.279559][ T5881] usb 1-1: string descriptor 0 read error: -22 [ 974.300842][ T5881] usb 1-1: New USB device found, idVendor=19d2, idProduct=0042, bcdDevice=22.a4 [ 974.333513][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.400688][T20469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.444406][T20469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.503967][T20471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3816'. [ 974.851457][T20484] fuse: Unknown parameter '0x00000000000000030x0000000000000008017777777777777777777771844674407370955161500000000000000000000' [ 974.936767][T20488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 975.052275][T20495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3824'. [ 975.185461][T20501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3826'. [ 975.191536][T20502] loop2: detected capacity change from 0 to 7 [ 975.202923][T20502] loop2: p1 [ 975.209414][T20502] loop2: partition table partially beyond EOD, truncated [ 975.229445][T20502] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 975.365669][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 975.498294][T20515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.518410][T20515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.695311][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3829'. [ 975.724293][ T978] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 975.894406][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 975.909820][ T978] usb 6-1: unable to get BOS descriptor or descriptor too short [ 975.921750][ T978] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 975.933460][ T978] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 976.006340][ T978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 976.030724][ T978] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 976.053566][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.081314][ T978] usb 6-1: Product: syz [ 976.101440][ T978] usb 6-1: Manufacturer: syz [ 976.114915][ T978] usb 6-1: SerialNumber: syz [ 976.374870][ T978] usb 6-1: 0:2 : does not exist [ 976.513466][ T978] usb 6-1: USB disconnect, device number 29 [ 976.584487][T13057] usb 1-1: USB disconnect, device number 101 [ 976.641744][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 976.884304][T20523] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 976.969324][T20525] netlink: 'syz.5.3834': attribute type 1 has an invalid length. [ 976.997355][T20527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3835'. [ 977.014543][T13057] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 977.199561][T13057] usb 1-1: unable to get BOS descriptor or descriptor too short [ 977.217633][T13057] usb 1-1: not running at top speed; connect to a high speed hub [ 977.237028][T13058] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 977.246201][T13057] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 977.275384][T13057] usb 1-1: config 8 interface 0 has no altsetting 0 [ 977.291682][T13057] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 977.304879][T13057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.312945][T13057] usb 1-1: Product: syz [ 977.317432][T13057] usb 1-1: Manufacturer: syz [ 977.322048][T13057] usb 1-1: SerialNumber: syz [ 977.436532][T13058] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 977.462050][T13058] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 977.476260][T13058] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 977.502040][T13058] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 977.525754][T13058] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 977.551930][T13058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.571486][T13057] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 977.595281][T13057] usb 1-1: selecting invalid altsetting 0 [ 977.625916][ T5884] net_ratelimit: 8 callbacks suppressed [ 977.625933][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.689194][T13057] snd-usb-audio 1-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 977.699675][ T30] audit: type=1326 audit(1747710517.530:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20544 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e5e18e969 code=0x7ffc0000 [ 977.707721][T20546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.733498][ T30] audit: type=1326 audit(1747710517.530:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20544 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e5e18e969 code=0x7ffc0000 [ 977.758825][ T30] audit: type=1326 audit(1747710517.530:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20544 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e5e18e969 code=0x7ffc0000 [ 977.784472][T13057] usb 1-1: USB disconnect, device number 102 [ 977.832674][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.843554][ T30] audit: type=1326 audit(1747710517.530:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20544 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e5e18e969 code=0x7ffc0000 [ 977.866083][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.867173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.869107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.908001][ T30] audit: type=1326 audit(1747710517.530:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20544 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e5e18e969 code=0x7ffc0000 [ 977.932881][ T30] audit: type=1326 audit(1747710517.530:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20544 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e5e18e969 code=0x7ffc0000 [ 977.938831][T20546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.957238][ T30] audit: type=1326 audit(1747710517.530:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20544 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e5e18e969 code=0x7ffc0000 [ 977.985419][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.021564][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.074909][T20557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3841'. [ 978.137888][ T30] audit: type=1326 audit(1747710517.530:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20544 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e5e18e969 code=0x7ffc0000 [ 978.167861][T20548] vlan2: entered allmulticast mode [ 978.173027][T20548] veth0_to_team: entered allmulticast mode [ 978.244408][ T30] audit: type=1326 audit(1747710517.530:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20544 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e5e18e969 code=0x7ffc0000 [ 978.266864][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.279621][T13057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.308745][T13058] ath6kl: Failed to submit usb control message: -71 [ 978.319749][T20561] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 978.334184][ T5884] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 978.344912][T13058] ath6kl: unable to send the bmi data to the device: -71 [ 978.383263][T13058] ath6kl: Unable to send get target info: -71 [ 978.396440][T20563] bond_slave_0: entered promiscuous mode [ 978.402180][T20563] bond_slave_1: entered promiscuous mode [ 978.430368][T13058] ath6kl: Failed to init ath6kl core: -71 [ 978.475398][T13058] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 978.482883][T20563] vlan2: entered promiscuous mode [ 978.491274][T20563] bond0: entered promiscuous mode [ 978.529074][T13058] usb 6-1: USB disconnect, device number 30 [ 978.780207][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3845'. [ 978.806763][T20578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 978.904795][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.931645][T20580] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 978.932742][T13058] IPVS: starting estimator thread 0... [ 979.073947][T20586] IPVS: using max 33 ests per chain, 79200 per kthread [ 979.077484][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 979.077502][ T30] audit: type=1800 audit(1747710518.890:3207): pid=20588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3851" name="memory.events" dev="tmpfs" ino=836 res=0 errno=0 [ 979.182705][T20588] C: renamed from team_slave_0 (while UP) [ 979.208795][T20588] netlink: 'syz.4.3851': attribute type 3 has an invalid length. [ 979.232190][T20588] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3851'. [ 979.244246][T20588] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 979.260778][T20597] tipc: Started in network mode [ 979.266493][T20597] tipc: Node identity 6, cluster identity 4711 [ 979.287324][T20597] tipc: Node number set to 6 [ 979.299309][T20598] loop2: detected capacity change from 0 to 7 [ 979.347891][T20598] loop2: p1 [ 979.352768][T20598] loop2: partition table partially beyond EOD, truncated [ 979.365815][T20598] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 979.473551][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 979.598471][T20606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3857'. [ 979.626107][T20607] netlink: 'syz.2.3856': attribute type 10 has an invalid length. [ 979.947156][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.142935][ T5884] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 980.503118][T20607] batman_adv: batadv0: Interface deactivated: dummy0 [ 980.524373][T20607] batman_adv: batadv0: Removing interface: dummy0 [ 980.584778][T20607] team0: Device dummy0 is up. Set it down before adding it as a team port [ 980.634077][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 980.659221][ T5884] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 980.683954][ T5881] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 980.689288][ T5884] usb 1-1: config 0 has no interface number 0 [ 980.720692][ T5884] usb 1-1: config 0 interface 184 has no altsetting 0 [ 980.773072][ T5884] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 980.782620][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.791050][ T5884] usb 1-1: Product: syz [ 980.798886][ T5884] usb 1-1: Manufacturer: syz [ 980.803479][ T5884] usb 1-1: SerialNumber: syz [ 980.810169][ T5884] usb 1-1: config 0 descriptor?? [ 980.826751][ T5884] smsc75xx v1.0.0 [ 980.830871][ T5884] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 980.834848][T20618] bond_slave_0: entered promiscuous mode [ 980.846685][T20618] bond_slave_1: entered promiscuous mode [ 980.877692][ T5884] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 980.908004][T20618] vlan2: entered promiscuous mode [ 980.918656][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 980.984241][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.992902][T20618] bond0: entered promiscuous mode [ 981.009009][ T5881] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 981.044337][T20621] netlink: 'syz.4.3858': attribute type 4 has an invalid length. [ 981.059544][ T5881] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 981.089668][ T5881] usb 2-1: config 0 has no interface number 0 [ 981.117552][ T5881] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 981.129762][T20620] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 981.151131][T20623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3858'. [ 981.160301][T20620] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 981.173076][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.198451][ T5881] usb 2-1: Product: syz [ 981.216657][ T5881] usb 2-1: Manufacturer: syz [ 981.230280][ T5881] usb 2-1: SerialNumber: syz [ 981.254180][ T5881] usb 2-1: config 0 descriptor?? [ 981.309787][ T5881] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 981.342175][ T5881] usb 2-1: No valid video chain found. [ 981.388615][T20606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.412338][T20606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.485336][T20606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.507587][T20606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.687067][T20629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.721837][T20629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.777116][T20635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.835180][T20635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.865493][T20629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3859'. [ 982.374255][ T5881] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 982.557483][ T5881] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 982.571724][ T5881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.679497][ T5881] usb 6-1: config 0 has no interface number 0 [ 982.696894][ T5881] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice= 0.05 [ 982.770737][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.980191][ T5881] usb 6-1: config 0 descriptor?? [ 983.066783][ T5881] usb 6-1: bad CDC descriptors [ 983.253023][ T5921] usb 6-1: USB disconnect, device number 31 [ 983.422979][ T978] usb 1-1: USB disconnect, device number 103 [ 983.450166][ T5881] usb 2-1: USB disconnect, device number 97 [ 983.924008][T13057] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 984.134197][T13057] usb 2-1: Using ep0 maxpacket: 16 [ 984.203958][ T5884] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 984.286544][T20666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3873'. [ 984.365944][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 984.374458][T20680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3879'. [ 984.420530][ T5884] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 984.455466][T20685] netlink: 'syz.4.3879': attribute type 8 has an invalid length. [ 984.532542][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.582068][T20685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3879'. [ 984.601397][ T5884] usb 6-1: Product: syz [ 984.608784][ T5884] usb 6-1: Manufacturer: syz [ 984.633749][ T5884] usb 6-1: SerialNumber: syz [ 984.653636][ T5884] usb 6-1: config 0 descriptor?? [ 984.673215][ T5884] usb 6-1: Found UVC 0.00 device syz (046d:0721) [ 984.702712][ T5884] usb 6-1: No valid video chain found. [ 984.830957][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 984.952863][T20695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.962797][T20695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.015792][ T978] usb 6-1: USB disconnect, device number 32 [ 985.384933][T20694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.434400][T20694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.476743][T20694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3881'. [ 985.901887][T12628] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 986.101861][T12628] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 986.171424][T12628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.209181][T12628] usb 1-1: Product: syz [ 986.224373][T12628] usb 1-1: Manufacturer: syz [ 986.248893][T12628] usb 1-1: SerialNumber: syz [ 986.368505][T12628] usb 1-1: config 0 descriptor?? [ 986.446600][T12628] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 986.659580][T13057] usb 2-1: unable to get BOS descriptor or descriptor too short [ 986.670580][T12628] gspca_sunplus: reg_r err -71 [ 986.684725][T12628] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 986.702409][T13057] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 986.831309][T20731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3892'. [ 986.918376][T13057] usb 2-1: can't read configurations, error -71 [ 986.925194][T12628] usb 1-1: USB disconnect, device number 104 [ 987.606813][T20740] xt_hashlimit: invalid rate [ 988.302972][T20759] vlan0: entered promiscuous mode [ 989.010125][T20772] vlan0: entered promiscuous mode [ 989.754665][ T978] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 989.979318][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 989.989856][T14710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 990.001188][T14710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 990.010241][T14710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 990.018983][T14710] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 990.027756][T14710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 990.058498][ T978] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 990.090626][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.127405][ T978] usb 1-1: Product: syz [ 990.140932][ T978] usb 1-1: Manufacturer: syz [ 990.159067][ T978] usb 1-1: SerialNumber: syz [ 990.195173][ T978] usb 1-1: config 0 descriptor?? [ 990.422930][ T978] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 990.551467][T20793] chnl_net:caif_netlink_parms(): no params data found [ 990.646352][T20798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3911'. [ 990.792428][T20803] vlan2: entered promiscuous mode [ 990.792726][T20805] binder: 20804:20805 ioctl c0306201 2000000003c0 returned -22 [ 990.838297][T20793] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.887013][T20793] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.900151][T20793] bridge_slave_0: entered allmulticast mode [ 990.909790][T20793] bridge_slave_0: entered promiscuous mode [ 990.920289][T20793] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.927880][T20793] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.935354][T20793] bridge_slave_1: entered allmulticast mode [ 990.954436][T20793] bridge_slave_1: entered promiscuous mode [ 991.015772][T20793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.038418][T20793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.060350][T20809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.101498][T20809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.162023][T20793] team0: Port device team_slave_0 added [ 991.178500][T20793] team0: Port device team_slave_1 added [ 991.234256][T20793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.252820][T20793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.279624][T20793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.305971][T20793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.334011][T12628] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 991.372982][T20793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.411663][T20793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.512670][T20793] hsr_slave_0: entered promiscuous mode [ 991.518665][T12628] usb 6-1: Using ep0 maxpacket: 16 [ 991.529337][T20793] hsr_slave_1: entered promiscuous mode [ 991.537993][T20793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 991.538803][ T978] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 991.546111][T20793] Cannot create hsr debugfs directory [ 991.561536][T12628] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 991.580926][T12628] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 991.585879][ T978] usb 1-1: USB disconnect, device number 105 [ 991.618345][T12628] usb 6-1: Product: syz [ 991.641169][T12628] usb 6-1: Manufacturer: syz [ 991.666473][T12628] usb 6-1: SerialNumber: syz [ 991.692840][T12628] usb 6-1: config 0 descriptor?? [ 991.980879][ T978] usb 6-1: USB disconnect, device number 33 [ 992.104911][ T5837] Bluetooth: hci0: command tx timeout [ 992.337918][T20793] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 992.401296][T20793] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 992.449923][T20793] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 992.473558][T20793] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 992.554885][T20819] tipc: Enabling of bearer rejected, already enabled [ 992.596872][T20793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.668101][T20793] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.693811][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.701024][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.723487][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.730855][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.849455][T20793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.941115][T20793] veth0_vlan: entered promiscuous mode [ 992.971387][T20793] veth1_vlan: entered promiscuous mode [ 992.988515][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.994999][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.082008][T20793] veth0_macvtap: entered promiscuous mode [ 993.184625][T20793] veth1_macvtap: entered promiscuous mode [ 993.294477][T20793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.368556][T20836] vlan2: entered promiscuous mode [ 993.421281][T20793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.463468][T20793] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.508807][T20793] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.518492][T20793] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.527754][T20793] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.542716][T20838] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3925'. [ 993.555104][T13057] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 993.733978][T13057] usb 1-1: Using ep0 maxpacket: 32 [ 993.764099][T13057] usb 1-1: config index 0 descriptor too short (expected 65526, got 18) [ 993.775961][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.807725][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.821263][T13057] usb 1-1: config 0 has an invalid interface number: 206 but max is -1 [ 993.864954][T13057] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 993.908691][T13057] usb 1-1: config 0 has no interface number 0 [ 993.943258][ T7905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.987748][T20843] netlink: 'syz.5.3927': attribute type 5 has an invalid length. [ 994.003263][T13057] usb 1-1: New USB device found, idVendor=5a57, idProduct=0260, bcdDevice=32.59 [ 994.048058][ T7905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.086415][T13057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.123887][T13057] usb 1-1: Product: syz [ 994.141148][T13057] usb 1-1: Manufacturer: syz [ 994.153976][T13057] usb 1-1: SerialNumber: syz [ 994.184284][ T5837] Bluetooth: hci0: command tx timeout [ 994.184838][T13057] usb 1-1: config 0 descriptor?? [ 994.258335][T20845] loop2: detected capacity change from 0 to 7 [ 994.269681][T20845] loop2: p1 [ 994.281525][T20845] loop2: partition table partially beyond EOD, truncated [ 994.321120][T20845] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 994.540861][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 995.075640][ T978] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 995.234938][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 995.432933][ T978] usb 5-1: config 0 interface 0 has no altsetting 0 [ 995.527814][ T978] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 995.537678][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.586298][ T978] usb 5-1: Product: syz [ 995.670829][ T978] usb 5-1: Manufacturer: syz [ 995.683888][ T978] usb 5-1: SerialNumber: syz [ 995.697953][ T978] usb 5-1: config 0 descriptor?? [ 996.116668][ T978] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 996.274490][ T5837] Bluetooth: hci0: command tx timeout [ 996.338152][T20884] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3940'. [ 996.407564][ T5921] usb 1-1: USB disconnect, device number 106 [ 996.534896][T20895] netlink: 'syz.0.3942': attribute type 16 has an invalid length. [ 996.556459][T20895] netlink: 'syz.0.3942': attribute type 3 has an invalid length. [ 996.572558][T20895] netlink: 'syz.0.3942': attribute type 1 has an invalid length. [ 996.591296][T20895] netlink: 'syz.0.3942': attribute type 1 has an invalid length. [ 996.605883][T20895] netlink: 'syz.0.3942': attribute type 2 has an invalid length. [ 996.622564][T20895] netlink: 64006 bytes leftover after parsing attributes in process `syz.0.3942'. [ 996.776655][T20897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.785919][T20897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.833698][ T978] usb 5-1: USB disconnect, device number 88 [ 998.344894][ T5837] Bluetooth: hci0: command tx timeout [ 998.404103][ T5921] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 998.588862][ T5921] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 998.621623][ T5921] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 998.660333][ T5921] usb 6-1: config 0 has no interface number 0 [ 998.690752][ T5921] usb 6-1: config 0 interface 186 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 998.702814][ T5921] usb 6-1: config 0 interface 186 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 998.714346][ T978] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 998.724150][ T5921] usb 6-1: config 0 interface 186 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 998.735544][ T5921] usb 6-1: config 0 interface 186 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 998.752194][ T5921] usb 6-1: config 0 interface 186 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 998.763500][ T5921] usb 6-1: config 0 interface 186 has no altsetting 0 [ 998.786402][ T5921] usb 6-1: New USB device found, idVendor=10c4, idProduct=814b, bcdDevice=8c.99 [ 998.810837][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.839122][ T5921] usb 6-1: Product: syz [ 998.852433][ T5921] usb 6-1: Manufacturer: syz [ 998.884252][ T5921] usb 6-1: SerialNumber: syz [ 998.889603][ T978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 998.910147][T20927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3951'. [ 998.929878][ T978] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 998.944284][ T5921] usb 6-1: config 0 descriptor?? [ 998.956448][T20919] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 998.962608][ T978] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 998.982171][ T978] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 998.992308][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.000819][ T978] usb 1-1: Product: syz [ 999.005757][ T978] usb 1-1: Manufacturer: syz [ 999.010590][ T978] usb 1-1: SerialNumber: syz [ 999.018668][ T5921] cp210x 6-1:0.186: cp210x converter detected [ 999.040939][ T978] hub 1-1:1.0: bad descriptor, ignoring hub [ 999.047459][ T978] hub 1-1:1.0: probe with driver hub failed with error -5 [ 999.223061][ T5921] cp210x 6-1:0.186: failed to get vendor val 0x370b size 1: -32 [ 999.253417][ T5921] cp210x 6-1:0.186: querying part number failed [ 999.260847][ T978] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 107 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 999.297602][ T5921] usb 6-1: cp210x converter now attached to ttyUSB0 [ 999.970140][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3954'. [ 1000.037992][T20925] usb 1-1: reset high-speed USB device number 107 using dummy_hcd [ 1000.138922][T20935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.161417][T20936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.171956][T20935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.183663][T20936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.476335][ T5921] usb 1-1: USB disconnect, device number 107 [ 1000.495077][ T5921] usblp0: removed [ 1001.319463][T12628] usb 6-1: USB disconnect, device number 34 [ 1001.375580][T20949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3959'. [ 1001.404648][T12628] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1001.452117][T12628] cp210x 6-1:0.186: device disconnected [ 1001.571052][ T7904] bond0: (slave bond_slave_0): interface is now down [ 1001.587235][T20954] veth0: entered promiscuous mode [ 1001.598166][ T7904] bond0: (slave bond_slave_1): interface is now down [ 1001.614634][ T7904] bond0: now running without any active interface! [ 1001.810267][T12628] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1002.005018][T12628] usb 6-1: Using ep0 maxpacket: 16 [ 1002.012119][T12628] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1002.021783][T12628] usb 6-1: config 2 has an invalid interface number: 9 but max is 0 [ 1002.032713][T12628] usb 6-1: config 2 has no interface number 0 [ 1002.033962][ T978] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1002.038945][T12628] usb 6-1: config 2 interface 9 altsetting 10 bulk endpoint 0xC has invalid maxpacket 32 [ 1002.060023][T12628] usb 6-1: config 2 interface 9 altsetting 10 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1002.071108][T12628] usb 6-1: config 2 interface 9 has no altsetting 0 [ 1002.080727][T12628] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=6f.97 [ 1002.090269][T12628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.098449][T12628] usb 6-1: Product: syz [ 1002.102705][T12628] usb 6-1: Manufacturer: syz [ 1002.107972][T12628] usb 6-1: SerialNumber: syz [ 1002.113911][ T5884] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1002.132596][T20951] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1002.195911][ T978] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1002.208249][ T978] usb 5-1: config 0 has no interface number 0 [ 1002.215210][ T978] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1002.230282][ T978] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1002.243250][ T978] usb 5-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 1002.254073][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.262096][ T978] usb 5-1: Product: syz [ 1002.266672][ T978] usb 5-1: Manufacturer: syz [ 1002.271290][ T978] usb 5-1: SerialNumber: syz [ 1002.278393][ T978] usb 5-1: config 0 descriptor?? [ 1002.284132][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 1002.289960][T20957] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1002.306229][ T5884] usb 1-1: config 1 has an invalid interface number: 34 but max is 3 [ 1002.315976][ T5884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.326352][ T5884] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 4 [ 1002.335500][ T5884] usb 1-1: config 1 has no interface number 0 [ 1002.341826][ T5884] usb 1-1: config 1 interface 34 altsetting 4 endpoint 0x1 has invalid maxpacket 96, setting to 64 [ 1002.362467][ T5884] usb 1-1: config 1 interface 34 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 1002.378011][T12628] pn533_usb 6-1:2.9: NFC: Could not find bulk-in or bulk-out endpoint [ 1002.386301][ T5884] usb 1-1: config 1 interface 34 has no altsetting 0 [ 1002.403011][ T5884] usb 1-1: New USB device found, idVendor=1e2d, idProduct=00b7, bcdDevice=2a.57 [ 1002.412580][T12628] usb 6-1: USB disconnect, device number 35 [ 1002.418687][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.433731][ T5884] usb 1-1: Product: Њ [ 1002.438043][ T5884] usb 1-1: Manufacturer: 恟谂婤湝묖鹨틗뀶㊭歹酤蚤᰼蒔낥⥚민ഽ㩞閜萨䐒５䷫܌ [ 1002.450028][ T5884] usb 1-1: SerialNumber: 킅騋ݔ䒇棡둠枟䔁䎺㼱뻈颥姁늌╨暌妬 [ 1002.512493][ T978] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1002.522347][ T978] usb 5-1: MIDIStreaming interface descriptor not found [ 1002.562151][ T978] usb 5-1: USB disconnect, device number 89 [ 1002.634950][ T7837] udevd[7837]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.741822][ T5884] option 1-1:1.34: GSM modem (1-port) converter detected [ 1002.754169][ T5884] usb 1-1: USB disconnect, device number 108 [ 1002.768810][ T5884] option 1-1:1.34: device disconnected [ 1002.983375][T20977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1003.659666][T20989] vivid-000: disconnect [ 1003.810405][T20995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3972'. [ 1003.991895][T20976] vivid-000: reconnect [ 1004.520738][T20954] veth0: left promiscuous mode [ 1004.868284][ T5921] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1004.954003][T13057] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1005.071178][ T5921] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1005.111631][ T5921] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1005.134101][T13057] usb 6-1: Using ep0 maxpacket: 16 [ 1005.140916][ T5921] usb 5-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 1005.164229][T13057] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.188054][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.201364][T21009] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1005.219332][ T5921] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1005.243785][T13057] usb 6-1: config 0 has no interfaces? [ 1005.271988][T13057] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1005.343934][T13057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.389780][T13057] usb 6-1: config 0 descriptor?? [ 1005.429826][ T5921] usb 5-1: USB disconnect, device number 90 [ 1005.727655][T21012] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3976'. [ 1005.749931][T21016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.780334][T21016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.531246][ T978] usb 6-1: USB disconnect, device number 36 [ 1007.684229][T15038] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1007.793251][T21036] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3986'. [ 1007.839853][T21038] netlink: del zone limit has 4 unknown bytes [ 1007.876489][T15038] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1007.903900][T15038] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1007.937724][T15038] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1007.973067][T15038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.020587][T21030] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1008.067172][T15038] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1008.089309][T21046] bond0: option ad_select: unable to set because the bond device is up [ 1008.276721][T15038] usb 1-1: USB disconnect, device number 109 [ 1008.408088][T21049] netlink: 'syz.4.3991': attribute type 10 has an invalid length. [ 1008.420390][T21049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3991'. [ 1008.437990][T21049] dummy0: entered promiscuous mode [ 1008.450101][T21049] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1008.478912][T21052] netlink: 440 bytes leftover after parsing attributes in process `syz.2.3992'. [ 1008.590643][T21054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3993'. [ 1008.984935][T21073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.035916][T21073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.534790][ T1147] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 1009.557422][ T1147] ref_tracker: batadv_slave_0@ffff88805b3da610 has 1/1 users at [ 1009.557422][ T1147] batadv_hard_if_event+0x122c/0x1a50 [ 1009.557422][ T1147] notifier_call_chain+0x1b6/0x3e0 [ 1009.557422][ T1147] register_netdevice+0x1608/0x1af0 [ 1009.557422][ T1147] veth_newlink+0x5cc/0xa50 [ 1009.557422][ T1147] rtnl_newlink_create+0x308/0xaf0 [ 1009.557422][ T1147] rtnl_newlink+0x16d6/0x1c70 [ 1009.557422][ T1147] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1009.557422][ T1147] netlink_rcv_skb+0x21c/0x490 [ 1009.557422][ T1147] netlink_unicast+0x758/0x8d0 [ 1009.557422][ T1147] netlink_sendmsg+0x805/0xb30 [ 1009.557422][ T1147] __sock_sendmsg+0x219/0x270 [ 1009.557422][ T1147] __sys_sendto+0x3bd/0x520 [ 1009.557422][ T1147] __x64_sys_sendto+0xde/0x100 [ 1009.557422][ T1147] do_syscall_64+0xf6/0x210 [ 1009.557422][ T1147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.557422][ T1147] [ 1009.690485][ T1147] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 1009.794012][T15038] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1009.953930][T15038] usb 5-1: Using ep0 maxpacket: 32 [ 1010.032030][T15038] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.133296][T15038] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.142876][T15038] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1010.153402][T15038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.163355][T15038] usb 5-1: config 0 descriptor?? [ 1010.430049][T21086] netlink: del zone limit has 4 unknown bytes [ 1012.233443][T21080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.246139][T12628] usb 5-1: USB disconnect, device number 91