last executing test programs: 10m25.455839272s ago: executing program 0 (id=3443): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0x1e0, 0x3f, 0x4, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x1, 0x100, 0x0, 0x10000000, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4, 0x100}) 10m24.857605034s ago: executing program 0 (id=3446): unshare(0x2a020400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000380)=0xb4e3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00') statx(r2, 0x0, 0x1000, 0x6000, 0x0) shutdown(r1, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r4, 0x1}, 0x8) r5 = signalfd4(r1, &(0x7f0000000040), 0x8, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f000001bff4)={0x10000000}) signalfd4(r5, &(0x7f0000000180), 0x8, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) socket$tipc(0x1e, 0x5, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001980)={0x4f, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d356d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x188d2, 0x43037}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x343}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}]}}}]}, 0x54}}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r5, @ANYRES8=r6, @ANYRES8=r7], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, r11, 0x0, 0x20}, 0x38) 10m23.286500999s ago: executing program 0 (id=3448): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000440)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x2, "e51e00cd273067f058783600000000000000001b0000e18bab080fde250800"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x65, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x40, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x157}, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0xffffffffffffffff, r6, 0x0, 0x6, 0xa) 10m15.499084166s ago: executing program 0 (id=3474): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e26}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000700)={0x3, &(0x7f00000006c0)=[{0x8, 0x3, 0x5, 0x250}, {0x8, 0x3, 0x7, 0x3}, {0xe, 0xaf, 0x0, 0x1}]}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="09e18300497950de29bf3d5a1abe6bcac47a857f4298327e09c7d20f994ea9e662", @ANYRES16=0x0, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x20000088}, 0x20000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x9) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x82, &(0x7f0000000200), 0x8) socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001a00210f29bd7000fadbdf251c000000ff0000050000000008000400", @ANYRESOCT], 0x24}}, 0x0) 10m13.051634357s ago: executing program 0 (id=3482): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) syz_usb_connect(0x1, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRES16], 0x0) 10m12.769756944s ago: executing program 0 (id=3483): r0 = io_uring_setup(0x194e, &(0x7f0000000280)={0x0, 0xd3c5, 0x400, 0x2, 0x352}) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) (async) accept4(r1, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 10m12.290749747s ago: executing program 32 (id=3483): r0 = io_uring_setup(0x194e, &(0x7f0000000280)={0x0, 0xd3c5, 0x400, 0x2, 0x352}) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) (async) accept4(r1, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m50.589524906s ago: executing program 2 (id=5151): r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffe, 0x6, 0x53, @scatter={0x2000, 0x0, 0x0}, &(0x7f0000000480)="4c18661d14fd", 0x0, 0x9, 0x14, 0x0, 0x0}) 1m50.489776922s ago: executing program 2 (id=5154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x40, 0x5, 0x45, {0x45, 0x24, "34e44a172f8fee8f1b8e260f859f8748513d665674b3972ca63754de57c6d7c1d72aa62fa2177aae50e8f23f057e2e7ced3c8d48b9f3dc916e264d1d497ba955bbdbf5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000140)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0x0, @broadcast}, 'lo\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000580)="88e9123f9e4e2968c497eccaf9b31f6655870c05977e96d9ac0a09a1181e1c5e5b08a729a09f765dc281f0d1c67fe71875f2e3e880daeb1c94c9d4816a18da876b6ee3ea6a6308f4be8fb48d231b29a6ad7f4bd2f1966a496efc4c69c9de9949552b8d22a872263aeae4f754b2ff2fa1a49ec609ac09feccf05b9043929c4408d72feca250963c184cf7f87301b5e7787f5d5bdbec6095d9e549433ff91c316be1188ec369451e1ee56fc596a4f5b81e9956e428a368c3572f1cda7ec5af0e8dc8de18e8945b51d267", 0xc9}], 0x2) r8 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffb, 0x28c183) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r10, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r11, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0x7, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r13 = eventfd2(0x3ff, 0x80000) ppoll(&(0x7f0000000000)=[{r13, 0x142}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r13, &(0x7f0000000040), 0x8) r14 = dup3(r9, r12, 0x0) setsockopt$XDP_RX_RING(r14, 0x11b, 0x2, &(0x7f0000000140), 0x4) io_submit(0x0, 0x8, &(0x7f0000001fc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x4, r9, &(0x7f0000000880)="449b749d93cee197dfc70af65ce617d019e58110975aa96408a62673b4a2be6ced01c9110be4f1eb425c29b1c91e5713d2ce4065e6d4e8786ae62d3354dc06920792ba32dceb3062f875ffb57a8e39d15e45bcdd3d966aaffe050d13901d9699487144bb6514fbdcfbbf84965faccac63d44b9a2bcc168505871c45e6324899cdbdf150026461537cdcd4ff784afa8", 0x8f, 0x100000000, 0x0, 0x3, r14}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x2, r8, &(0x7f0000000980)="51eb85fc1acc370382d0eb780ec9b8ecfaba851798f449c2054eb2df9f16341582b08af1e7adcf52fb239fd3832eb5d6683f2305ce0cd6401901de5f5ec5b22281c497a2f6efe2fc2c95c196cc368a157b609d573aef760d6f7d1a5966cc8ef46eaeb01734d7350ba0a0d3f7ef947ddd486d05ceec41", 0x76, 0x9}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x2, 0x7, r6, &(0x7f0000000a40)="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", 0xfe, 0xf, 0x0, 0x3}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x8, 0x5, r7, &(0x7f0000000b80)="b61e551d34842ef7b0dda2f2666049d9361f32ccdec575b70cb5768cf93347366ded154a314cde9e9cf6a8d31bd556af3f37a74a0aa219a674d7b51b76c40f70698f5e7e51a7abcf6c223882b41c0c06a5a91636eb679ec62bbbf2e2bba550e131ced5fb3874cfbf69d89ac10dda338e7890ce2177e03a785a14157656dcb664f33777d5ba3a9fe5e2df677ec5ab9edcfe43950d84c34e52aeb2a9662b491e4a85e19a6b", 0xa4, 0x10, 0x0, 0x1, r9}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x8, 0x383, r5, &(0x7f0000000c80)="9bf9659fc62cf16ecd59569f81cfcd3a3d970ffccebd5c88229afdaa202d4e7bf3aefdf8e8fc1d96e1fb0270cd6bd7e29a2665ea9070d531be46afe187934b9b3266a18afce3f1ad6f64d3ccbabe2fb9a4336aa2d542077fcc4779b4594c959413f5dcaae58ca7", 0x67, 0x400, 0x0, 0x2, r14}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x8, 0x4, r10, &(0x7f0000000d40)="817c4ba74c9e3e662280153281516a6b30b586e01c88bbc8bc30cf7471ca694a03edf2bfd4bee084d9abf1c7c96200ef8170cf9887c1522e657a6d2870f7421f5232228a8a", 0x45, 0x2, 0x0, 0x2, r14}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x2ba137adbe813eee, 0x1, 0xffffffffffffffff, &(0x7f0000000e40)="37be617e527dc44ece637613baa201ed526884777836fbef61735516c9df22d19d69341878bc9c5c04dbe5767dafc873f298430eea4358dcc0ad28ff6f94703102308644d443d84504095f310f7b6976e7b6d1d9cc4b2ac8326d869ed8055f33f0bb607b86f55588326698c231230cf7e2c757cd4609bd7b469dbce8f39344128911407f11e08611334d4454ee00208a7d7d86f71e3297c67df42b3cda5dca533008d801aaa2d7ff9182352e2fa0724b4639813ad2d9616b4366808e4da6112da6e4d569a59897a7bb0026887eea575c28cec1d974ee282e5bff59a9e427a292442cf03063a06dcf6d484821d7e6404576b46a9c18d37b3dbfc4ef45c251502a73f33e9fd6279132c8f52869a8e2c80cb080dcab0433172f214e0f513143ae4801ec98e6001004b58a027913c98f200b8bf3a34bcd96dfe362d7a7966fbf9f740dd61113f121b4f3d6254dee2c60033e8b58d00714a27e15dc14062eee6b038c11e560f1071bc61d7630666f9bf69b402ff22b2de75dd7efaf985029320655ca3e91a9de6191a4efe1e827b8cce541b4765cdefb3d419a2a459df01a96f680edd1f631e043b4c7aabb599f10c982c83040a78379b07b1d031f17b55d8781742b126fca6ca230ec7bf934aa36306dc9c2244cbf96bcebec1f7657e272327c6da19be97f075bf039d07af93ec0cb653dd41496975c6119274decf50310dd08b5b5b7401db4a005c63b127ea5731e6d4317f3d6f32d2046f72aba894757ce234ff17da8c3fcfe3656a2b90ac95f59027a0005a3d8a886ae076dc333804b3e97aef8bfc4173f4f359b6933c2b7197f1b6ce615d0aef50f1665e6ceed1f7d0ed1e43afcecd72285d8f04d785227c0d0ef5855f4955cd927020a2890cc472f4ebdc838aa630aa4ea84b9dcca940fced9fb794763819f9321b96e659d09e7964c3d1643e5fca1b33e15869f34a4ceff95006c67a3a2d0fd2b6e7df91841f7771529b5b8eca023096f0503506ab8dae680937856f2693c10755fab3319b61d9eca757f53d464cbd07742fc1f6dbaabd1735206ea1e22e09d39f2b6b6c5a636191d96b86ddcec9741ff3818b8d0222433b15054fcef387bef8e027109a2920cf31a2f9be9fbc83f99c5b8eeb22ae111c641268078c03f8137eb2764b1a213b4ae86fb94be2cf6d43c49f47e74b50b5457327edc24ac29612f13cb735b2d2207796bd045e0d9536f841da1492ddcf757c860d7de95bbd998db569d08119b88a459037f375a428d7c5cea2cb7952b0adf10bf6fc9532b4eafd83bca681cb4722b7e8d7870871e749490b5d6ad458beaf813f74f7ba29cb504b555bc2b63b33ad2bd6b998c7e4c0494d718f28bf42a7eb0936eb16ae4ab18ce0a6747f4b2e9bae10cecd55db7e79b489da21a4f8d1b416ee9830b2af6afb35f0912116c41bd5dd542c7f340d8e04f022452009d721064b7009be6c6f915606648bc1d3c38d0857fabb5257b676bb9a51e207a7d6b3e4dc93c60e3f2c035ba5ffb84b2d764090c534342afc81b613f46dd2824f7dfabe0d38013c4d0a954c453355571426b69b91c3260e8349365c9dd0135d90686d9d29526e7afe839b6cd818fcb14cc04b6234e26ebafc85b3d7ed59712ac40c21c65e7fd5b7e7f3dfd1b35020bf1997ac9ab551ea76d678818438dfe0ed6339bdf6c8bab9afa5f8557cd6aa4a71abd7b33aa6707e5db8a778e73d88a8d4609a4b6dafaa3acc4ef8113a9ddbbd9231b1cc071aeff5136e91448b6bcb98e2124bf47f889ba08661dc038872f6a57117fec9703d8bb279a4f0ff350669e1f98b0a1e68b5d6a42345be37bb14d2d92cffab5b408dccd29519eb39a386ad54dc06da6f0aa6c003e2d7b6ed1a8ca1a7ecbae96215beb93b2df36c724018bd63e81d2451fb4ddc6964999e63d42dd7fcfdfdbbd86e2f9f116cc32ad95ec05526e6e29128d8eedcd83b4e423cbe1b96b03a6e3a818e5c5af558399e301f6674747bac6f7e5c7e9904d6b27899bbfb6c1be765ee2d5d1136ef9ef3dac34d1577ef78a654f851e03879d839213b17973a1ca813260bde6e5f77bdfdb38d9c6528746f14899738b72c8dec3714551274f2f279658a42d5a33fe22e41e310e8f05c8e891b94726a0816d6e1a8a1562f78ef783f63ed8317377163278ed3c35cd17e44104570ad68f17cf0aa23cebc4f706bc5a4afc64dbb848c804ceb2a8e70f8866201ec32434659b4a7e93364acb6843d21d42735761d2b759d69ce5630a19456c34cd59c9d88f456f9fdcd5e67a840a9de8aac38fa2f4f6a5b9d6227a36406630806d51eb213de295d7dcc5470dfc34c26faaa6fa980d39a2f2ff1b4fdc70ffd9e6801121f5e22225934743ce9e61f1ecfa1f1ed004390b2c3f158789c8e19cdfe5b6560ac2a9512632c99992708707adef39f5cf09a2506470d117f8dd8f7aa87ad0070b33520ccda6631991065b561e9b12f6febdc2b15e77a71faec427be61db6758740a14588f7da1221c4c439211b9820b82f37cbe29dbd5a2a259f0f69cceb6911d45bd1e111191fd4509a071bffffe808ab53e97fcab951aca5f9d81930363eeb23fd65cf58cf350c651c5cb628a3b3a8496e364ec8168a87e008822d1f34102bb4fea8cbfc0f45d1dea39849d7eb4baf0cdb04a6c09eeebc837e1222936994caa1aff5f39d914ba9d2b846ef9ff7b2205f3fe0b0ce676905f8078d28282dd5097a5050e78d06e6decf7a68b7da59417327ce175d405ca0e68d02a372f6ecc643e84e2ffa175d9fbc5cba6616cbec174ddecbc9a67f364762e7e76da751b194b835ef66fd41954f4e3d997fb7d4e5d7920f0f90262503f471b876ea29ed8620adbc6a752fec99f30ba6e7be87dd83a492d461d83527fbb4e57eda4c2899b1fd191a0f7045cad6ee9541bcc91c01e00174e042ab599f1eccad70c5c27b8b14797f415270675c01cdb6bf2aecca9295b081b0d72d47edaab245e56578db3f3448261241850d3060b7d0a768e7fa5c8321a342ec701bf38ad3093ea021ec5a2d5be9180e47f550f45dab0c03d9d7d7433fd276263c863088cbda1adb4eb8e17c3a0576a8f49899f1cc05bc8c34aefc4f634b2695c5ee415b5d177063d13c04bfe5eefc2c25015b1dbb089eddac81fda325b07337b87b9789753320532d6e1d90fac961bcf527144b8ac842bb3384a1fc114e491979862d334a4d154d971e1fe607e6f02131e95aa940ee67c795a9dbef7320e15d2d392135129f89c0b5acd332f440cd69744b51c184dbedff551b2c391efda33f15b742dc466c6e496740c91250c4aa110f85cfd0a7ed132627ac3cba74654b6c7857e1ce0cb9f92b010a81182d0123065025220fcc771a1e8684735ffc676dee3412ca9a9add6fa6c2b4e5c594f5ff14cd8125136f23a335cc11ec3236073cf17e02aea2a10394e42d1a0e063e53cfdbe58545658520e67781675ca5247363acf7bcaf1489ac1e3ea953e31c7b1849cf61c1ed872d2bbb18bdb917405ef2ba00d2e5a049da3e86a0f04ffb826dc760792b561ce32357fb7732cd65dfc15a09426db38e8d4182cfcfd35bb277059b9e99f1068d040219b78df5716761693fb5178e7245fb9fcdf10b3a9c8692335b7f01473496b0f16f59ffd77198ea70c31c970ff381a9247cc35b96a6ccc0e144dd0a3c574c822a7405ddf13c36a0b46fc43a373499b4425053fd5015225d5830cfc09c54f1e4c9b391b7a2de8e35baf1630b4b8810d6e54b416647203670690676de23fee9a92fec9a28b2d494f73a8538aa6e6caff1b0dfe965a1472665b17769bd68ca146c59502e81bebfbfce97ff3afd23d32ff7bb6a865f42b09b94db46c4e8ba282d66f52105063905d704cfbe04b9db554cc0906bdbdd0507d6733976f0f1f633e9fde4e6425088d7832b54e3fd9d0f6bded8bd4e233a2014399fd537f2fdeb07b55a930e1f047ecfab25c22c2154883251da1b828d98ba0a315d40656bda18d99ff1042e9bad9d384fbc52b683378ceece1be421b2775df51283b3e27001be244f0c71772806d038a2ee0f3a6e5680598a96df4fb19cec01223e97a480f62381dddaa2aa17f9a72bf4a57e398decf9bd9a04745374475486118276786ad756ad4995b2c33aa6717359456e1c459c8576db30058e25f1797bf6f5bbd49648302e3d47ded3f61111edf1aacb0ce3d2155a981126528b2f8c4fc7dccfbaf58b1255d2fc7ed5891ce3c600880c3924f90b74b2b84464c7d7bb2ecb7bfabec2c24b0068abf43391a7fee14a0c7a76687f04a4d68b0179ca6f7a96ddb18f24cfd32244d15409a3b5a4917cc96e1338e4eaaa9a2c3f06a13cb86861ec164e1bfb831665c98f05d6ab3b41d14a90500a663ecfb9136a3f8acf9bed88baad73b32fbe8d99c1f163ef98f534c3c4e3edbd24edb54cb1909f3146fb5292bfb8799dc45f5d0d5d9cb086cdb70e53729b7e4cbc1f78698d6da893b552863dbe37f0fd4ad521906e9b63ce434bc8ed709245931f7adad8467e02761ed14d4e344a9a4b2681e3c20905a41b6c173da01cab65800edd7cc9e28fa832c15626443b59db9acd7037073f51d4b80a3e0e1a7572de22c63103232cb837b03bd03d1a36799e830758f7e52dd294de9d8abc5015f6013369313eeaf2297bdda942ef25570b83e423d14919113feb2ffb792f2a5565a0ba11e3b6524c9cce8ff308653d1194a4e8219f12c7f111500ba775ce4f66abc442c5c6e8533659ead1b3a04328448407410c6c62b9b6f85071eb486370a41f9161502f2a5c727f3f9719b9197e539a1bd0bb0fe56a97449eae45c5cafdb881d4aaf24c91bee7791f3e2f77b13fb0b300da26d4e9186a818c3431428ac5ea10ee8424c7b3ffac52bd2645a140eb713474c594ddaf19e4b7e52a8cff19e02c4374f891b6db7e58d84565a858286feea45fe686326f4aa49539c02c68722ae9b9835987c72dc10ba3b5490f6ec42f9cfbfb390a1cde5cb8df8b7256bd43966fa495e41f8ccfc3152360bad01706a355d1caa77b996f6c32c0fd71fecb20e0c0120867b6392bd13a3792765f87b8e7071520a6452439894ebb62579cd6de75c51dcdd9e12d13d580458627e3629489bb616a971500c750ff2a9d7c79a2919d24cefa6fc001014934b8721ae155df4132333451448273fbb08c22f54bbb35d2ec76d300cb559a01999df5db66ae27a714069dc03e08b25b3ded5fca7961490bc000cd6708e69e0c829a1c5bc02ecb45735dd40e42a26175e11032462b8a6505cf5ef1a9a34a1a50aa73f93c25df91c998a5d14957fec4391b095f031cb6bb9afb5cf11bf60e9becb84d38ff12a2963052eaa6de2eb9678c5c7f61f894c85c44b1e28f1ab3d4e524cacb55aa43a3fb87e0f9efcc66035ec8c8c94edcd20db7134ebb51d974e86351fbeb03cec8250f6c3a9bbcc5d7fd405b330eef9cb46d923e69d537e6e758576641867bae27d9f104ff63a0c522d91231a8152423a29fc2aa7fcc94c3d843fbc97a7b0846cf68d7e898a8a31e41092a22892fe87d94008024b6e2ed5644fad4c0988f0c160da0e84767815f049fee2d9b22f9a99d5124ed8e42d8496397266bf8b518bf037acc899d8fd751c9d37b905504d31bf79433af7f5504bf243d6d0ee3f520b74c0f34f8c89feb3facb988b4a19549124ef1e0dd5a5b7d50c395e9adaba23a478e8addf67c5dfc2717e0ef17067e34717a31ad688041316edba5d2a903ef19a5b7a9d5b3cd8936a813e852fed9ecaff5d2995d9427cb55f281734171b7910e3ee72", 0x1000, 0x30cd8d958, 0x0, 0x3}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x7, 0x7ff, r12, &(0x7f0000001ec0)="80a911069576cda645a1b9647f55cf78749d799328a7e84238bfad6a8fcdc16bd65256b4021a3b3add0a9118d0fe5aea8ffad6f6e645e776b13529538b60c59be5c8a4721dae4b4d51d76fdfd5d7374d1b29955f3b6b168cf601815f3073517d54f72ec0b02438a5e4f8b2488ed1997e150e94d9edc5844db88f1f4c0efd3d9c67d1b63300e8eeb99908a8041990ce2ebde154fa18e07589a2", 0x99, 0x5d, 0x0, 0x2, r14}]) ioctl$SW_SYNC_IOC_CREATE_FENCE(r14, 0xc0285700, &(0x7f0000000180)={0x0, "b152fdba0ca7cab1f71510721db37677f17fb4ab89219d05a19d5b8cca82e254"}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r2, 0x1, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) 1m47.272097505s ago: executing program 2 (id=5168): socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2092) syz_fuse_handle_req(r0, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x16, 0x0, 0x0, {0xfffffff7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x38, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x110, 0x9, 0x8b, 0x5, 0x26, 0x0, 0x0, 0x80, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x78, 0x0, 0x20c8, {0xee9b, 0xffff9575, 0x0, {0x5, 0x7, 0x8, 0xd0d, 0x6, 0x70000000000, 0x6, 0x1, 0xe, 0xfff, 0xffff, r2, r3, 0x6, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r8, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f0000000240)={0x1, 0x1fffffe, 0x2, 0x80000000006, 0x8000000000000000, 0x100000001, 0xc, 0x0, 0xfffffffffffffffd, 0x1000000000004, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = epoll_create(0x7fff) r13 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000000)={0x8}) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000100)=0x21f0, 0x4) setsockopt$sock_int(r10, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) recvfrom$packet(r10, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(r11, 0x8906, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1m46.028358298s ago: executing program 2 (id=5172): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r2, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) capget(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000180)={0x7, 0x8, 0x6, 0x8, 0x1, 0xffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000340), 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x303}, "668f4918bdecc7bf", "a590d6cbe29665fffe6115bb3dbf924c", "c8beb772", "c8f6140f4d4f5b4c"}, 0x28) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x2081, 0x0) write$uinput_user_dev(r5, &(0x7f0000000540)={'syz0\x00', {0x6, 0x3, 0xb, 0x5}, 0x50, [0xfa0, 0xc, 0x401, 0x8e8, 0x7, 0x3, 0x5, 0x5, 0x5, 0x10001, 0x2, 0x0, 0x1, 0x3, 0x707, 0x2, 0x7, 0xffffffff, 0x0, 0xe82, 0x5, 0x4, 0xc959, 0x9, 0x9, 0x100, 0x0, 0x7, 0xffff0000, 0x66, 0xa, 0x1ff, 0x1, 0x5b, 0x7, 0x2, 0x2, 0x7fff, 0x6, 0x1000, 0x5, 0x1, 0x1, 0xfffdff81, 0x3, 0x6, 0x3, 0x6, 0x9, 0x4, 0xe5, 0x3, 0x7, 0xfffffe00, 0xffffffff, 0x3bf, 0x5, 0x2, 0xa, 0x1, 0xa, 0x1, 0x7f, 0x8], [0x0, 0x80000000, 0x0, 0x5, 0xc31, 0x516, 0x0, 0x4, 0x8000, 0x3, 0x5, 0x7, 0x227, 0xfffffff0, 0x1, 0x92f, 0xccc4, 0xdf, 0x5, 0x4, 0x6, 0x3, 0x3, 0x3, 0xff, 0x5, 0xfffffff9, 0x3, 0x5, 0x6, 0x4, 0xb0d, 0x101, 0x1, 0x6, 0x6, 0x2f, 0x6c7, 0x0, 0x1, 0xf, 0x4, 0xffffff92, 0xa4, 0x3, 0x0, 0x5, 0x6, 0x0, 0x5, 0x935, 0x0, 0x2, 0x800000, 0x3, 0x8, 0x8, 0x2, 0x8001, 0x6, 0x3, 0x6, 0x5, 0xd50], [0x6, 0x3, 0x3, 0xe, 0x9, 0x7, 0x1, 0xfffffffc, 0x0, 0x4, 0x1000, 0x1, 0x7, 0x4, 0x2, 0x62, 0x5, 0x8, 0x0, 0x0, 0x1ff, 0x3, 0x8, 0x5, 0x3, 0xcd3, 0x7, 0x9, 0x5, 0x8, 0x2, 0x40, 0x13, 0x727, 0x7, 0x6, 0x6, 0x8e27, 0x1, 0x52, 0xc, 0x1, 0x1, 0x4180, 0x1ff, 0x7f, 0x7fffffff, 0x9, 0x8, 0xfffffffe, 0x1, 0x4, 0x4, 0x0, 0xd, 0x11, 0x8, 0x2, 0x7, 0x101, 0x3658f834, 0x2, 0x400, 0x1], [0x2, 0x101, 0x96, 0x8, 0x9, 0x1, 0x7, 0x7, 0xdd, 0x3, 0x5, 0x5, 0x10000, 0x7, 0x8, 0x7f, 0x4, 0x1, 0xa07, 0xd, 0x6, 0x4a88, 0x6, 0x9aa2, 0x6, 0x2, 0x0, 0x372e, 0x0, 0x200, 0x7, 0x7fff, 0x400, 0x9, 0x80, 0x95, 0x0, 0x7, 0x3, 0x3ff, 0x6, 0xfffffffb, 0x7f, 0xe98, 0x6, 0xe, 0x10, 0x48, 0x10000, 0x5, 0x7, 0x1, 0x800, 0x0, 0x1, 0x7f, 0xa, 0x8, 0x3, 0x7, 0x401, 0x1, 0x6, 0x2deedef9]}, 0x45c) 1m44.407032336s ago: executing program 2 (id=5177): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x8) unshare(0x20000400) readv(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') pread64(r3, &(0x7f0000001c40)=""/4075, 0x1028, 0x47) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000006010000000000000002003e000000000003000000000000004000deffffffffff970100000000000000010000000038"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00283a0020010000000000000000000000000002ff0200000000000000000000000000018900907800000000ff020000000000000000000400000001fc0100"/94], 0x0) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x34, 0x66, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0xfffd}, {0xffed, 0xf}, {0x1, 0xd}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}]}, 0x34}}, 0x1) 1m44.221569718s ago: executing program 2 (id=5178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x94}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r1], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000001c0)={'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) connect$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x1, {0x1, 0xf0, 0x4}}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m28.994325784s ago: executing program 33 (id=5178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x94}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r1], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000001c0)={'pimreg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) connect$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x1, {0x1, 0xf0, 0x4}}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 10.036124748s ago: executing program 3 (id=5540): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0x2, 0x7, 0xff, 0x2}, 0x16, &(0x7f0000000180)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xd8, 0x7f, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xc, 0x5, 0x9}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x407}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "428b7e1c411bb57e66a88a7021a774e2e0a70879b15c8958774a022dcf08cf5e68468f4204321c627e482a912a2d75840fd9da04a41a6c7e60"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x280a}}]}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) r7 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000000c0)) ptrace$poke(0x5, r8, &(0x7f0000000080), 0x0) 9.682369134s ago: executing program 6 (id=5541): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000040), 0x0, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000092e59e208c106901b9750102030109022b0001000010000904db00020dfa00030915800000e600fc000705db224370bf09050b02"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00030400000004038204"], 0x0, 0x0, 0x0}, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) io_setup(0x8, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') getpid() syz_io_uring_setup(0x8323a, &(0x7f0000000380)={0x0, 0x7279, 0x40, 0x40003, 0x142}, 0x0, &(0x7f00000001c0)) 6.85571022s ago: executing program 3 (id=5555): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x1f, &(0x7f0000000600)=""/183, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x10}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}]}, 0x34}}, 0x0) 6.529781545s ago: executing program 6 (id=5558): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000005, &(0x7f0000000600)="01", 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 6.348429399s ago: executing program 3 (id=5560): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000188918eaee72cf2d7000000000a20000000000a01010000000000000000010000e40800010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000002c0000001c0a01040000000000000000010000070c00024000000000000000010900010073797a30"], 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) epoll_create1(0x0) (async) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x10000014, 0x28b, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) r6 = creat(0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x3, 0x462, [0x200000000480, 0x0, 0x0, 0x2000000004b0, 0x200000000646], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x0, 0x9300, 'bridge0\x00', 'veth0_virt_wifi\x00', 'ip6_vti0\x00', 'vlan0\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff], 0xae, 0x116, 0x166, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x8, 0x2, 0xd, {0x9}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}, @snat={'snat\x00', 0x10, {{@multicast, 0x10}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x800, 'syz0\x00', {0x1000}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x9, 0x1, 0x1c, 'bridge_slave_0\x00', 'vcan0\x00', 'gre0\x00', 'ipvlan0\x00', @link_local, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [], 0x9e, 0x10e, 0x15e, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x6, 0x1}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0x1}}}, @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}], @common=@log={'log\x00', 0x28, {{0x9, "ec8ecd080a707b4d1624008926974fe7193c723838d06fd974125dfdd882", 0x8}}}}, {0x0, 0x2, 0x6006, 'macsec0\x00', 'veth1\x00', 'veth0\x00', 'ipvlan0\x00', @empty, [0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0x0, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x4da) (async) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) (async) close_range(r3, r9, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 6.089048319s ago: executing program 6 (id=5562): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000082ffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5.884107922s ago: executing program 6 (id=5563): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000021c0)=ANY=[@ANYBLOB="1201000052395310410e5750ad06010203010902120001000000000904ed0500eb24e0006c2bfb01e5998794d1b3d5204864879e089c0fab18f4bc2d26fb186f2cbea2d440ea6518168c4da4924d09e4ad63b03948efece0fa70d8d407ce636fa89c17c82d09c01d6306756bd12e37bb8b947fb466b4c6682aef52422d13644d8b7871f4267cc53d0b12cb5f51d00165615d9bf73d"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x80000001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}]}, &(0x7f0000000140)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xfffffff8, 0x10000, 0x1}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xc, 0x0, r0, 0x80, &(0x7f0000000240)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x1}}, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) epoll_create1(0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r8, &(0x7f0000002180)=ANY=[@ANYBLOB="1001000000000000", @ANYRES64=r9, @ANYBLOB="0700000000000014"], 0x110) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/213, 0xd5}], 0x1) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r10 = io_uring_setup(0x5ef3, &(0x7f00000002c0)={0x0, 0xe6c, 0x2, 0x1, 0x8000001}) close_range(r10, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000040), 0x84080) 5.217451777s ago: executing program 1 (id=5564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfec2, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000140)={r6, 0x2, 0x2f4e, 0x200, 0x6, [], [0x0, 0x0, 0x7, 0x4], [0x1, 0x3, 0x2, 0x6], [0x4, 0x7, 0xa, 0xd8]}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r3, 0x100000000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="0fc7a8000064672e360fc7bbe5000000f3ad66b90c0300000f32440f20c0663501000000440f22c00f20563ed8cb0faeee660f5aab0038baf80c66b02c27c38166efbafc0cb007ee", 0x48}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf7, 0x79, 0x48, 0x20, 0x458, 0x7005, 0x1a51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x2}}]}}]}}, 0x0) 5.095243862s ago: executing program 5 (id=5565): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='\x00', 0x1}], 0x17) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x5, 0x2, {0x2, 0x1}, {0x49, 0x2}, @rumble={0x200, 0x2}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) r7 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80300000000000000ffff94d4ff000000000000d63175a60600", 0xffffffffffffffff}) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f00000005c0)={"6739669f274d13b6910000000000000000000000d02acecdc67c6d3126628168", r8, 0xffffffffffffffff}) r12 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0xa8642, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r12, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700"}) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f0000000240)={"1acc00d331000000e3c918040d8b7500000000000000001d0900", r10}) 4.572514838s ago: executing program 3 (id=5567): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4.369939484s ago: executing program 4 (id=5568): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7e, 0x20203843, 0x3, [0x2], [0x80ffff, 0xfffffffd, 0x0, 0x6], [], [0x9, 0x0, 0x0, 0x1000]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) (async) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7e, 0x20203843, 0x3, [0x2], [0x80ffff, 0xfffffffd, 0x0, 0x6], [], [0x9, 0x0, 0x0, 0x1000]}) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) (async) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) (async) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) (async) 4.19646964s ago: executing program 4 (id=5569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000600)="9d8d", 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000080)={[0x2, 0x5, 0x0, 0xff, 0x7, 0x5, 0xf9e, 0x7be, 0x7, 0x5, 0x400, 0x2, 0x1, 0x1, 0x69, 0x6], 0xd000, 0x20206}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x1, 0x40000000000, 0x0, 0x0, 0xffffffffffffffff], 0x6000, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.376469632s ago: executing program 1 (id=5570): r0 = getpgid(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket(0x22, 0x2, 0x4) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0xffffffffffffff0b, 0x0}, 0x2141) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x138) (async, rerun: 64) write$P9_RGETLOCK(r3, &(0x7f00000002c0)={0x23, 0x37, 0x2, {0x2, 0x6, 0xffffffffffffff81, r0, 0x5, 'fuse\x00'}}, 0x23) (rerun: 64) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "d578316284b401a5", "d5f5a46bdcd72c84b978f91d0ef48432", "a188b1ca", "fa5f29287f15bb7e"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) (async) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000000200)='\r\x00\x00\x00', 0x4, 0x117}]) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) (async) write$binfmt_aout(r8, 0x0, 0xffffffdb) (async) ioctl$KDGKBLED(r8, 0x4b64, &(0x7f0000000140)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x18801, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchownat(0xffffffffffffff9c, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x1000) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x319, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xe0, 0xf8, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0xd5e, 0x4, 0x1, {0x22, 0x79a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x4a, 0x1}}}}}]}}]}}, &(0x7f0000000580)={0x2, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x0, 0x1c, 0x2, 0x8, 0xfa}, 0x142, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x4, [{0x8a, &(0x7f0000000840)=ANY=[]}, {0x4, &(0x7f0000000340)=@string={0x1c, 0x3, "21eca945fe744fcc7f505dc45dbd8c4086c50856be3825c278df42d1c99ef2219a1c4df730ad8ff484b6f3cc9fa546a10811c8ee5104ee6215c5b8b18750545ef9c5c32609f2dd32a8dff2a528b849739245eea883416b02930bcf0173af1060e84009b9b77a4e64a702021f58030a4b"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x413}}, {0x94, &(0x7f00000009c0)=ANY=[]}]}) 3.153827103s ago: executing program 1 (id=5571): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)) 2.820705711s ago: executing program 1 (id=5572): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x4206, r0) ptrace$getsig(0x4202, r0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1477, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) tkill(r0, 0x13) (async) ptrace(0x4206, r0) (async) ptrace$getsig(0x4202, r0, 0xffffffffffffffff, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1477, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 2.819328695s ago: executing program 4 (id=5573): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0xffa1, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.819085818s ago: executing program 6 (id=5574): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2.375249017s ago: executing program 4 (id=5575): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 2.199153779s ago: executing program 3 (id=5576): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x2}, &(0x7f0000000140)=0x28) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0x82) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, 0x0) syz_io_uring_setup(0x8d9, &(0x7f00000000c0)={0x0, 0x100002, 0x3010, 0x1, 0x377}, &(0x7f0000000040), &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r9 = openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r6], 0x4}}, 0x24000000) sendfile(r10, r9, 0x0, 0x100000002) 1.720823807s ago: executing program 5 (id=5577): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)='6H', 0x2}], 0x1, &(0x7f00000008c0)="e2", 0x1, 0x40}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0xc0, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x4a, 0x7, 0x1, 0x0, "c15b01dcbf16906a5789a7c2e81d845d9863658529757e4596cff37e4f3d97b634d15a95595e6e4a35eb9ba8ea6833fe8cad7a5edb07451c9f1b32e74839d243f9a65546c5b4"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xf, 0x7, 0x1, 0x0, "a14bc96d5b2f4ae3d3a576"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x2234, 0xe, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1ac4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x7c, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3ff}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1714, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x1710, 0xb, 0x0, 0x1, [{0x157c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x156c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_TO_DATA={0x107c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_FROM_DATA={0x118, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd9, 0x1, "4429f58ba76ef5392bb60cc11b1088b7a452ba606654ef5c23d6021c4d0c4c5d9d807a7ad61a6a10910f58adbe9b52bf780a6e66887fe049da3f1ec2720078eba1211a27b8add70d2d5acbeadad9a341f66ccc84251f95edd1bfa15fd5710373a58b629d79707ada367fa95f861498cb221cfb53d84c4286432fbac84cfde69b2ab1ce46ba13c31708b49c555cc7b90f3e3d0a19dd05e1332f9d2e00d7ee110dd1c8dfeff80117bddced96c88dbd64f53bb48ea4d43f1e2910ba47a31a7c6f28b9bf7570ca373db1c7a74df3aa85ce32c9489743da"}, @NFTA_DATA_VALUE={0x22, 0x1, "77ef9ae745793380a5a2ec8cd37db7d02ed38ef9bf84caaabf91c51fcf9a"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RANGE_TO_DATA={0x10c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x81, 0x1, "536c4219f908c885df320cf3be628d63db447b9cfe5db8ada7289c29fe06b5d051ca47d94c00df0ed79702a9fcb16e39f265b2313e1057aef2beff7c5ec7a2a01e7788375aed1105d76af942c69bf863722548c94b5c85d8e39f62982fb14b87d519ab6dca9689a7b3a20d9dd47ca2aa72341926f26e1e9b36b6d63704"}, @NFTA_DATA_VALUE={0x3b, 0x1, "3558ded4b6421b1ba28c3f9cac3f0ee2c1ccc16ab5839d2d32aca2da46eee076fe559a4955f076cf80522a923cf318f133b129e5709c99"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x28, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x21, 0x1, "b22cb1a03951e5a76046b8580b5d40375280659be0020da9fa199d68ba"}]}, @NFTA_RANGE_TO_DATA={0x288, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "8d1ed640c35f9576e3b9958ea0d47a33cfd66f48b96b6322bcf76dd00dcda96de865eb5be24e59ff0abf2ae356be51b6686d4abdffd65bc5"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "0b32ffbdce7d975d88143a39120354711cf2909e4d6d741ffedac3e47e47a21a66bbf0109815fa7c844b3d74c35910371ae9fdc2524bfb6889bb6aefdaac18e98cbd8950391d6c382a0e57adec11fad88e9e0905f7a5e420def4d13333c46f293931ce3011053046a093d3c8cab43d6297300deb691f6d2a6e7c88393b09f58ca7244637f7f9f8389ef6c4e7a3d5820c5f551d95755cec212a4c45021f27bff0dcc57ea73d50d279de545aa2f0ce6758e1d14f07b806719c83072c18be53660ab0c358fada47592dd3660723a7c92f51cfdc1a"}, @NFTA_DATA_VALUE={0x8, 0x1, "f5b51f74"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x60, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x4c, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}}}, {0x50, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x22}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x54}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xe}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x11}]}}}, {0x64, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xc}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xb0}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x80}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}, {0x2f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x15c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4f, 0x1, "c8345d8019736a38553d445099917db0e1c042e322f2436b408d28ce31d1f2e4b297ad293438a3f3181ee814ee98b3c8fd5122a8bb2ae9e462c696786dd3548a9f0a08359d0088608f12fa"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "102b2c6ac99724024dd424bad734bdac81fc63650e46"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x32, 0x1, "f7a4334f527a5cc0c808e09c4e557738c57763160a6b8a82d242fc97b4be698e9b9f307c3fd1ed12ae76102e69d9"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "8bf91b86bea8bb0be41249e7f31a826f7aed49831a5da54fd7751fb3c2241531afed7296d3665b48d0"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x744, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}]}, {0x128, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xf5, 0x6, 0x1, 0x0, "6d4555853cd74b8c276112dc5ce8b37899867221b5552fcf49bb7bc24a60f2f31bb364d1ed196ae16ba08a6403536a4d6a05ea0ac19fb9e60382baf683090cc1d1d78feec6177704495f6f157d40b811b947e0a33661b49b5b35528cd19497059f82dd871c1e7b082e3d39a8c8adbbeeb2a4f11939f4b3a93080d0e44bf58143e54cd11133cd425b8fbf1462dd049c6170c106822f45effed6b34b435e7ae6ffb93ce91a0e3a9cd200f4a5924ec78cfe1f30f2f42564a2fac5e5a48c833fffb15b06a77b3d79209732d6cf78d570c370489142717831b3d94c4f35fdbb087d02d29236e3f086407287ff71e5fcf25ce7d7"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4a, 0x1, "75c55e84eb7445011b8f84bb766aa93fdc7584e1eb7e29207b6c990b06b0f7d43fd02995d20faf48a7a7a820f1131455f67f837ce632116244af9259f0da3fa101e2a2252b31"}]}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_KEY_END={0x1b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VALUE={0x41, 0x1, "3a6f05660c490d4fff3630f34dda8614a7ce56280179e8c9500780ffdaed3b5989fc4be2844ad5823e01f087a9e5dd6760b57f6171d5e14b15df67d987"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x71, 0x1, "6676502dafbb7a8102e1a7bcfd5a84f8d8f6ae2f8309d387d65bf6b626b8331e35dd63aff5b2c3e13a544d4f8130ca7a93a7eb64212a1d4947d970f58145726724b41900a46983eabc918e2b9e9b32cc366b304fc5447914f54c786cc8b8bc98420e4022b633864e75e1f3695c"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x238, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x180, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x52, 0x1, "4d7cc94b4db8b6f3863835643ab62157458e8a314a884e641e4b970d2dec2eb300ef059939a0a54880a90d5ed6df45511bddf4318ba84c9a75f5046a20dad3e6969b6ce1fd638841faf84087d193"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd, 0x1, "259d0e5670a7fccc50"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "472acfc11b5faf464762af911ee0e48135284ce6521b74b016057f0d58593c3711686efd65"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x79}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0x58, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x46, 0x1, "d3bed42cd65099187eb7c434eb15bde0966ba366f05cdff28eec386e58e20c0cadd5657da1b5c5cfd546b2661c3893e0fb031662e34b65f3fbcc996df857883a34e1"}]}, @NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "c8895ed01d698f6e35e91311b01f0a57cd3fc8403f314dd77c72712ff481c1d92ff2b492d943c5f013f77313538343a28bd3ea3cd8eadebc45184dc174c86ca56d655649579da900863631d25e94f29ae5"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x231c}, 0x1, 0x0, 0x0, 0x80}, 0x4040001) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f0000002700)=[{{&(0x7f00000000c0)=@ax25={{0x3, @netrom}, [@rose, @remote, @rose, @remote, @remote, @null, @null, @null]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000240)=""/113, 0x71}, {&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000001c0)=""/36, 0x24}], 0x6, &(0x7f0000000740)=""/229, 0xe5}, 0x2}, {{&(0x7f0000000840), 0x80, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000001980)=""/212, 0xd4}, {&(0x7f0000000500), 0xfffffff0}], 0x3}, 0x2}, {{&(0x7f0000001a80)=@tipc=@name, 0x80, &(0x7f0000000900)=[{&(0x7f0000001b00)=""/217, 0xd9}], 0x1, &(0x7f0000001c00)=""/148, 0xffffffffffffff42}, 0xffffffff}, {{&(0x7f0000001cc0)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000001d40)=""/168, 0xa8}, {&(0x7f0000001e00)=""/16, 0x10}, {&(0x7f0000001e40)=""/163, 0xa3}, {&(0x7f0000001f00)=""/203, 0xcb}], 0x4, &(0x7f0000002040)=""/236, 0xec}}, {{&(0x7f0000002140)=@nfc, 0x80, &(0x7f0000002300)=[{&(0x7f00000021c0)=""/41, 0x29}, {&(0x7f0000002200)=""/223, 0xdf}], 0x2, &(0x7f0000002340)=""/134, 0x86}, 0x77}, {{&(0x7f0000002400)=@un=@abs, 0x80, &(0x7f0000002600)=[{&(0x7f0000002480)=""/221, 0xdd}, {&(0x7f0000002580)=""/119, 0x77}], 0x2, &(0x7f0000002640)=""/148, 0x94}, 0x6}], 0x6, 0x10100, 0x0) sendmsg$nl_route(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x6c790d25}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 1.307249845s ago: executing program 4 (id=5578): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE(0x2000000000000024, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ea502130be8371df1604cbbca11862068613e846e9139867bd14552a4b7986b732834c83db9cee2591f2d0c1d82cbfd5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x408, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300001d00008000000000000000000400030000000000000000000000000000000000000000000000000000000000050006006c0000000a00000000000000fc01000000000000000090e036d332000000000000000000000004000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000030000000005000500008000000a00000000000000ff0100000000000001000000000000000005000700000000000a004e2200000400200100000000000000000000000000010200000000000000020013000100"/232], 0xe8}}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100000000000000e2000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r6, @ANYBLOB="080003"], 0x80}}, 0x4) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="690af4da50ea62d2852a4907bee6ce61fc36a8c367c1028196a7b07c0f7fac4e6af6034f2eb8037fbfa12d72ce68c019365b5b447c36a68b11c35f37b79201952a76f41d75f174446a5e83ffa8c9f15b2feff994dbba6c72ed40eb7814bc041d46f1f561", 0x64}, {&(0x7f0000000180)="072a1522f66555cb10", 0x9}, {&(0x7f0000000340)="dd272b26c8cd08adb1525174fb49c47b2c991a9d83256854a7d2fff6c86b2cfbed60fc6c3f0d12593204e2d1ce813c2718341f14cc7da85dc836e66486c432674f9480f4ce0ed869b1300f318bae22f7701a619bb5544929e7ff5b451643aca47174a460e2f0052b68a866675868f1415ba5540937d251367bc8c56a48a685e3471f2d43fef3b1748307c95976ab91c90a695ea9464b9d9c0c155e3b38edfe88b0d2fbfeaa597b2009d8896094f3212dfdc90760c8d6ce1e40826f577403ee9343a64b84885ad72731d8fc75c76fd4", 0xcf}, {&(0x7f0000000440)="8ee1a8a775c70665ef1c8b3e7189fba0eef42e74dd01920c1f76720d93f87f49fda88d5af1ca8193ed579de43e7fa734a3c5a29c1806a642d03f813c6a6c9bc92ebe3b781a312b5e07e57db036d337f4616707d0816d4acdf3761ac062c8753da48b1b1b23d0a885f1358e41ccf5e1a81f9ab7ab7756bad56c8ee5", 0x7b}, {&(0x7f00000004c0)="9347a1b5bc195de695478471951b525d8e87377fd305ddf0f25488816830dd44559c8200b24175b85a714795c96f7fe802ba67e89bc8b28709ad7461b1f50afeb82afcbb21e4569f903ea60ce21806dab0b892ffe4d2c94b91abf5488c5a1ebc0c21b1120276151c", 0x68}], 0x5, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x50, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x55, 0x3, 0xf, [{@multicast1, 0xff}, {@private=0xa010102, 0x9}, {@loopback, 0x1bd}]}, @end, @end, @generic={0x89, 0xc, "4b7f3e340a6dda013f3c"}, @lsrr={0x83, 0x7, 0x76, [@local]}, @noop, @timestamp={0x44, 0x8, 0x32, 0x0, 0x7, [0xfffffff8]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x9a, [@local, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}]}, @timestamp_prespec={0x44, 0x54, 0x70, 0x3, 0x9, [{@private=0xa010101, 0x8}, {@broadcast, 0x9}, {@loopback, 0x1}, {@local, 0x7}, {@multicast1, 0x1119}, {@broadcast, 0x2}, {@private=0xa010102, 0x100}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x3cf}, {@local, 0x1}, {@loopback, 0x73}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x86, 0x0, 0x3, [0x1, 0x3fb621ab, 0x5, 0x2]}, @noop]}}}], 0x190}, 0x8004) semop(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x200, 0x81) 1.040441251s ago: executing program 1 (id=5579): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001a00010000000000000000001c140000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0xc0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000002, 0x5d031, r1, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x714f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f0, 0x160, 0x348, 0x348, 0x248, 0x248, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@dst={{0x48}, {0x4b, 0x4, 0x1, [0x0, 0x8000, 0x0, 0x0, 0x4, 0xb, 0x0, 0x2d2, 0x2, 0x2, 0xfff, 0x401, 0x6, 0x7, 0x4, 0x7ffc], 0x6}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x9, {0x1ff}}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1a, 0x35, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 1.019369612s ago: executing program 3 (id=5580): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) (async) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 32) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000080)=0xfffffffe, 0x4) (async) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async, rerun: 64) r4 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2a4, 0x30, 0x800, 0x71bd2a, 0x25dfdbff, {}, [{0x290, 0x1, [@m_gact={0x170, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ae8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65d6, 0x1, 0x8, 0xb, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12c5, 0x20000005}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x0, 0xbd1c, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x583, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xaeb, 0x20000000}}]}, {0xe1, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x38, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xb4, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x141, 0x7f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x2, 0x6, 0x50, 0x8}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x1, 0x7, 0x187e, 0x8}}]}, {0x35, 0x6, "644cfabbe56830b72d4965b0f9c601f7e7e0a9dc5e0e1b03f719e150808ef459921b7b7a784878285ded9060f2020ae329"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) (async) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da144f"], 0x0, 0x0, 0x0, 0x0}) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r3, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) linkat(r10, &(0x7f0000000380)='./file0/file0\x00', r10, 0x0, 0x1000) (async) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r8, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) 743.895189ms ago: executing program 5 (id=5581): r0 = io_uring_setup(0x18c9, &(0x7f0000000000)={0x0, 0xf529, 0x4000, 0x0, 0x325}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r0, 0xe1623000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f00000000c0)) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000100)=""/115) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000180)) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002240), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000023c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002380)={&(0x7f0000002280)={0xe4, r3, 0x22, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdfb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20}, 0x8000) mknod(&(0x7f0000002400)='./file0\x00', 0x10, 0xffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r1) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x28, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x40008880) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x20, 0x1405, 0x1, 0x70bd26, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x20044001) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000027c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000002780)={&(0x7f00000026c0)={0xa0, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x8014) io_setup(0x4, &(0x7f0000002800)=0x0) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000002840), 0x2, 0x0) io_submit(r7, 0x3, &(0x7f0000002ac0)=[&(0x7f00000028c0)={0x0, 0x0, 0x0, 0x5, 0xe77, r8, &(0x7f0000002880), 0x0, 0x3, 0x0, 0x3, r1}, &(0x7f0000002940)={0x0, 0x0, 0x0, 0xe, 0x5, r6, &(0x7f0000002900)="bec562a3c89d4eb592797b78fd740e75123cd6606457c031e62b180dee4d353cdd338d6b3882b4", 0x27, 0x9563, 0x0, 0x2}, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000002980)="c80d4d234a160a0abf5b64c0d0e5c3b33d177707815348a269f731c0a9be49699859303163d575cb182d9ab37a0bd0bf4d62e4fd98a96f0c1cc6fb1702123f223efedb143e60ea9bc2b2b675693adf75e2e25283bc05a280bffadf3e3457cfc0a03e13bbd53859625b3fd8113adf0d80a317579288255443cfaf4e91ed3776302407cb3e6d4cd36a61108f44af929c5e8de5c2283d54c19087d7cca152ddef56676caa485c74dcdd667ee152a5e6f2c629ff537f2e6b825cb2b56174abef377673eb577f045d51aeee7604dae1879bc7c4255e6e86a2c18b57e9bfa40ef1de70eca5f4acbcc84ee88540403e18562e5774e559b02e477b", 0xf7, 0x3f800000000, 0x0, 0x3, r1}]) ioctl$KVM_RUN(r1, 0xae80, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000002b00), &(0x7f0000002b40)=0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000002b80)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000002d80)={0x79bb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "37bb5d74b80b34"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000003d80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00001107c0)={0x3ff, [{r10}, {r11, r12}], 0x5, "d4afd813b4f6cb"}) 508.40858ms ago: executing program 5 (id=5582): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8000000, 0x1) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) r1 = dup(r0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) recvmmsg$unix(r1, &(0x7f00000000c0), 0x0, 0x40000160, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101400, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000540)={0x4, 0x1, {0x400, @struct={0x8, 0x3}, 0x0, 0x3, 0x5, 0x3, 0x2573, 0x2, 0x10, @usage=0x7a9, 0x26eba2fe, 0x3971, [0x35, 0x5, 0x4, 0x8, 0x8, 0x9]}, {0x5, @struct={0x8, 0xd}, 0x0, 0x7, 0x0, 0xe, 0xff, 0x10d4, 0xc1, @usage=0x8, 0x4, 0xb68, [0x9, 0x2db1, 0x1, 0x8, 0x1, 0x3e27]}, {0x5, @usage=0x7, r4, 0x9, 0xc, 0xfb63, 0xe0000000000000, 0xfff, 0xd, @usage=0x9, 0x4, 0xf1, [0x214a1ea9, 0x0, 0xf112, 0x2, 0x8, 0x400]}, {0x7ff, 0x0, 0x3ff}}) flock(r3, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@gettaction={0x24, 0x32, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x994}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r1, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl2\x00', r5, 0x29, 0x8, 0x8, 0x100, 0x3, @private2, @loopback, 0x0, 0x80, 0xe3e9, 0xbf13}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000c00)={&(0x7f0000000bc0)=[0x0, 0x0], 0x2}) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000c80)) close_range(r6, r3, 0x0) r7 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmat(r7, &(0x7f0000ffb000/0x3000)=nil, 0x2000) r8 = semget$private(0x0, 0x2, 0x8) semctl$IPC_RMID(r8, 0x0, 0x0) write(r2, &(0x7f0000000cc0)="9f374494d884c62de75b2cbebc899a63a15ebf3102aa800fd771b1bd70a70114d990734d2e5e12256a4e20c70d5ab7e456ccff811551d6cf09b953139ff5a660d2a939dbbf42d00283ea9e7e0760fdb4c322449e18ee74ea775898e91209ad33f88d058afee271287c115d0cd2d402d008611e44456005f9654505f3a14b718792edde09115cabfc3c1b", 0x8a) shmctl$SHM_UNLOCK(r7, 0xc) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000d80)={'ipvlan0\x00', 0xc}) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x725, &(0x7f0000000dc0)={0x0, 0x946c, 0x20, 0x3, 0x38a, 0x0, r1}, &(0x7f0000000e40), &(0x7f0000000e80)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000ec0)=@IORING_OP_FALLOCATE={0x11, 0x48, 0x0, @fd_index=0x9, 0x4742, 0x0, 0x0, 0x0, 0x1}) r10 = io_uring_setup(0x5468, &(0x7f0000000f00)={0x0, 0x9984, 0x2000, 0x3, 0x19a, 0x0, r1}) io_uring_enter(r10, 0x2bc9, 0xc7d, 0x13, &(0x7f0000000f80), 0x8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000fc0), 0x80101, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x9ab80, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) 391.733984ms ago: executing program 5 (id=5583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 186.483276ms ago: executing program 6 (id=5584): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) (async) openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x2000, 0x2, 0xbfdffffc, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b84003ab8c66efbafc0c66b80000010066ef660f38809200600fc71e985b0f20d86635200000000f22d83d006866b9de0100000f3266b9800000c00f326635010000000f30660fdfd10f01c30f2221", 0x53}], 0x1, 0x20, &(0x7f0000000100)=[@cr0={0x0, 0x40010010}], 0x1) (async) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 101.016515ms ago: executing program 1 (id=5585): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0xffef, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 99.723428ms ago: executing program 5 (id=5586): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "b584424c"}]}}, 0x0}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000001280)={'HL\x00'}, &(0x7f0000000180)=0x1e) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) syz_usb_connect(0x6, 0xbf, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x55, 0x6a, 0xe3, 0x40, 0x7c9, 0x10, 0x6af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x2, 0x9, 0x4, 0x20, 0x6, [{{0x9, 0x4, 0x9d, 0x8, 0x2, 0xff, 0xff, 0x0, 0x7, [], [{{0x9, 0x5, 0x0, 0x0, 0x1b7, 0xd, 0x2, 0xe, [@generic={0x70, 0x9, "825bfe68b240365ea31d99a98365150c334313886702714a6c058c87662a3ae2978b51ac3677a241b393d7dba5885bb9e37fd7d5aa33d8fbd6ee224013a91ae119fe90fafe6fb468cc10ddadce778cf267103cbd3ceefbf75140ec3e4ec16b18b30abf834cc0e1be3a82814bbae8"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x8, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xd8bc}]}}]}}, {{0x9, 0x4, 0x62, 0x2, 0x1, 0xff, 0x6, 0x66, 0x5, [], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x4, 0x10, 0x81}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x3, 0x3, 0x0, 0x40, 0x4}, 0xf6, &(0x7f0000000600)={0x5, 0xf, 0xf6, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0xa, 0xf00f, 0x1, [0x0, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x8, 0x6076}, @generic={0xd6, 0x10, 0x4, "8a291f760b0d49268f8870d42b4422f9849ccb8e3258d1eeee162277320f91c69f62001303f52f71d30abbbf8703beb6a4872fe195c9a3ed40385c43b1996c44dcf186a79fde2dcb9fbe5031c4293ee8fbaeeb7eed2a1f10bd3b3540686a9d85978ee13c2e32a616e4f9b7647db07b1e3a403979f16f24e0c7e9bbcd0bb27edac6be94f074de41d080b6a59eb78c3b86b4ff247f3836c0f1ccab0c24ed7c8ea9996ccde049fe31eac8faad0cd60cbcb1c7bfa162b4de389f9ece0f58a8c20a80cb0cc54cb724e2ade106849080daf8e6b15e55"}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1407}}, {0x60, &(0x7f00000003c0)=@string={0x60, 0x3, "d68dca8eb1c90d2b50674c3522811f0d61c7a79258921dd8e449ac93d94bbfdf89391d47b463a32a56f380d154b9ae045c178a73c2596dc633366392e2c18dc5e48887006d7857b4ab94ea3882fba158da51b9d3f5a336b9c7763f1678d3"}}]}) poll(0x0, 0x0, 0x1) 0s ago: executing program 4 (id=5587): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000206010200000000000000000100000005fa030000000000090002007379"], 0x28}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x300, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007003219002bfd000000000000000000af1e4ccfb7b3cad800000800", [0x0, 0x2000000000001]}}) kernel console output (not intermixed with test programs): partition table [ 1632.556755][T26240] loop3: partition table beyond EOD, truncated [ 1632.569094][T26240] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1632.689255][T14516] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1632.710501][T18603] ipheth 5-1:8.39: Apple iPhone USB Ethernet now disconnected [ 1632.733964][ T5889] hid (null): unknown global tag 0xe [ 1632.739898][ T5889] hid (null): unknown global tag 0xd [ 1632.757502][ T5889] elecom 0003:056E:00E6.005E: unknown global tag 0xe [ 1632.850151][ T5889] elecom 0003:056E:00E6.005E: item 0 0 1 14 parsing failed [ 1632.874668][ T5889] elecom 0003:056E:00E6.005E: probe with driver elecom failed with error -22 [ 1632.889123][T14516] usb 6-1: device descriptor read/64, error -71 [ 1632.969130][ T5900] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1633.141873][T26253] Invalid logical block size (-21674) [ 1633.151084][T14516] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1633.181268][ T5900] usb 4-1: config 0 has no interfaces? [ 1633.195395][ T5900] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1633.204588][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.214930][ T5900] usb 4-1: Product: syz [ 1633.219398][ T5900] usb 4-1: Manufacturer: syz [ 1633.224227][ T5900] usb 4-1: SerialNumber: syz [ 1633.231942][ T5900] usb 4-1: config 0 descriptor?? [ 1633.299118][T14516] usb 6-1: device descriptor read/64, error -71 [ 1633.399563][ T5889] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1633.419403][T14516] usb usb6-port1: attempt power cycle [ 1633.452735][T26247] program syz.3.5158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1633.472355][T26247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.486534][T26247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.564083][ T5889] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1633.582689][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.594381][ T5889] usb 5-1: Product: syz [ 1633.603072][ T5889] usb 5-1: Manufacturer: syz [ 1633.611651][ T5889] usb 5-1: SerialNumber: syz [ 1633.625215][ T5889] usb 5-1: config 0 descriptor?? [ 1633.637780][ T5889] hub 5-1:0.0: bad descriptor, ignoring hub [ 1633.647769][ T5889] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1633.665542][ T5889] f81232 5-1:0.0: f81534a converter detected [ 1633.772306][T14516] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1633.800056][T14516] usb 6-1: device descriptor read/8, error -71 [ 1633.853764][T26255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.866461][T26255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.918669][ T5889] usb 5-1: f81534a converter now attached to ttyUSB0 [ 1634.039354][T14516] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1634.081448][T14516] usb 6-1: device descriptor read/8, error -71 [ 1634.199871][T14516] usb usb6-port1: unable to enumerate USB device [ 1634.739527][T14516] usb 5-1: USB disconnect, device number 70 [ 1634.756921][T14516] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 1634.768247][T14516] f81232 5-1:0.0: device disconnected [ 1634.942298][ T5889] usb 3-1: USB disconnect, device number 39 [ 1635.089419][T14516] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1635.149595][T10381] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1635.189635][T15272] Bluetooth: hci1: command 0x0406 tx timeout [ 1635.249570][T14516] usb 5-1: Using ep0 maxpacket: 16 [ 1635.256848][T14516] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1635.268720][T14516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1635.283360][T14516] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1635.294223][T14516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.299799][T10381] usb 2-1: Using ep0 maxpacket: 8 [ 1635.302314][T14516] usb 5-1: Product: syz [ 1635.314622][T10381] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.314775][T14516] usb 5-1: Manufacturer: syz [ 1635.326399][T10381] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1635.334403][T14516] usb 5-1: SerialNumber: syz [ 1635.348405][T10381] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.40 [ 1635.348438][T10381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.348461][T10381] usb 2-1: Product: syz [ 1635.363605][T14516] usb 5-1: config 0 descriptor?? [ 1635.374179][T10381] usb 2-1: Manufacturer: ᄮါæ äƒ„覄îžå †é—Ÿë•±á»Šá¸žì’·çµ·ì· [ 1635.384421][T10381] usb 2-1: SerialNumber: syz [ 1635.406402][T14516] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1635.426275][T14516] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1635.660820][ T981] usb 4-1: USB disconnect, device number 35 [ 1635.752060][T26290] FAULT_INJECTION: forcing a failure. [ 1635.752060][T26290] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.765562][T26290] CPU: 0 UID: 0 PID: 26290 Comm: syz.3.5171 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1635.765591][T26290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1635.765604][T26290] Call Trace: [ 1635.765612][T26290] [ 1635.765622][T26290] dump_stack_lvl+0x189/0x250 [ 1635.765655][T26290] ? __pfx____ratelimit+0x10/0x10 [ 1635.765678][T26290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1635.765705][T26290] ? __pfx__printk+0x10/0x10 [ 1635.765743][T26290] should_fail_ex+0x414/0x560 [ 1635.765775][T26290] should_failslab+0xa8/0x100 [ 1635.765813][T26290] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1635.765833][T26290] ? skb_clone+0x212/0x3a0 [ 1635.765859][T26290] skb_clone+0x212/0x3a0 [ 1635.765884][T26290] __netlink_deliver_tap+0x404/0x850 [ 1635.765935][T26290] ? netlink_deliver_tap+0x2e/0x1b0 [ 1635.765956][T26290] netlink_deliver_tap+0x19c/0x1b0 [ 1635.765978][T26290] netlink_sendskb+0x68/0x140 [ 1635.766007][T26290] netlink_rcv_skb+0x28c/0x470 [ 1635.766030][T26290] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1635.766059][T26290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1635.766091][T26290] ? bpf_lsm_capable+0x9/0x20 [ 1635.766106][T26290] ? security_capable+0x7e/0x2e0 [ 1635.766130][T26290] nfnetlink_rcv+0x26a/0x2520 [ 1635.766158][T26290] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1635.766188][T26290] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1635.766211][T26290] ? __dev_queue_xmit+0x27e/0x3a70 [ 1635.766235][T26290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.766260][T26290] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1635.766279][T26290] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1635.766323][T26290] ? ref_tracker_free+0x63a/0x7d0 [ 1635.766351][T26290] ? __copy_skb_header+0xa7/0x550 [ 1635.766376][T26290] ? __pfx_ref_tracker_free+0x10/0x10 [ 1635.766415][T26290] ? skb_clone+0x246/0x3a0 [ 1635.766434][T26290] ? __netlink_deliver_tap+0x807/0x850 [ 1635.766449][T26290] ? netlink_deliver_tap+0x2e/0x1b0 [ 1635.766478][T26290] ? netlink_deliver_tap+0x2e/0x1b0 [ 1635.766498][T26290] ? netlink_deliver_tap+0x2e/0x1b0 [ 1635.766522][T26290] netlink_unicast+0x75b/0x8d0 [ 1635.766558][T26290] netlink_sendmsg+0x805/0xb30 [ 1635.766580][T26290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1635.766597][T26290] ? aa_sock_msg_perm+0x94/0x160 [ 1635.766628][T26290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1635.766654][T26290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1635.766675][T26290] __sock_sendmsg+0x21c/0x270 [ 1635.766703][T26290] ____sys_sendmsg+0x505/0x830 [ 1635.766723][T26290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1635.766745][T26290] ? import_iovec+0x74/0xa0 [ 1635.766770][T26290] ___sys_sendmsg+0x21f/0x2a0 [ 1635.766796][T26290] ? __pfx____sys_sendmsg+0x10/0x10 [ 1635.766852][T26290] ? __fget_files+0x2a/0x420 [ 1635.766881][T26290] ? __fget_files+0x3a0/0x420 [ 1635.766904][T26290] __x64_sys_sendmsg+0x19b/0x260 [ 1635.766930][T26290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1635.766960][T26290] ? __pfx_ksys_write+0x10/0x10 [ 1635.766977][T26290] ? rcu_is_watching+0x15/0xb0 [ 1635.766999][T26290] ? do_syscall_64+0xbe/0x3b0 [ 1635.767028][T26290] do_syscall_64+0xfa/0x3b0 [ 1635.767052][T26290] ? lockdep_hardirqs_on+0x9c/0x150 [ 1635.767071][T26290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.767092][T26290] ? clear_bhb_loop+0x60/0xb0 [ 1635.767116][T26290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.767133][T26290] RIP: 0033:0x7f83a138e929 [ 1635.767150][T26290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1635.767166][T26290] RSP: 002b:00007f83a21f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1635.767181][T26290] RAX: ffffffffffffffda RBX: 00007f83a15b5fa0 RCX: 00007f83a138e929 [ 1635.767191][T26290] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1635.767200][T26290] RBP: 00007f83a21f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1635.767208][T26290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1635.767216][T26290] R13: 0000000000000000 R14: 00007f83a15b5fa0 R15: 00007f83a16dfa28 [ 1635.767248][T26290] [ 1636.239744][ T5889] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1636.384210][T14516] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1636.392909][ T5889] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1636.439637][ T5889] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1636.448668][ T5889] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.449879][T14516] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1636.459731][ T5889] usb 6-1: config 220 has no interface number 2 [ 1636.459830][ T5889] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1636.488036][ T5889] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1636.496748][ T5889] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1636.504323][ T5889] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1636.521672][ T5889] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1636.533393][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.553605][ T5889] usb 6-1: Product: syz [ 1636.563731][ T5889] usb 6-1: Manufacturer: syz [ 1636.568412][ T5889] usb 6-1: SerialNumber: syz [ 1636.589760][T10381] usbhid 2-1:1.0: can't add hid device: -71 [ 1636.620440][T10381] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1636.672001][T10381] usb 2-1: USB disconnect, device number 78 [ 1636.825733][ T5889] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1636.868280][ T5889] usb 6-1: No valid video chain found. [ 1636.887685][ T5889] usb 6-1: selecting invalid altsetting 0 [ 1636.938288][ T5889] usb 6-1: selecting invalid altsetting 0 [ 1636.945201][ T5889] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1637.016207][ T5889] usb 6-1: USB disconnect, device number 6 [ 1637.205272][T14516] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1637.615957][T14516] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1637.626517][T14516] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1637.656673][ T5900] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1637.668003][T14516] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1637.692329][T14516] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1637.719541][T14516] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1637.833778][T14516] usb 5-1: USB disconnect, device number 71 [ 1637.841922][ T5900] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1637.856822][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1637.875538][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1637.909084][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1637.918910][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1637.958089][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1637.982374][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1638.007509][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1638.029869][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1638.059593][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1638.088107][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1638.101627][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1638.113571][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1638.124311][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1638.144932][T26317] netlink: 'syz.3.5179': attribute type 10 has an invalid length. [ 1638.155950][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1638.175770][T26317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.181542][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1638.183696][T26317] team0: Device bond0 failed to register rx_handler [ 1638.209750][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1638.224250][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1638.239173][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1638.265959][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1638.279493][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1638.288474][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1638.300799][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1638.312702][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1638.323975][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1638.333371][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1638.347467][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1638.359070][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1638.368841][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1638.376698][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1638.385903][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1638.397348][T14516] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1638.405974][ T5900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1638.417830][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1638.428916][ T5900] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1638.439481][ T5900] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1638.447881][ T5900] usb 2-1: Product: syz [ 1638.452358][ T5900] usb 2-1: Manufacturer: syz [ 1638.456991][ T5900] usb 2-1: SerialNumber: syz [ 1638.476637][ T5900] usb 2-1: config 0 descriptor?? [ 1638.484920][ T5900] yurex 2-1:0.0: Could not submitting URB [ 1638.492883][ T5900] yurex 2-1:0.0: probe with driver yurex failed with error -5 [ 1638.565089][T14516] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.579121][T14516] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1638.617133][T14516] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1638.629694][T14516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1638.637807][T14516] usb 3-1: SerialNumber: syz [ 1638.701267][ T5900] usb 2-1: USB disconnect, device number 79 [ 1638.849675][T10381] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1638.863193][T26318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5178'. [ 1639.059862][T24792] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1639.067772][T10381] usb 5-1: config 0 has no interfaces? [ 1639.082048][T10381] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1639.092209][T10381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.101004][T10381] usb 5-1: Product: syz [ 1639.105827][T10381] usb 5-1: Manufacturer: syz [ 1639.111412][T10381] usb 5-1: SerialNumber: syz [ 1639.123887][T10381] usb 5-1: config 0 descriptor?? [ 1639.308767][T24792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1639.326674][T24792] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1639.330623][T26329] FAULT_INJECTION: forcing a failure. [ 1639.330623][T26329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1639.354508][T26324] program syz.4.5181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1639.366428][T26324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1639.375822][T26324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1639.449894][T26329] CPU: 0 UID: 0 PID: 26329 Comm: syz.1.5183 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1639.449925][T26329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1639.449939][T26329] Call Trace: [ 1639.449948][T26329] [ 1639.449979][T26329] dump_stack_lvl+0x189/0x250 [ 1639.450015][T26329] ? __pfx____ratelimit+0x10/0x10 [ 1639.450042][T26329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1639.450072][T26329] ? __pfx__printk+0x10/0x10 [ 1639.450105][T26329] should_fail_ex+0x414/0x560 [ 1639.450138][T26329] _copy_to_user+0x31/0xb0 [ 1639.450163][T26329] simple_read_from_buffer+0xe1/0x170 [ 1639.450191][T26329] proc_fail_nth_read+0x1df/0x250 [ 1639.450219][T26329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1639.450246][T26329] ? rw_verify_area+0x258/0x650 [ 1639.450277][T26329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1639.450304][T26329] vfs_read+0x200/0x980 [ 1639.450328][T26329] ? __pfx___mutex_lock+0x10/0x10 [ 1639.450356][T26329] ? __pfx_vfs_read+0x10/0x10 [ 1639.450376][T26329] ? __fget_files+0x2a/0x420 [ 1639.450403][T26329] ? __fget_files+0x3a0/0x420 [ 1639.450425][T26329] ? __fget_files+0x2a/0x420 [ 1639.450457][T26329] ksys_read+0x145/0x250 [ 1639.450478][T26329] ? __pfx_ksys_read+0x10/0x10 [ 1639.450494][T26329] ? rcu_is_watching+0x15/0xb0 [ 1639.450518][T26329] ? do_syscall_64+0xbe/0x3b0 [ 1639.450548][T26329] do_syscall_64+0xfa/0x3b0 [ 1639.450574][T26329] ? lockdep_hardirqs_on+0x9c/0x150 [ 1639.450600][T26329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.450620][T26329] ? clear_bhb_loop+0x60/0xb0 [ 1639.450643][T26329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.450662][T26329] RIP: 0033:0x7f9c5758d33c [ 1639.450680][T26329] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1639.450699][T26329] RSP: 002b:00007f9c5845c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1639.450720][T26329] RAX: ffffffffffffffda RBX: 00007f9c577b5fa0 RCX: 00007f9c5758d33c [ 1639.450735][T26329] RDX: 000000000000000f RSI: 00007f9c5845c0a0 RDI: 0000000000000004 [ 1639.450748][T26329] RBP: 00007f9c5845c090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.450761][T26329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1639.450773][T26329] R13: 0000000000000000 R14: 00007f9c577b5fa0 R15: 00007f9c578dfa28 [ 1639.450802][T26329] [ 1639.465161][T24792] usb 4-1: can't read configurations, error -71 [ 1639.876528][T26331] trusted_key: encrypted_key: master key parameter '' is invalid [ 1640.519649][T24792] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1640.669633][T24792] usb 4-1: Using ep0 maxpacket: 32 [ 1640.683390][T24792] usb 4-1: config 0 has an invalid interface number: 42 but max is 0 [ 1640.703239][T24792] usb 4-1: config 0 has no interface number 0 [ 1640.721485][T24792] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=42.27 [ 1640.736380][T24792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.756011][T24792] usb 4-1: Product: syz [ 1640.771863][T24792] usb 4-1: Manufacturer: syz [ 1640.778063][T24792] usb 4-1: SerialNumber: syz [ 1640.803421][T24792] usb 4-1: config 0 descriptor?? [ 1641.207335][T24792] usb 4-1: Found UVC 0.00 device syz (1bcf:0b40) [ 1641.222455][T24792] usb 4-1: Forcing UVC version to 1.0a [ 1641.228423][T24792] usb 4-1: No valid video chain found. [ 1641.370467][T24792] usb 4-1: USB disconnect, device number 37 [ 1642.337676][T18603] usb 5-1: USB disconnect, device number 72 [ 1642.944874][T26361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5194'. [ 1642.972736][T26363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1643.441284][T26382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5198'. [ 1643.573798][T24792] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1643.634309][T26383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5198'. [ 1643.710066][T14516] usb 3-1: 0:2 : does not exist [ 1643.770803][T24792] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 1643.781255][T24792] usb 2-1: config 4 has no interface number 0 [ 1643.790741][T24792] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1643.802685][T24792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.827110][T10381] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1643.857089][T24792] usb 2-1: Product: syz [ 1643.868366][T24792] usb 2-1: Manufacturer: syz [ 1643.886103][T24792] usb 2-1: SerialNumber: syz [ 1643.930965][T24792] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1644.059725][T10381] usb 4-1: config 0 has no interfaces? [ 1644.076567][T10381] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1644.104460][T10381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.153990][T10381] usb 4-1: Product: syz [ 1644.286525][T10381] usb 4-1: Manufacturer: syz [ 1644.299959][T10381] usb 4-1: SerialNumber: syz [ 1644.308498][T10381] usb 4-1: config 0 descriptor?? [ 1644.332756][T24792] vp7045: USB control message 'in' went wrong. [ 1644.343829][T24792] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1644.360605][T24792] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1644.376440][T24792] usb 2-1: USB disconnect, device number 80 [ 1644.541856][T26389] program syz.3.5199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1644.558833][T26389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.592754][T26389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.733233][T26397] binder: 26396:26397 ioctl 4018620d 0 returned -22 [ 1645.000587][T24792] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1645.164275][T24792] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1645.174194][T24792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.184774][T24792] usb 5-1: Product: syz [ 1645.240856][T24792] usb 5-1: Manufacturer: syz [ 1645.245522][T24792] usb 5-1: SerialNumber: syz [ 1645.343456][T24792] usb 5-1: config 0 descriptor?? [ 1645.612396][T26398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.623706][T26398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.632787][T24792] usb 5-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 1645.824176][T26397] binder: 26396:26397 ioctl c0306201 2000000000c0 returned -14 [ 1645.832341][T26398] binder: 26396:26398 ioctl c018620c 0 returned -14 [ 1645.877058][T24792] usb 5-1: failed to fetch extended address, random address set [ 1645.972078][T24792] usb 5-1: USB disconnect, device number 73 [ 1646.110485][T26425] FAULT_INJECTION: forcing a failure. [ 1646.110485][T26425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1646.125682][T26425] CPU: 0 UID: 0 PID: 26425 Comm: syz.5.5207 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1646.125708][T26425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1646.125721][T26425] Call Trace: [ 1646.125730][T26425] [ 1646.125738][T26425] dump_stack_lvl+0x189/0x250 [ 1646.125773][T26425] ? __pfx____ratelimit+0x10/0x10 [ 1646.125800][T26425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1646.125829][T26425] ? __pfx__printk+0x10/0x10 [ 1646.125850][T26425] ? __might_fault+0xb0/0x130 [ 1646.125881][T26425] should_fail_ex+0x414/0x560 [ 1646.125911][T26425] _copy_from_user+0x2d/0xb0 [ 1646.125933][T26425] video_usercopy+0x354/0x14f0 [ 1646.125963][T26425] ? __pfx___video_do_ioctl+0x10/0x10 [ 1646.125982][T26425] ? __pfx_video_usercopy+0x10/0x10 [ 1646.126011][T26425] ? __fget_files+0x2a/0x420 [ 1646.126036][T26425] ? __fget_files+0x2a/0x420 [ 1646.126056][T26425] ? __fget_files+0x3a0/0x420 [ 1646.126081][T26425] v4l2_ioctl+0x18d/0x1e0 [ 1646.126111][T26425] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1646.126138][T26425] __se_sys_ioctl+0xfc/0x170 [ 1646.126168][T26425] do_syscall_64+0xfa/0x3b0 [ 1646.126194][T26425] ? lockdep_hardirqs_on+0x9c/0x150 [ 1646.126217][T26425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.126237][T26425] ? clear_bhb_loop+0x60/0xb0 [ 1646.126261][T26425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.126279][T26425] RIP: 0033:0x7f90a0b8e929 [ 1646.126297][T26425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1646.126314][T26425] RSP: 002b:00007f90a1a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1646.126335][T26425] RAX: ffffffffffffffda RBX: 00007f90a0db5fa0 RCX: 00007f90a0b8e929 [ 1646.126349][T26425] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 1646.126362][T26425] RBP: 00007f90a1a4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1646.126374][T26425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.126386][T26425] R13: 0000000000000000 R14: 00007f90a0db5fa0 R15: 00007f90a0edfa28 [ 1646.126415][T26425] [ 1646.335059][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.712688][T14516] usb 4-1: USB disconnect, device number 38 [ 1646.928917][T26436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5210'. [ 1647.029359][T18603] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1647.170990][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5211'. [ 1647.209612][T18603] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1647.219642][T18603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1647.255665][T18603] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1647.265905][T18603] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1647.284754][T18603] usb 6-1: Manufacturer: syz [ 1647.310594][T18603] usb 6-1: config 0 descriptor?? [ 1647.499106][T18603] rc_core: IR keymap rc-hauppauge not found [ 1647.505162][T18603] Registered IR keymap rc-empty [ 1647.514787][T18603] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1647.526032][T26431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.589354][T26431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.628705][T18603] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input113 [ 1647.641572][T26431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.688889][T26431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.769556][T26431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.819727][T26431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.868233][T26431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.899787][T26431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.939744][T26431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.968414][T26431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.992661][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 1648.065397][T18603] usb 6-1: USB disconnect, device number 7 [ 1649.055398][T26472] netlink: 'syz.4.5221': attribute type 10 has an invalid length. [ 1649.077530][T26472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.088832][T26472] team0: Port device bond0 added [ 1649.383267][T26486] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5225'. [ 1649.398861][T26486] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5225'. [ 1649.479904][T10381] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1649.599897][ T5889] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1649.644392][T10381] usb 4-1: not running at top speed; connect to a high speed hub [ 1649.684496][T10381] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1649.696413][T10381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.708473][T10381] usb 4-1: Product: 烴쑵炩볯㮷Ȯ釙凑咿í›ä¯¨ï§¸å‹°êŠ¿áµœë¨†ã„·ìªµì¢’Ộ᥯㎣è»ê¥´åµ‹éƒ§Û‰é€¿ê®™ì´í’…텯䛸éªæš» [ 1649.728127][T10381] usb 4-1: Manufacturer: Ы [ 1649.733584][T10381] usb 4-1: SerialNumber: Ѓ [ 1649.771850][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1649.783699][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.057301][T24792] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 1650.400044][T24792] hid-generic 0000:0000:0000.005F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1650.419090][ T5889] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1650.443187][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.512881][ T5889] usb 2-1: config 0 descriptor?? [ 1650.736307][ T5889] hid-thrustmaster 0003:044F:B65D.0060: unknown main item tag 0x0 [ 1650.764098][ T5889] hid-thrustmaster 0003:044F:B65D.0060: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 1650.813655][ T5889] hid-thrustmaster 0003:044F:B65D.0060: Wrong number of endpoints? [ 1650.924477][ C0] hid-thrustmaster 0003:044F:B65D.0060: Unknown packet type 0x0, unable to proceed further with wheel init [ 1650.939613][T26497] fido_id[26497]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1651.153720][ T5889] usb 2-1: USB disconnect, device number 81 [ 1651.419490][T14516] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1651.552450][T10381] cdc_ncm 4-1:1.0: bind() failure [ 1651.575981][T10381] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1651.583650][T10381] cdc_ncm 4-1:1.1: bind() failure [ 1651.620072][T10381] usb 4-1: USB disconnect, device number 39 [ 1651.664915][T14516] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1651.684755][T14516] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.704873][T14516] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1651.715312][T14516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.743864][T14516] hub 5-1:4.0: USB hub found [ 1652.064392][T14516] hub 5-1:4.0: 13 ports detected [ 1652.069820][T14516] usb 5-1: selecting invalid altsetting 1 [ 1652.077057][T14516] hub 5-1:4.0: Using single TT (err -22) [ 1652.111460][T14516] hub 5-1:4.0: insufficient power available to use all downstream ports [ 1652.169745][T24792] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1652.317138][T26517] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5231'. [ 1652.329609][T24792] usb 2-1: Using ep0 maxpacket: 16 [ 1652.342089][T24792] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1652.351269][T24792] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1652.362497][T24792] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1652.372416][T24792] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1652.385323][T24792] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1652.427122][T24792] usb 2-1: config 0 has no interface number 0 [ 1652.445319][T24792] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1652.481189][T24792] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1652.531256][T24792] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1652.562256][T24792] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1652.594227][T24792] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1652.602414][T24792] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1652.698320][T24792] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1652.708911][T24792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.768339][T24792] usb 2-1: Product: syz [ 1652.792504][T24792] usb 2-1: Manufacturer: syz [ 1652.799637][T24792] usb 2-1: SerialNumber: syz [ 1652.862567][T24792] usb 2-1: config 0 descriptor?? [ 1652.883133][T24792] usb 2-1: selecting invalid altsetting 2 [ 1653.513378][T26534] netlink: 'syz.3.5237': attribute type 10 has an invalid length. [ 1653.523412][T26534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1653.530762][T26534] team0: Device bond0 failed to register rx_handler [ 1653.629938][ T5889] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1653.785189][ T5889] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1653.798380][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.808004][ T5889] usb 6-1: Product: syz [ 1653.817094][ T5889] usb 6-1: Manufacturer: syz [ 1653.912224][T18600] usb 5-1: USB disconnect, device number 74 [ 1653.920809][ T5889] usb 6-1: SerialNumber: syz [ 1653.966579][T18603] usb 2-1: USB disconnect, device number 82 [ 1654.005373][ T5889] usb 6-1: config 0 descriptor?? [ 1654.124218][T26536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5238'. [ 1654.182277][T15272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1654.196844][T15272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1654.207571][T15272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1654.225748][T15272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1654.226427][ T5889] mos7840 6-1:0.0: required endpoints missing [ 1654.255943][T15272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1654.545163][T26550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5241'. [ 1654.578320][T26531] sctp: [Deprecated]: syz.5.5235 (pid 26531) Use of int in maxseg socket option. [ 1654.578320][T26531] Use struct sctp_assoc_value instead [ 1654.723937][T26554] sctp: [Deprecated]: syz.5.5235 (pid 26554) Use of int in maxseg socket option. [ 1654.723937][T26554] Use struct sctp_assoc_value instead [ 1654.763362][T26531] loop6: detected capacity change from 0 to 7 [ 1654.772582][T26531] Dev loop6: unable to read RDB block 7 [ 1654.785127][T26531] loop6: AHDI p1 p2 p3 [ 1654.812566][T26531] loop6: partition table partially beyond EOD, truncated [ 1654.907466][T26531] loop6: p1 start 926365495 is beyond EOD, truncated [ 1654.945750][T26531] loop6: p2 size 116 extends beyond EOD, truncated [ 1654.969597][T10381] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1655.058808][T26544] chnl_net:caif_netlink_parms(): no params data found [ 1655.113236][T18603] usb 6-1: USB disconnect, device number 8 [ 1655.124227][T10381] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.138621][T10381] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1655.183929][T10381] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1655.206798][T10381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.216962][T10381] usb 2-1: Product: syz [ 1655.222290][T10381] usb 2-1: Manufacturer: syz [ 1655.272752][T10381] usb 2-1: SerialNumber: syz [ 1655.305075][T10381] usb 2-1: config 0 descriptor?? [ 1655.710745][T18603] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1656.077613][T26544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.090138][T26544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.100422][T26544] bridge_slave_0: entered allmulticast mode [ 1656.110334][T26544] bridge_slave_0: entered promiscuous mode [ 1656.120886][T26544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.128045][T26544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.159915][T26544] bridge_slave_1: entered allmulticast mode [ 1656.185152][T26544] bridge_slave_1: entered promiscuous mode [ 1656.278863][T26578] fuse: Bad value for 'user_id' [ 1656.288351][T26578] fuse: Bad value for 'user_id' [ 1656.347815][T26544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1656.379913][T19490] Bluetooth: hci4: command tx timeout [ 1656.418370][T10381] hid (null): invalid report_size 37151 [ 1656.435083][T26544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.455636][T10381] hid-generic 0004:0007:00F2.0061: reserved main item tag 0xd [ 1656.471902][T10381] hid-generic 0004:0007:00F2.0061: invalid report_size 37151 [ 1656.492809][T10381] hid-generic 0004:0007:00F2.0061: item 0 2 1 7 parsing failed [ 1656.522568][T10381] hid-generic 0004:0007:00F2.0061: probe with driver hid-generic failed with error -22 [ 1656.627322][T26544] team0: Port device team_slave_0 added [ 1656.645916][T26544] team0: Port device team_slave_1 added [ 1656.659294][T18600] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1656.762833][T26544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1656.771044][T26544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1656.797095][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.809904][T26544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1656.825014][T26544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1656.832922][T18600] usb 4-1: Using ep0 maxpacket: 32 [ 1656.839687][T26544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1656.865719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.874518][T18600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.886302][T18600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.896657][T18600] usb 4-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 1656.906713][T26544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1656.918098][T18600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.936753][T18600] usb 4-1: config 0 descriptor?? [ 1657.050921][T26544] hsr_slave_0: entered promiscuous mode [ 1657.065397][T26544] hsr_slave_1: entered promiscuous mode [ 1657.077104][T26544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1657.097546][T26544] Cannot create hsr debugfs directory [ 1657.368196][T18600] hid_mf 0003:0079:1843.0062: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.3-1/input0 [ 1657.417922][T18600] hid_mf 0003:0079:1843.0062: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1657.598239][T18600] usb 4-1: USB disconnect, device number 40 [ 1657.625810][T10381] usb 2-1: USB disconnect, device number 83 [ 1657.875279][T26587] fido_id[26587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1658.006354][T26544] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1658.073026][T26544] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1658.134047][T26544] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1658.179787][T10381] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1658.194604][T26544] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1658.348146][T26600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5253'. [ 1658.358232][T10381] usb 5-1: Using ep0 maxpacket: 8 [ 1658.381552][T10381] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1658.432030][T10381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.462036][T19490] Bluetooth: hci4: command tx timeout [ 1658.505633][T10381] usb 5-1: Product: syz [ 1658.515140][T10381] usb 5-1: Manufacturer: syz [ 1658.526360][T10381] usb 5-1: SerialNumber: syz [ 1658.544545][T10381] usb 5-1: config 0 descriptor?? [ 1658.556207][T26544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1658.556470][T10381] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1658.607260][T26604] syz.3.5254: attempt to access beyond end of device [ 1658.607260][T26604] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1658.693349][T26544] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.802938][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.810236][ T7957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.888521][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.895830][ T7957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1659.434325][T26544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1659.476396][T26544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1659.687362][T26544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1660.025211][T26544] veth0_vlan: entered promiscuous mode [ 1660.080938][T26544] veth1_vlan: entered promiscuous mode [ 1660.128244][T26544] veth0_macvtap: entered promiscuous mode [ 1660.165124][T26544] veth1_macvtap: entered promiscuous mode [ 1660.188497][T26613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5256'. [ 1660.243524][T26544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1660.259674][T18603] usb 6-1: device descriptor read/64, error -71 [ 1660.327718][T26544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1660.362015][T26544] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.395831][T26544] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.419644][T26544] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.437320][T26544] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.519906][T18603] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1660.549654][T19490] Bluetooth: hci4: command tx timeout [ 1660.690248][T18603] usb 6-1: Using ep0 maxpacket: 8 [ 1660.713527][T18603] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1660.724327][T18603] usb 6-1: config 9 has an invalid interface number: 121 but max is 1 [ 1660.785414][T18603] usb 6-1: config 9 has an invalid interface number: 93 but max is 1 [ 1660.800491][T17908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.818261][T18603] usb 6-1: config 9 has no interface number 0 [ 1660.825553][T17908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.838309][T18603] usb 6-1: config 9 has no interface number 1 [ 1660.879680][T18603] usb 6-1: too many endpoints for config 9 interface 121 altsetting 7: 249, using maximum allowed: 30 [ 1660.907435][T24792] usb 5-1: USB disconnect, device number 76 [ 1660.959808][T18603] usb 6-1: config 9 interface 121 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1660.979396][T18603] usb 6-1: config 9 interface 121 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 249 [ 1661.032123][T18603] usb 6-1: config 9 interface 121 has no altsetting 0 [ 1661.038976][T18603] usb 6-1: config 9 interface 93 has no altsetting 0 [ 1661.047885][ T30] audit: type=1326 audit(1749180842.395:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26614 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e38e929 code=0x7ffc0000 [ 1661.082999][T18603] usb 6-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=35.13 [ 1661.093363][T18603] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1661.104606][ T30] audit: type=1326 audit(1749180842.395:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26614 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e38e929 code=0x7ffc0000 [ 1661.128896][T18603] usb 6-1: Manufacturer: syz [ 1661.138281][T18603] usb 6-1: SerialNumber: syz [ 1661.159668][ T30] audit: type=1326 audit(1749180842.395:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26614 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0e3e38e929 code=0x7ffc0000 [ 1661.203329][ T30] audit: type=1326 audit(1749180842.395:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26614 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e38e929 code=0x7ffc0000 [ 1661.234463][T17908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.246645][T17908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.317383][ T30] audit: type=1326 audit(1749180842.395:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26614 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e38e929 code=0x7ffc0000 [ 1661.433452][T18603] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1661.452769][T18603] snd-usb-audio 6-1:9.121: probe with driver snd-usb-audio failed with error -2 [ 1661.513552][ T30] audit: type=1326 audit(1749180842.395:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26614 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e3e38e929 code=0x7ffc0000 [ 1661.585608][ T30] audit: type=1326 audit(1749180842.395:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26614 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e38e929 code=0x7ffc0000 [ 1661.585814][T18603] usb 6-1: Found UVC 0.00 device (0499:1018) [ 1661.637017][ T30] audit: type=1326 audit(1749180842.395:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26614 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e38e929 code=0x7ffc0000 [ 1661.733001][T18603] usb 6-1: No valid video chain found. [ 1661.768043][T18603] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1661.796521][ T30] audit: type=1326 audit(1749180842.395:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26614 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e3e390847 code=0x7ffc0000 [ 1661.807967][T26620] bridge0: entered promiscuous mode [ 1661.875748][T26620] macvlan1: entered promiscuous mode [ 1661.888097][T18603] snd-usb-audio 6-1:9.93: probe with driver snd-usb-audio failed with error -2 [ 1661.894956][T26620] bridge0: port 3(macvlan1) entered blocking state [ 1661.895132][T26620] bridge0: port 3(macvlan1) entered disabled state [ 1661.895400][T26620] macvlan1: entered allmulticast mode [ 1661.895419][T26620] bridge0: entered allmulticast mode [ 1661.907780][T26620] macvlan1: left allmulticast mode [ 1661.917029][T18603] usb 6-1: USB disconnect, device number 10 [ 1661.963028][ T30] audit: type=1326 audit(1749180842.395:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26614 comm="syz.4.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e3e3907bc code=0x7ffc0000 [ 1662.023529][T23653] udevd[23653]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:9.93/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1662.046613][T26620] bridge0: left allmulticast mode [ 1662.048753][T26620] bridge0: left promiscuous mode [ 1662.262708][T26624] netlink: 'syz.6.5236': attribute type 3 has an invalid length. [ 1662.623510][T19490] Bluetooth: hci4: command tx timeout [ 1663.065364][T14516] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1663.195772][T26650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5265'. [ 1663.262744][T26649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5264'. [ 1663.296488][T14516] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 1663.321110][T14516] usb 2-1: config 0 has no interface number 0 [ 1663.333095][T14516] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1663.344893][T14516] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1663.359763][T14516] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1663.384531][T14516] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1663.406329][T14516] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 1663.415792][T14516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.424036][T14516] usb 2-1: Product: syz [ 1663.428423][T14516] usb 2-1: Manufacturer: syz [ 1663.433371][T14516] usb 2-1: SerialNumber: syz [ 1663.501715][T14516] usb 2-1: config 0 descriptor?? [ 1663.984700][T14516] xpad 2-1:0.237: probe with driver xpad failed with error -5 [ 1664.007321][T26653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1665.000352][T14516] usb 2-1: USB disconnect, device number 84 [ 1665.348728][T26666] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1665.358418][ T24] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1665.391318][T26666] Cannot find del_set index 4 as target [ 1665.456572][T26663] xt_CT: No such helper "snmp" [ 1665.548231][ T24] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1665.578101][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.629072][ T24] usb 5-1: Product: syz [ 1665.645275][ T24] usb 5-1: Manufacturer: syz [ 1665.654169][ T24] usb 5-1: SerialNumber: syz [ 1665.681795][ T24] usb 5-1: config 0 descriptor?? [ 1665.704742][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1665.832595][T26681] bridge0: entered promiscuous mode [ 1665.840029][T26681] macvlan2: entered promiscuous mode [ 1665.848092][T26681] bridge0: port 3(macvlan2) entered blocking state [ 1665.864022][T26681] bridge0: port 3(macvlan2) entered disabled state [ 1665.872893][T26681] macvlan2: entered allmulticast mode [ 1665.881834][T26681] bridge0: entered allmulticast mode [ 1665.903477][T26681] macvlan2: left allmulticast mode [ 1665.908893][T26681] bridge0: left allmulticast mode [ 1665.941814][T26681] bridge0: left promiscuous mode [ 1666.818703][T14516] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1666.868358][T26703] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5278'. [ 1666.948045][T26704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5280'. [ 1666.999275][T14516] usb 2-1: Using ep0 maxpacket: 16 [ 1667.018721][T14516] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1667.083733][T14516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1667.135523][T14516] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1667.151369][T14516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.176131][T14516] usb 2-1: Product: syz [ 1667.202124][T14516] usb 2-1: Manufacturer: syz [ 1667.217065][T14516] usb 2-1: SerialNumber: syz [ 1667.244042][T14516] usb 2-1: config 0 descriptor?? [ 1667.531742][T14516] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 1667.546740][T14516] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 1667.619424][T14516] usb 2-1: USB disconnect, device number 85 [ 1667.657523][T26713] warn_alloc: 1 callbacks suppressed [ 1667.657536][T26713] syz.5.5281: vmalloc error: size 33177600, failed to allocated page array size 64800, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1667.714582][T26713] CPU: 1 UID: 0 PID: 26713 Comm: syz.5.5281 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1667.714610][T26713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1667.714622][T26713] Call Trace: [ 1667.714630][T26713] [ 1667.714638][T26713] dump_stack_lvl+0x189/0x250 [ 1667.714675][T26713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1667.714704][T26713] ? __pfx__printk+0x10/0x10 [ 1667.714725][T26713] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1667.714747][T26713] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1667.714770][T26713] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1667.714795][T26713] warn_alloc+0x214/0x310 [ 1667.714824][T26713] ? __pfx_warn_alloc+0x10/0x10 [ 1667.714856][T26713] ? __get_vm_area_node+0x28f/0x300 [ 1667.714877][T26713] ? vb2_vmalloc_alloc+0xef/0x340 [ 1667.714899][T26713] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1667.714956][T26713] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1667.714983][T26713] ? __kasan_kmalloc+0x93/0xb0 [ 1667.715006][T26713] vmalloc_user_noprof+0xad/0xf0 [ 1667.715028][T26713] ? vb2_vmalloc_alloc+0xef/0x340 [ 1667.715046][T26713] vb2_vmalloc_alloc+0xef/0x340 [ 1667.715064][T26713] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1667.715084][T26713] __vb2_queue_alloc+0x9c2/0x15a0 [ 1667.715136][T26713] vb2_core_reqbufs+0xc31/0x1420 [ 1667.715164][T26713] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1667.715202][T26713] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1667.715240][T26713] ? vb2_verify_memory_type+0x1fc/0x570 [ 1667.715270][T26713] vb2_ioctl_reqbufs+0x4c0/0x830 [ 1667.715306][T26713] __video_do_ioctl+0xc98/0xdb0 [ 1667.715334][T26713] ? __pfx___video_do_ioctl+0x10/0x10 [ 1667.715364][T26713] video_usercopy+0x871/0x14f0 [ 1667.715392][T26713] ? __pfx___video_do_ioctl+0x10/0x10 [ 1667.715411][T26713] ? __pfx_video_usercopy+0x10/0x10 [ 1667.715440][T26713] ? __fget_files+0x2a/0x420 [ 1667.715466][T26713] ? __fget_files+0x2a/0x420 [ 1667.715486][T26713] ? __fget_files+0x3a0/0x420 [ 1667.715507][T26713] v4l2_ioctl+0x18d/0x1e0 [ 1667.715535][T26713] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1667.715564][T26713] __se_sys_ioctl+0xfc/0x170 [ 1667.715593][T26713] do_syscall_64+0xfa/0x3b0 [ 1667.715620][T26713] ? lockdep_hardirqs_on+0x9c/0x150 [ 1667.715644][T26713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.715664][T26713] ? clear_bhb_loop+0x60/0xb0 [ 1667.715688][T26713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.715706][T26713] RIP: 0033:0x7f90a0b8e929 [ 1667.715724][T26713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1667.715741][T26713] RSP: 002b:00007f90a1a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1667.715762][T26713] RAX: ffffffffffffffda RBX: 00007f90a0db5fa0 RCX: 00007f90a0b8e929 [ 1667.715776][T26713] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000007 [ 1667.715806][T26713] RBP: 00007f90a0c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1667.715819][T26713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1667.715831][T26713] R13: 0000000000000000 R14: 00007f90a0db5fa0 R15: 00007f90a0edfa28 [ 1667.715860][T26713] [ 1667.715869][T26713] Mem-Info: [ 1668.059754][T26713] active_anon:8358 inactive_anon:2 isolated_anon:0 [ 1668.059754][T26713] active_file:2153 inactive_file:4005 isolated_file:0 [ 1668.059754][T26713] unevictable:768 dirty:211 writeback:0 [ 1668.059754][T26713] slab_reclaimable:7456 slab_unreclaimable:132478 [ 1668.059754][T26713] mapped:39500 shmem:1381 pagetables:1624 [ 1668.059754][T26713] sec_pagetables:0 bounce:0 [ 1668.059754][T26713] kernel_misc_reclaimable:0 [ 1668.059754][T26713] free:1267365 free_pcp:10599 free_cma:0 [ 1668.115164][T26713] Node 0 active_anon:33432kB inactive_anon:8kB active_file:8388kB inactive_file:15888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157776kB dirty:844kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12848kB pagetables:6400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1668.154999][T26713] Node 1 active_anon:0kB inactive_anon:0kB active_file:224kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:224kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:96kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1668.190813][T26713] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1668.229673][T26713] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 1668.236560][T26713] Node 0 DMA32 free:1139412kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33164kB inactive_anon:8kB active_file:8300kB inactive_file:14424kB unevictable:1536kB writepending:840kB present:3129332kB managed:2561084kB mlocked:0kB bounce:0kB free_pcp:32600kB local_pcp:14856kB free_cma:0kB [ 1668.274290][T26713] lowmem_reserve[]: 0 0 1 1 1 [ 1668.284768][T26713] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:268kB inactive_anon:0kB active_file:88kB inactive_file:1464kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:80kB local_pcp:24kB free_cma:0kB [ 1668.325237][T26713] lowmem_reserve[]: 0 0 0 0 0 [ 1668.334509][T26713] Node 1 Normal free:3914488kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:224kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8992kB local_pcp:8992kB free_cma:0kB [ 1668.370826][T26713] lowmem_reserve[]: 0 0 0 0 0 [ 1668.375636][T26713] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1668.396233][T26713] Node 0 DMA32: 881*4kB (UM) 1621*8kB (UME) 720*16kB (ME) 1066*32kB (ME) 689*64kB (ME) 322*128kB (UME) 87*256kB (ME) 20*512kB (M) 21*1024kB (UME) 10*2048kB (ME) 224*4096kB (M) = 1139436kB [ 1668.420406][T26713] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1668.436108][T26713] Node 1 Normal: 180*4kB (UME) 47*8kB (UME) 43*16kB (UME) 210*32kB (UME) 91*64kB (UME) 32*128kB (UME) 19*256kB (UM) 10*512kB (UME) 7*1024kB (UME) 4*2048kB (UME) 945*4096kB (M) = 3914488kB [ 1668.462714][T26713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1668.475252][T26713] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1668.486467][T26713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1668.497803][T26713] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1668.513879][T26713] 7537 total pagecache pages [ 1668.518646][T26713] 2 pages in swap cache [ 1668.525768][T26713] Free swap = 124988kB [ 1668.533960][T26713] Total swap = 124996kB [ 1668.538274][T26713] 2097051 pages RAM [ 1668.592733][T26713] 0 pages HighMem/MovableOnly [ 1668.625860][T26713] 424674 pages reserved [ 1668.646370][T26713] 0 pages cma reserved [ 1668.896161][T10381] usb 5-1: USB disconnect, device number 77 [ 1668.944365][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.951367][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.619241][T14516] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1669.692527][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1669.779280][T14516] usb 6-1: Using ep0 maxpacket: 16 [ 1669.790380][T14516] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1669.803373][T14516] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1669.829060][T14516] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1669.840617][T14516] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.861985][T14516] usb 6-1: config 0 descriptor?? [ 1669.871459][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1669.881640][ T24] usb 5-1: config 0 has an invalid interface number: 231 but max is 1 [ 1669.899078][ T24] usb 5-1: config 0 has no interface number 1 [ 1669.905290][ T24] usb 5-1: too many endpoints for config 0 interface 231 altsetting 15: 203, using maximum allowed: 30 [ 1669.939361][ T24] usb 5-1: config 0 interface 231 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 1669.973140][ T24] usb 5-1: config 0 interface 231 has no altsetting 0 [ 1669.983207][ T24] usb 5-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1670.005365][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.134427][ T24] usb 5-1: Product: syz [ 1670.141005][ T24] usb 5-1: Manufacturer: syz [ 1670.147759][ T24] usb 5-1: SerialNumber: syz [ 1670.182276][ T24] usb 5-1: config 0 descriptor?? [ 1670.572212][ T24] usb 5-1: Could not set interface, error -71 [ 1670.599298][ T24] usb 5-1: USB disconnect, device number 78 [ 1670.843733][T26761] loop2: detected capacity change from 0 to 7 [ 1670.920193][T26761] Dev loop2: unable to read RDB block 7 [ 1670.944421][T26761] loop2: unable to read partition table [ 1670.972458][T26761] loop2: partition table beyond EOD, truncated [ 1671.006650][T26761] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1671.489263][T18600] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1671.589283][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1671.656942][T26773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5299'. [ 1671.666996][T26773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5299'. [ 1671.682955][T18600] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1671.695477][T18600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.703790][T18600] usb 5-1: Product: syz [ 1671.708151][T18600] usb 5-1: Manufacturer: syz [ 1671.715431][T18600] usb 5-1: SerialNumber: syz [ 1671.728084][T18600] usb 5-1: config 0 descriptor?? [ 1671.748552][T18600] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1671.755150][ T24] usb 4-1: device descriptor read/64, error -71 [ 1672.019256][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1672.088067][T26780] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5301'. [ 1672.159489][ T24] usb 4-1: device descriptor read/64, error -71 [ 1672.269711][ T24] usb usb4-port1: attempt power cycle [ 1672.449575][T14516] usbhid 6-1:0.0: can't add hid device: -71 [ 1672.458480][T14516] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1672.516234][T14516] usb 6-1: USB disconnect, device number 11 [ 1672.522868][T18600] gspca_sunplus: reg_r err -110 [ 1672.650370][T26787] syz.1.5302: attempt to access beyond end of device [ 1672.650370][T26787] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1672.669136][T18600] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1672.719213][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1672.865365][ T24] usb 4-1: device descriptor read/8, error -71 [ 1673.129952][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1673.167136][ T24] usb 4-1: device descriptor read/8, error -71 [ 1673.389293][ T24] usb usb4-port1: unable to enumerate USB device [ 1673.672095][ T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1673.951872][ T24] usb 6-1: config 0 has no interfaces? [ 1674.021722][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1674.041818][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.069108][ T24] usb 6-1: Product: syz [ 1674.133417][ T24] usb 6-1: Manufacturer: syz [ 1674.158762][ T24] usb 6-1: SerialNumber: syz [ 1674.167212][ T24] usb 6-1: config 0 descriptor?? [ 1674.427436][T26797] program syz.5.5304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1674.450986][T26797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.462385][ T981] usb 5-1: USB disconnect, device number 79 [ 1674.534984][T26797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.546370][ T24] usb 6-1: USB disconnect, device number 12 [ 1677.159239][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1677.333618][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1677.363911][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1677.378951][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1677.407204][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.438959][T26825] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1677.452472][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1677.668374][T26825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.681848][T26825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.696287][ T5900] usb 6-1: USB disconnect, device number 13 [ 1677.720249][T14516] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1677.873878][T26841] netlink: 'syz.3.5313': attribute type 282 has an invalid length. [ 1677.889638][T14516] usb 2-1: Using ep0 maxpacket: 16 [ 1677.905141][T14516] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1677.919785][T14516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.931645][T14516] usb 2-1: Product: syz [ 1677.938143][T14516] usb 2-1: Manufacturer: syz [ 1677.952837][T26842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5315'. [ 1677.962119][T14516] usb 2-1: SerialNumber: syz [ 1677.978513][T14516] usb 2-1: config 0 descriptor?? [ 1677.987081][T14516] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 1678.419125][T14516] usb 2-1: clie_3_5_startup: get interface number bad return length: 0 [ 1678.464677][T14516] visor 2-1:0.0: probe with driver visor failed with error -5 [ 1678.556847][T26845] bridge_slave_1: left allmulticast mode [ 1678.566684][T26845] bridge_slave_1: left promiscuous mode [ 1678.589680][T26846] netlink: 'syz.5.5316': attribute type 10 has an invalid length. [ 1678.597946][T26845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.645534][T14516] usb 2-1: USB disconnect, device number 86 [ 1678.673397][T26845] bond0: (slave bond_slave_0): Releasing backup interface [ 1678.697933][T26845] bond0: (slave bond_slave_1): Releasing backup interface [ 1678.726209][T26845] team_slave_0: left allmulticast mode [ 1678.779104][T26845] team_slave_0: left promiscuous mode [ 1678.827197][T26845] team0: Port device team_slave_0 removed [ 1678.883280][T26845] team_slave_1: left allmulticast mode [ 1678.908333][T26845] team_slave_1: left promiscuous mode [ 1678.969194][T26845] team0: Port device team_slave_1 removed [ 1679.068923][T26846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.078791][T26846] team0: Device bond0 failed to register rx_handler [ 1679.220132][T24792] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1679.329651][T10381] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1679.383495][T24792] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1679.393045][T24792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.409993][T24792] usb 5-1: Product: syz [ 1679.414248][T24792] usb 5-1: Manufacturer: syz [ 1679.418849][T24792] usb 5-1: SerialNumber: syz [ 1679.442073][T24792] usb 5-1: config 0 descriptor?? [ 1679.462015][T24792] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1679.489187][ T5900] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1679.496836][T10381] usb 4-1: Using ep0 maxpacket: 16 [ 1679.508232][T10381] usb 4-1: config 3 has an invalid interface number: 42 but max is 1 [ 1679.516949][T10381] usb 4-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 1679.539544][T10381] usb 4-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 1679.548270][T10381] usb 4-1: config 3 has an invalid interface number: 20 but max is 1 [ 1679.569455][T10381] usb 4-1: config 3 has no interface number 0 [ 1679.575560][T10381] usb 4-1: config 3 has no interface number 1 [ 1679.599606][T10381] usb 4-1: config 3 interface 42 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1679.623716][T10381] usb 4-1: config 3 interface 42 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 1679.635029][T10381] usb 4-1: config 3 interface 42 altsetting 9 bulk endpoint 0x2 has invalid maxpacket 16 [ 1679.645539][T10381] usb 4-1: config 3 interface 20 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1679.657171][T10381] usb 4-1: config 3 interface 20 altsetting 2 bulk endpoint 0xF has invalid maxpacket 1023 [ 1679.659577][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 1679.668402][T10381] usb 4-1: config 3 interface 20 altsetting 2 endpoint 0x7 has invalid maxpacket 447, setting to 64 [ 1679.684281][T10381] usb 4-1: config 3 interface 20 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1679.695503][T10381] usb 4-1: config 3 interface 20 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1679.710324][T10381] usb 4-1: config 3 interface 20 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 1679.725293][ T5900] usb 2-1: config 0 has an invalid interface number: 224 but max is 0 [ 1679.728258][T10381] usb 4-1: config 3 interface 42 has no altsetting 0 [ 1679.740691][ T5900] usb 2-1: config 0 has an invalid descriptor of length 21, skipping remainder of the config [ 1679.740717][ T5900] usb 2-1: config 0 has no interface number 0 [ 1679.740749][ T5900] usb 2-1: too many endpoints for config 0 interface 224 altsetting 246: 54, using maximum allowed: 30 [ 1679.740788][ T5900] usb 2-1: config 0 interface 224 altsetting 246 has 0 endpoint descriptors, different from the interface descriptor's value: 54 [ 1679.740816][ T5900] usb 2-1: config 0 interface 224 has no altsetting 0 [ 1679.755581][ T5900] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 1679.789648][T10381] usb 4-1: config 3 interface 20 has no altsetting 0 [ 1679.812813][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.823151][ T5900] usb 2-1: Product: syz [ 1679.823751][T10381] usb 4-1: New USB device found, idVendor=1199, idProduct=6809, bcdDevice=5f.f9 [ 1679.827406][ T5900] usb 2-1: Manufacturer: syz [ 1679.837871][T10381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.847002][ T5900] usb 2-1: SerialNumber: syz [ 1679.857051][T10381] usb 4-1: Product: syz [ 1679.858310][ T5900] usb 2-1: config 0 descriptor?? [ 1679.867831][T10381] usb 4-1: Manufacturer: syz [ 1679.873271][T10381] usb 4-1: SerialNumber: syz [ 1679.884002][T26852] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1680.095214][ T5900] asix 2-1:0.224 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1680.111055][T10381] sierra 4-1:3.42: Sierra USB modem converter detected [ 1680.113152][ T5900] asix 2-1:0.224: probe with driver asix failed with error -71 [ 1680.126703][T10381] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1680.135670][ T5900] usb 2-1: USB disconnect, device number 87 [ 1680.163670][T10381] sierra 4-1:3.20: Sierra USB modem converter detected [ 1680.176024][T10381] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 1680.191957][T24792] gspca_sunplus: reg_r err -71 [ 1680.197397][T24792] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1680.215565][T10381] usb 4-1: USB disconnect, device number 45 [ 1680.253032][T24792] usb 5-1: USB disconnect, device number 80 [ 1680.259911][T10381] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1680.296892][T10381] sierra 4-1:3.42: device disconnected [ 1680.342243][T10381] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1680.356299][T10381] sierra 4-1:3.20: device disconnected [ 1680.842577][T26869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.876448][T26870] fuse: Bad value for 'user_id' [ 1680.891319][T26870] fuse: Bad value for 'user_id' [ 1680.902230][T26869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.950254][T26870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1681.249565][T10381] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1681.442080][T10381] usb 4-1: device descriptor read/64, error -71 [ 1681.710418][T10381] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1682.019622][T10381] usb 4-1: device descriptor read/64, error -71 [ 1682.130018][T10381] usb usb4-port1: attempt power cycle [ 1682.348382][T26895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1682.463840][T26895] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1682.481971][T10381] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1682.510487][T10381] usb 4-1: device descriptor read/8, error -71 [ 1682.761359][T10381] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1682.800227][T10381] usb 4-1: device descriptor read/8, error -71 [ 1682.929713][T14516] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1682.930025][T10381] usb usb4-port1: unable to enumerate USB device [ 1683.108107][T14516] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1683.234094][T14516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.254229][T14516] usb 6-1: Product: syz [ 1683.265521][T14516] usb 6-1: Manufacturer: syz [ 1683.279729][T14516] usb 6-1: SerialNumber: syz [ 1683.319363][T14516] usb 6-1: config 0 descriptor?? [ 1683.409313][T14516] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1683.625894][T26918] bridge_slave_0: left allmulticast mode [ 1683.649479][T26918] bridge_slave_0: left promiscuous mode [ 1683.655362][T26918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.703338][T26919] netlink: 'syz.6.5337': attribute type 10 has an invalid length. [ 1683.712409][T26918] bridge_slave_1: left allmulticast mode [ 1683.718140][T26918] bridge_slave_1: left promiscuous mode [ 1683.732409][T26921] netlink: 165 bytes leftover after parsing attributes in process `syz.5.5335'. [ 1683.751876][T26918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.771691][T26918] bond0: (slave bond_slave_0): Releasing backup interface [ 1683.784039][T26918] bond0: (slave bond_slave_1): Releasing backup interface [ 1683.815385][T26918] team0: Port device team_slave_0 removed [ 1683.817623][T26924] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5339'. [ 1683.837097][T26918] team0: Port device team_slave_1 removed [ 1683.845255][T26918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1683.856626][T26918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1683.886931][T26924] netlink: 'syz.4.5339': attribute type 1 has an invalid length. [ 1683.890371][T26918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1683.916282][T26918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.967086][T26928] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5340'. [ 1684.005679][T26928] netlink: 'syz.3.5340': attribute type 1 has an invalid length. [ 1684.015959][T26919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1684.061597][T26919] team0: Port device bond0 added [ 1684.113825][T26924] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1684.236057][T26928] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1684.269389][T14516] gspca_sunplus: reg_r err -110 [ 1684.277019][T14516] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1684.458868][T26947] loop2: detected capacity change from 0 to 7 [ 1684.467339][T26947] loop2: p1 [ 1684.472656][T26947] loop2: partition table partially beyond EOD, truncated [ 1684.481886][T26947] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1684.540030][T23653] udevd[23653]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1684.708851][T26952] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5346'. [ 1684.854595][T26955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1685.259211][T14516] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1685.419134][T14516] usb 4-1: Using ep0 maxpacket: 8 [ 1685.430889][T14516] usb 4-1: config 10 has an invalid interface number: 193 but max is 31 [ 1685.441035][T14516] usb 4-1: config 10 has 1 interface, different from the descriptor's value: 32 [ 1685.451678][T14516] usb 4-1: config 10 has no interface number 0 [ 1685.460528][T14516] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=be.93 [ 1685.469942][T14516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.477953][T14516] usb 4-1: Product: syz [ 1685.482582][T14516] usb 4-1: Manufacturer: syz [ 1685.487234][T14516] usb 4-1: SerialNumber: syz [ 1686.019681][T10381] usb 6-1: USB disconnect, device number 14 [ 1686.656619][T26973] bridge0: entered promiscuous mode [ 1686.663561][T26973] macvlan2: entered promiscuous mode [ 1686.671325][T26973] bridge0: port 1(macvlan2) entered blocking state [ 1686.677958][T26973] bridge0: port 1(macvlan2) entered disabled state [ 1686.709944][T26973] macvlan2: entered allmulticast mode [ 1686.719592][T26973] bridge0: entered allmulticast mode [ 1686.730177][T26973] macvlan2: left allmulticast mode [ 1686.735441][T26973] bridge0: left allmulticast mode [ 1686.745621][T26973] bridge0: left promiscuous mode [ 1687.437036][T26991] syz.5.5352: attempt to access beyond end of device [ 1687.437036][T26991] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1688.051925][T14516] rtsx_usb 4-1:10.193: probe with driver rtsx_usb failed with error -22 [ 1688.104725][T14516] usb 4-1: USB disconnect, device number 50 [ 1689.209453][T18600] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1689.452463][T18600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.489442][T18600] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1689.510881][T18600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.532906][T18600] usb 4-1: config 0 descriptor?? [ 1689.906344][ T981] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 1689.929926][ T981] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1690.636044][T27027] binder: BINDER_SET_CONTEXT_MGR already set [ 1690.644042][T27027] binder: 27011:27027 ioctl 4018620d 200000000040 returned -16 [ 1690.667754][T27027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1690.680848][T27027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1690.863384][T27020] fido_id[27020]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1691.391412][T24792] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1691.487986][T27035] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5365'. [ 1691.551551][T24792] usb 6-1: config 0 has no interfaces? [ 1691.563995][T27036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5365'. [ 1691.698388][T24792] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1691.716048][T24792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.738044][T24792] usb 6-1: Product: syz [ 1691.762307][T24792] usb 6-1: Manufacturer: syz [ 1691.787336][T24792] usb 6-1: SerialNumber: syz [ 1691.817651][T24792] usb 6-1: config 0 descriptor?? [ 1692.615072][T18600] usbhid 4-1:0.0: can't add hid device: -71 [ 1692.650114][T18600] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1692.683938][T18600] usb 4-1: USB disconnect, device number 51 [ 1692.775845][T27051] macvlan2: entered promiscuous mode [ 1692.798726][T27051] bridge0: port 1(macvlan2) entered blocking state [ 1692.839150][T27051] bridge0: port 1(macvlan2) entered disabled state [ 1692.846350][T27051] macvlan2: entered allmulticast mode [ 1692.856674][T27051] bridge0: entered allmulticast mode [ 1692.871924][T27051] macvlan2: left allmulticast mode [ 1692.886370][T27051] bridge0: left allmulticast mode [ 1692.908534][T10381] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1693.070446][T10381] usb 5-1: Using ep0 maxpacket: 32 [ 1693.087917][T10381] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1693.089574][T27057] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5373'. [ 1693.122293][T27057] sock: sock_timestamping_bind_phc: sock not bind to device [ 1693.143236][T10381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1693.190571][T10381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1693.241302][T10381] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1693.263609][T10381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.276807][T10381] usb 5-1: config 0 descriptor?? [ 1693.286254][T27049] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1693.296051][T10381] hub 5-1:0.0: USB hub found [ 1693.609340][T27066] hub 9-0:1.0: USB hub found [ 1693.629364][T27066] hub 9-0:1.0: 1 port detected [ 1693.780004][T10381] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1693.825559][T27067] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1693.840347][T27067] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1693.862215][T27067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1693.879144][T27067] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1693.888714][T27067] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1693.909700][T27067] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1693.920981][T27067] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1693.940513][T27067] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1693.951825][T27067] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1693.969292][T27067] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1693.991574][T27067] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1694.108421][T18600] usb 6-1: USB disconnect, device number 15 [ 1694.243047][T27077] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5376'. [ 1694.323743][T27084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5378'. [ 1694.799682][ T981] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1694.960088][ T981] usb 2-1: Using ep0 maxpacket: 8 [ 1694.975537][ T981] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1694.995858][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.030394][ T981] usb 2-1: Product: syz [ 1695.037226][T27101] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5383'. [ 1695.050092][ T981] usb 2-1: Manufacturer: syz [ 1695.055886][ T981] usb 2-1: SerialNumber: syz [ 1695.068424][ T981] usb 2-1: config 0 descriptor?? [ 1695.081939][ T981] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1695.259066][ T5900] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1695.419231][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 1695.444603][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1695.466132][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1695.503145][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1695.535291][ T5900] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1695.556614][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.584198][ T5900] usb 4-1: Product: syz [ 1695.602764][ T5900] usb 4-1: Manufacturer: syz [ 1695.619893][ T5900] usb 4-1: SerialNumber: syz [ 1695.693513][T10381] usbhid 5-1:0.0: can't add hid device: -71 [ 1695.700977][ T5900] usb 4-1: config 0 descriptor?? [ 1695.715759][ T5900] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 1695.741568][T10381] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1695.750031][T19490] Bluetooth: hci5: command 0x0406 tx timeout [ 1695.801821][T27114] netlink: 'syz.4.5388': attribute type 26 has an invalid length. [ 1695.803443][T10381] usb 5-1: USB disconnect, device number 81 [ 1695.899990][T15272] Bluetooth: hci2: command 0x0406 tx timeout [ 1695.906299][T19490] Bluetooth: hci0: command 0x0406 tx timeout [ 1695.918752][ T5900] usb 4-1: USB disconnect, device number 52 [ 1695.979826][T19490] Bluetooth: hci4: command 0x0405 tx timeout [ 1695.985996][T19490] Bluetooth: hci1: command 0x0406 tx timeout [ 1696.167338][T27124] netlink: 'syz.5.5390': attribute type 4 has an invalid length. [ 1696.289108][T18600] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1696.400004][ T981] gspca_sonixj: reg_w1 err -110 [ 1696.419265][T18600] usb 5-1: device descriptor read/64, error -71 [ 1696.439121][ T5900] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 1696.492339][ T981] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 1696.600520][ T5900] usb 6-1: device descriptor read/64, error -71 [ 1696.669259][T18600] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1696.809200][T18600] usb 5-1: device descriptor read/64, error -71 [ 1696.869295][ T5900] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1696.919474][T18600] usb usb5-port1: attempt power cycle [ 1697.009140][ T5900] usb 6-1: device descriptor read/64, error -71 [ 1697.137614][ T5900] usb usb6-port1: attempt power cycle [ 1697.161159][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1697.161179][ T30] audit: type=1326 audit(1749180878.515:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27136 comm="syz.3.5395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83a138e929 code=0x0 [ 1697.269371][T18600] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1697.299820][T18600] usb 5-1: device descriptor read/8, error -71 [ 1697.509118][ T5900] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1697.530632][ T5900] usb 6-1: device descriptor read/8, error -71 [ 1697.559146][T18600] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1697.581278][T18600] usb 5-1: device descriptor read/8, error -71 [ 1697.701642][T18600] usb usb5-port1: unable to enumerate USB device [ 1697.779099][ T5900] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 1697.800555][ T5900] usb 6-1: device descriptor read/8, error -71 [ 1697.821832][T19490] Bluetooth: hci5: command 0x0406 tx timeout [ 1697.836435][ T5891] usb 2-1: USB disconnect, device number 88 [ 1697.930699][ T5900] usb usb6-port1: unable to enumerate USB device [ 1697.979870][T15272] Bluetooth: hci2: command 0x0406 tx timeout [ 1697.986004][T19490] Bluetooth: hci0: command 0x0406 tx timeout [ 1698.059719][T19490] Bluetooth: hci1: command 0x0406 tx timeout [ 1698.067315][T15272] Bluetooth: hci4: command 0x0405 tx timeout [ 1698.092520][T27145] syz.1.5396: attempt to access beyond end of device [ 1698.092520][T27145] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1698.264175][T27143] delete_channel: no stack [ 1698.268777][T27143] delete_channel: no stack [ 1698.559821][T27150] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5398'. [ 1698.577051][T27150] QAT: failed to copy from user cfg_data. [ 1699.042283][T27154] fuse: Bad value for 'fd' [ 1699.250835][T27162] loop2: detected capacity change from 0 to 7 [ 1699.258630][T27162] loop2: p1 [ 1699.264750][T27162] loop2: partition table partially beyond EOD, truncated [ 1699.320317][T27162] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1699.789066][ T5900] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1699.949149][T18603] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1699.983000][ T5900] usb 5-1: config 0 has no interfaces? [ 1700.014025][ T5900] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1700.049215][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.108218][ T5900] usb 5-1: Product: syz [ 1700.133547][ T5900] usb 5-1: Manufacturer: syz [ 1700.138333][ T5900] usb 5-1: SerialNumber: syz [ 1700.142059][T19490] Bluetooth: hci4: command 0x0405 tx timeout [ 1700.146516][ T5900] usb 5-1: config 0 descriptor?? [ 1700.196004][T18603] usb 6-1: config 127 has an invalid interface number: 238 but max is 0 [ 1700.207457][T18603] usb 6-1: config 127 has no interface number 0 [ 1700.214470][T27182] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1700.224315][T18603] usb 6-1: config 127 interface 238 has no altsetting 0 [ 1700.267823][T18603] usb 6-1: New USB device found, idVendor=413c, idProduct=8193, bcdDevice=fb.23 [ 1700.305498][T18603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.321885][T18603] usb 6-1: Product: syz [ 1700.328190][T18603] usb 6-1: Manufacturer: syz [ 1700.333408][T18603] usb 6-1: SerialNumber: syz [ 1700.495105][T27168] program syz.4.5402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1700.521722][T27168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.534708][T27168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.162659][ T981] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1701.331507][ T981] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.343779][ T981] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1701.353827][ T981] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1701.363968][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.372857][ T981] usb 2-1: Product: syz [ 1701.377281][ T981] usb 2-1: Manufacturer: syz [ 1701.382846][ T981] usb 2-1: SerialNumber: syz [ 1701.391919][ T981] usb 2-1: config 0 descriptor?? [ 1701.401907][ T981] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1701.413272][ T981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1701.430743][ T981] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1701.440500][ T981] usb 2-1: media controller created [ 1701.465368][ T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1701.522129][ T981] DVB: Unable to find symbol tda10046_attach() [ 1701.528341][ T981] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1701.539637][ T981] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1701.539939][ T5900] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1701.709092][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 1701.716357][ T5900] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1701.725715][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.771728][ T5900] usb 4-1: config 0 descriptor?? [ 1701.790253][ T5900] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1702.246160][ T981] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1702.261316][ T981] usb 2-1: USB disconnect, device number 89 [ 1702.401824][T10381] usb 5-1: USB disconnect, device number 86 [ 1702.780407][T18603] usb 6-1: USB disconnect, device number 20 [ 1703.305306][T27222] syz.1.5420: attempt to access beyond end of device [ 1703.305306][T27222] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1703.435847][ T5900] gspca_sunplus: reg_w_riv err -71 [ 1703.466898][ T5900] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1703.521787][ T5900] usb 4-1: USB disconnect, device number 53 [ 1704.254183][T27235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5423'. [ 1704.320015][T27237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5424'. [ 1704.379596][T27237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5424'. [ 1704.727615][T27240] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5425'. [ 1704.742950][T27240] netlink: 'syz.3.5425': attribute type 1 has an invalid length. [ 1704.860743][T27240] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1705.049184][ T5900] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1705.124103][T27258] syzkaller1: entered promiscuous mode [ 1705.133098][T27258] syzkaller1: entered allmulticast mode [ 1705.175965][T27258] dvmrp1: entered allmulticast mode [ 1705.186432][T27258] netlink: 'syz.6.5430': attribute type 275 has an invalid length. [ 1705.212869][ T5900] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1705.212896][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.212915][ T5900] usb 2-1: Product: syz [ 1705.212928][ T5900] usb 2-1: Manufacturer: syz [ 1705.212941][ T5900] usb 2-1: SerialNumber: syz [ 1705.233614][ T5900] usb 2-1: config 0 descriptor?? [ 1705.273555][ T5900] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1705.440656][ T5900] sonixb 2-1:0.0: Error reading register 00: -71 [ 1705.443360][ T5900] usb 2-1: USB disconnect, device number 90 [ 1707.139953][T18600] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1707.321484][T18600] usb 6-1: too many configurations: 223, using maximum allowed: 8 [ 1707.352681][T18600] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1707.370971][T18600] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1707.405940][T18600] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1707.416449][T18600] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1707.540322][T18600] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1707.560987][T18600] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1707.612317][T18600] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1707.624064][T18600] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1707.715859][T18600] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1707.734777][T18600] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1707.752831][T27294] xt_CT: No such helper "snmp" [ 1707.774833][T18600] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1707.793223][T18600] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1707.841674][T18600] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1707.854516][T18600] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1707.889041][T18600] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1707.907228][T18600] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1707.935048][T18600] usb 6-1: New USB device found, idVendor=2133, idProduct=0218, bcdDevice= 0.bb [ 1707.945585][T18600] usb 6-1: New USB device strings: Mfr=112, Product=13, SerialNumber=0 [ 1707.955686][T18600] usb 6-1: Product: syz [ 1707.960837][T18600] usb 6-1: Manufacturer: syz [ 1707.971765][T18600] usb 6-1: config 0 descriptor?? [ 1707.985671][T18600] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1708.139467][T10381] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1708.289706][T10381] usb 2-1: Using ep0 maxpacket: 32 [ 1708.304821][T10381] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.330053][T10381] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1708.353238][T10381] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1708.361985][T10381] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1708.372616][T10381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.394937][T10381] usb 2-1: config 0 descriptor?? [ 1708.537463][T27281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.584730][T27281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.503864][T10381] usbhid 2-1:0.0: can't add hid device: -71 [ 1709.519772][T10381] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1709.592525][T10381] usb 2-1: USB disconnect, device number 91 [ 1710.118155][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030c70c00: rx timeout, send abort [ 1710.409317][ T5900] usb 6-1: USB disconnect, device number 21 [ 1710.618257][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030c70400: rx timeout, send abort [ 1710.626692][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030c70c00: abort rx timeout. Force session deactivation [ 1710.770168][T27351] netlink: 'syz.6.5455': attribute type 21 has an invalid length. [ 1710.803350][T27351] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5455'. [ 1711.126559][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030c70400: abort rx timeout. Force session deactivation [ 1712.569203][ T5900] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1712.752859][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 1712.802178][ T5900] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1712.846285][ T5900] usb 5-1: config 179 has no interface number 0 [ 1712.883656][ T5900] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1712.937016][ T5900] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1712.969353][ T5900] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1713.031446][ T5900] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1713.069076][ T5900] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1713.126160][ T5900] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1713.184979][ T5900] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1713.209047][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.292335][ T5900] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input116 [ 1713.480483][T27390] syzkaller1: entered promiscuous mode [ 1713.486059][T27390] syzkaller1: entered allmulticast mode [ 1713.496264][T27390] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1713.647076][ T5891] usb 5-1: USB disconnect, device number 87 [ 1713.647630][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1713.661444][ T5891] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1714.009582][ T5900] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1714.288020][T27415] netlink: 'syz.3.5473': attribute type 10 has an invalid length. [ 1714.394541][T27415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.432549][ T5900] usb 2-1: config 0 has no interfaces? [ 1714.445666][T27415] team0: Device bond0 failed to register rx_handler [ 1714.446508][ T5900] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1714.466215][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.475415][ T5900] usb 2-1: Product: syz [ 1714.489142][ T5900] usb 2-1: Manufacturer: syz [ 1714.502948][ T5900] usb 2-1: SerialNumber: syz [ 1714.519825][ T5900] usb 2-1: config 0 descriptor?? [ 1714.787378][T27402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.797072][T27402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.303525][T27435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5478'. [ 1715.375658][T27434] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 1715.432857][T27434] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 1715.626221][T27438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5481'. [ 1716.809293][T18600] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1716.856792][T27459] veth0_to_bond: entered promiscuous mode [ 1716.876689][T27458] veth0_to_bond: left promiscuous mode [ 1716.936771][T18603] usb 2-1: USB disconnect, device number 92 [ 1716.969303][T18600] usb 6-1: Using ep0 maxpacket: 8 [ 1716.977305][T18600] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1717.039665][T18600] usb 6-1: config 179 has no interface number 0 [ 1717.075747][T18600] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1717.099576][T18600] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1717.112381][T18600] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1717.124508][T18600] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1717.136607][T18600] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1717.151489][T18600] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1717.160900][T18600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.271724][T27451] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1717.496138][T27451] fuse: Bad value for 'rootmode' [ 1717.846409][T10381] usb 6-1: USB disconnect, device number 22 [ 1717.846520][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1717.860800][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1718.278591][ T30] audit: type=1326 audit(1749180899.625:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27475 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06038e929 code=0x7ffc0000 [ 1718.445969][ T30] audit: type=1326 audit(1749180899.625:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27475 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06038e929 code=0x7ffc0000 [ 1718.548389][ T30] audit: type=1326 audit(1749180899.665:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27475 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd06038e929 code=0x7ffc0000 [ 1718.642336][ T30] audit: type=1326 audit(1749180899.665:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27475 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06038e929 code=0x7ffc0000 [ 1718.743088][ T30] audit: type=1326 audit(1749180899.665:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27475 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06038e929 code=0x7ffc0000 [ 1718.923707][ T30] audit: type=1326 audit(1749180899.665:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27475 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd06038e929 code=0x7ffc0000 [ 1718.995403][ T30] audit: type=1326 audit(1749180899.665:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27475 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06038e929 code=0x7ffc0000 [ 1719.039851][ T30] audit: type=1326 audit(1749180899.665:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27475 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd06038e929 code=0x7ffc0000 [ 1719.062851][ T30] audit: type=1326 audit(1749180899.675:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27475 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06038e929 code=0x7ffc0000 [ 1719.098613][ T30] audit: type=1326 audit(1749180899.675:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27475 comm="syz.6.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fd06038e929 code=0x7ffc0000 [ 1719.474933][T27486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1719.999244][T18600] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1720.150237][T18600] usb 6-1: Using ep0 maxpacket: 16 [ 1720.163635][T18600] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1720.194520][T18600] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.225869][T18600] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1720.239857][T18600] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1720.253189][T18600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.261494][T18600] usb 6-1: Product: syz [ 1720.276866][T18600] usb 6-1: Manufacturer: syz [ 1720.282677][T18600] usb 6-1: SerialNumber: syz [ 1720.507257][T18600] usb 6-1: 0:2 : does not exist [ 1720.856300][T27507] binder: 27506:27507 ioctl c018620c 200000000380 returned -22 [ 1721.048065][T18600] usb 6-1: USB disconnect, device number 23 [ 1721.131128][T23653] udevd[23653]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1721.264385][T27512] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5503'. [ 1721.997350][T27532] syz.1.5506: attempt to access beyond end of device [ 1721.997350][T27532] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1722.295156][T27544] fuse: Bad value for 'fd' [ 1722.300226][T27543] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 1723.000647][T27560] netlink: 'syz.5.5514': attribute type 10 has an invalid length. [ 1723.856253][T27560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.033466][T27560] team0: Device bond0 failed to register rx_handler [ 1724.929377][T18600] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1725.156385][T18600] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1725.189920][T18600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.229668][T18600] usb 5-1: Product: syz [ 1725.261079][T18600] usb 5-1: Manufacturer: syz [ 1725.279581][T18600] usb 5-1: SerialNumber: syz [ 1725.290521][T18603] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1725.331007][T18600] usb 5-1: config 0 descriptor?? [ 1725.480946][T18603] usb 6-1: Using ep0 maxpacket: 32 [ 1725.493532][T18603] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1725.502580][T18603] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1725.514184][T18603] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1725.526032][T18603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1725.544315][T18603] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1725.557489][T18603] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1725.571630][T18603] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1725.581360][T18603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.618215][T18603] usb 6-1: config 0 descriptor?? [ 1725.884412][T18603] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1725.922518][T27572] netlink: 'syz.4.5517': attribute type 1 has an invalid length. [ 1725.955737][T18603] usb 6-1: USB disconnect, device number 24 [ 1726.001347][T18603] usblp0: removed [ 1726.053073][T27587] xt_hashlimit: max too large, truncated to 1048576 [ 1726.067173][T27587] xt_bpf: check failed: parse error [ 1726.349767][T18603] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1726.415298][T18600] usb 5-1: non-Atmel transceiver xxxx0000 [ 1726.529146][T18603] usb 6-1: Using ep0 maxpacket: 32 [ 1726.536936][T18603] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1726.546492][T18603] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1726.556159][T18603] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1726.583087][T18603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1726.593165][T18603] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1726.610110][T18603] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1726.624000][T18600] usb 5-1: Firmware version (0.0) predates our first public release. [ 1726.636983][T18600] usb 5-1: Please update to version 0.2 or newer [ 1726.644962][T18600] usb 5-1: atusb_probe: initialization failed, error = -19 [ 1726.656187][T18600] usb 5-1: USB disconnect, device number 88 [ 1726.678846][T18603] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1726.706170][T18603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.731539][T18603] usb 6-1: config 0 descriptor?? [ 1727.264477][T18603] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1727.318298][T27594] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1727.409676][T27597] netlink: 'syz.4.5522': attribute type 1 has an invalid length. [ 1727.448875][ T5891] usb 6-1: USB disconnect, device number 25 [ 1727.458536][ T5891] usblp0: removed [ 1727.541941][T27597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1727.572040][T27599] bond1: (slave gretap1): making interface the new active one [ 1727.628054][T27599] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1728.144384][T27599] syz.4.5522 (27599) used greatest stack depth: 17944 bytes left [ 1728.320586][T10381] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1728.489509][T10381] usb 6-1: Using ep0 maxpacket: 8 [ 1728.509831][T10381] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1728.524357][T10381] usb 6-1: config 179 has no interface number 0 [ 1728.535014][T10381] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1728.549658][T10381] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1728.565429][T10381] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1728.578051][T10381] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1728.590759][T10381] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1728.604863][T10381] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1728.614376][T10381] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1728.624335][T10381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.708867][T10381] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input117 [ 1728.823478][T27623] syz.3.5528: attempt to access beyond end of device [ 1728.823478][T27623] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1729.047277][T18600] usb 6-1: USB disconnect, device number 26 [ 1729.076271][T18600] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1729.909941][T18600] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1730.289613][T24792] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1730.396185][T18600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1730.409750][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.416127][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.456423][T18600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.479695][T24792] usb 6-1: Using ep0 maxpacket: 8 [ 1730.501479][T24792] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1730.533933][T18600] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1730.535468][T24792] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1730.589551][T24792] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1730.631741][T18600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.670103][T18600] usb 2-1: config 0 descriptor?? [ 1730.705670][T24792] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1730.761217][T24792] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1730.800773][T24792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.859201][ T5900] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1730.929600][T24792] usb 6-1: Product: syz [ 1730.956240][T27640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.969399][T27640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.977659][T24792] usb 6-1: Manufacturer: syz [ 1730.994602][T24792] usb 6-1: SerialNumber: syz [ 1731.009415][ T5900] usb 5-1: device descriptor read/64, error -71 [ 1731.117920][T27644] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1731.389967][ T5900] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1731.428004][T27656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.439390][T27656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.449770][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1731.449788][ T30] audit: type=1326 audit(1749180912.775:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27639 comm="syz.1.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5758e929 code=0x7ffc0000 [ 1731.495942][T27655] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5537'. [ 1731.503939][ T30] audit: type=1326 audit(1749180912.775:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27639 comm="syz.1.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f9c5758e929 code=0x7ffc0000 [ 1731.543326][ T30] audit: type=1326 audit(1749180912.775:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27639 comm="syz.1.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5758e929 code=0x7ffc0000 [ 1731.572934][ T30] audit: type=1326 audit(1749180912.775:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27639 comm="syz.1.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5758e929 code=0x7ffc0000 [ 1731.589178][ T5900] usb 5-1: device descriptor read/64, error -71 [ 1731.606368][ T30] audit: type=1326 audit(1749180912.775:5656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27639 comm="syz.1.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c5758e929 code=0x7ffc0000 [ 1731.633694][ T30] audit: type=1326 audit(1749180912.775:5657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27639 comm="syz.1.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5758e929 code=0x7ffc0000 [ 1731.740198][ T5900] usb usb5-port1: attempt power cycle [ 1731.757481][ T30] audit: type=1326 audit(1749180912.775:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27639 comm="syz.1.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c5758d290 code=0x7ffc0000 [ 1731.852155][ T30] audit: type=1326 audit(1749180912.775:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27639 comm="syz.1.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c5758e52b code=0x7ffc0000 [ 1732.189242][ T5900] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1732.335781][ T30] audit: type=1326 audit(1749180912.775:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27639 comm="syz.1.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c5758e52b code=0x7ffc0000 [ 1732.362771][T18600] usbhid 2-1:0.0: can't add hid device: -71 [ 1732.381721][ T5900] usb 5-1: device descriptor read/8, error -71 [ 1732.395872][T18600] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1732.445401][T27665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5540'. [ 1732.470007][ T30] audit: type=1326 audit(1749180912.855:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27639 comm="syz.1.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5758e929 code=0x7ffc0000 [ 1732.502160][T18600] usb 2-1: USB disconnect, device number 93 [ 1732.649184][ T5900] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1732.681119][ T5900] usb 5-1: device descriptor read/8, error -71 [ 1732.802278][ T5900] usb usb5-port1: unable to enumerate USB device [ 1732.829167][T18603] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1732.902862][T24792] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input118 [ 1732.944511][ T5190] bcm5974 6-1:1.0: could not read from device [ 1732.975433][T24792] usb 6-1: USB disconnect, device number 27 [ 1732.981875][ T5190] bcm5974 6-1:1.0: could not read from device [ 1733.015138][T18603] usb 4-1: config index 0 descriptor too short (expected 25454, got 77) [ 1733.037067][T18603] usb 4-1: config 115 has too many interfaces: 47, using maximum allowed: 32 [ 1733.066174][T18603] usb 4-1: config 115 has an invalid descriptor of length 121, skipping remainder of the config [ 1733.099096][T18603] usb 4-1: config 115 has 0 interfaces, different from the descriptor's value: 47 [ 1733.110919][T27674] netlink: 'syz.5.5542': attribute type 10 has an invalid length. [ 1733.121234][T27674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1733.128227][T27674] team0: Device bond0 failed to register rx_handler [ 1733.131266][T18603] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1733.165798][T18603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.187289][T18603] usb 4-1: Product: syz [ 1733.192411][T18603] usb 4-1: Manufacturer: syz [ 1733.197094][T18603] usb 4-1: SerialNumber: syz [ 1733.417526][T27666] netlink: 'syz.3.5540': attribute type 7 has an invalid length. [ 1733.430693][T27666] netlink: 'syz.3.5540': attribute type 10 has an invalid length. [ 1733.495634][T27666] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1733.976252][T27698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5552'. [ 1734.071779][T27704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5552'. [ 1734.208536][T27706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5552'. [ 1735.379426][T18603] usb 4-1: USB disconnect, device number 55 [ 1735.565984][T27713] veth0_macvtap: left promiscuous mode [ 1735.817682][T27719] netlink: 'syz.6.5558': attribute type 32 has an invalid length. [ 1735.850629][T27719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5558'. [ 1735.868293][T27719] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 1735.987278][T27725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5560'. [ 1736.361708][T27732] netlink: 'syz.4.5561': attribute type 10 has an invalid length. [ 1736.405561][T27731] team0: Port device bond0 removed [ 1736.465018][T27731] bridge_slave_0: left allmulticast mode [ 1736.482808][T27731] bridge_slave_0: left promiscuous mode [ 1736.500119][T27731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.521945][T27731] bridge_slave_1: left allmulticast mode [ 1736.537569][T27731] bridge_slave_1: left promiscuous mode [ 1736.595120][T27731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.672326][T27731] bond0: (slave bond_slave_0): Releasing backup interface [ 1736.707399][T27731] bond0: (slave bond_slave_1): Releasing backup interface [ 1736.761837][T27731] team0: Port device team_slave_0 removed [ 1736.800495][T27731] team0: Port device team_slave_1 removed [ 1736.826062][T27731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.877601][T27731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.890975][T27731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1736.902019][T27731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1736.937539][T27731] bond1: (slave gretap1): Releasing active interface [ 1736.983233][T27732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1737.015996][T27732] team0: Port device bond0 added [ 1737.409848][T18603] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1737.589904][T18603] usb 2-1: Using ep0 maxpacket: 32 [ 1737.638475][T18603] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 1737.728123][T18603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.789974][T18603] usb 2-1: Product: syz [ 1737.794189][T18603] usb 2-1: Manufacturer: syz [ 1737.798809][T18603] usb 2-1: SerialNumber: syz [ 1737.848247][T18603] usb 2-1: config 0 descriptor?? [ 1737.882262][T18603] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 1738.100085][T18603] gspca_sn9c2028: read1 error -71 [ 1738.112549][T18603] gspca_sn9c2028: read1 error -71 [ 1738.123309][T18603] gspca_sn9c2028: read1 error -71 [ 1738.129861][T18603] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1738.143395][T18603] usb 2-1: USB disconnect, device number 94 [ 1739.590823][ T5891] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1739.604963][T27774] bridge0: entered promiscuous mode [ 1739.612535][T27774] macvlan1: entered promiscuous mode [ 1739.620315][T27774] bridge0: port 1(macvlan1) entered blocking state [ 1739.627856][T27774] bridge0: port 1(macvlan1) entered disabled state [ 1739.635931][T27774] macvlan1: entered allmulticast mode [ 1739.643871][T27774] bridge0: entered allmulticast mode [ 1739.657971][T27774] macvlan1: left allmulticast mode [ 1739.664463][T27774] bridge0: left allmulticast mode [ 1739.672554][T27774] bridge0: left promiscuous mode [ 1739.760189][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 1739.770318][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.784443][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1739.834354][ T5891] usb 2-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.00 [ 1739.852254][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.946057][ T5891] usb 2-1: config 0 descriptor?? [ 1740.386356][ T5891] hid-generic 0003:1477:1007.0064: hidraw0: USB HID v0.05 Device [HID 1477:1007] on usb-dummy_hcd.1-1/input0 [ 1740.404678][T27784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.431620][T27784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1740.613588][ T5900] usb 2-1: USB disconnect, device number 95 [ 1740.749883][T27792] veth0_macvtap: left promiscuous mode [ 1740.759832][T27792] macvtap0: entered promiscuous mode [ 1740.772047][T27792] macvtap0: refused to change device tx_queue_len [ 1741.273941][T27797] netlink: 'syz.1.5579': attribute type 4 has an invalid length. [ 1741.767781][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1741.767801][ T30] audit: type=1326 audit(1749180923.115:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27794 comm="syz.4.5578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e38e929 code=0x0 [ 1742.193662][T27823] netlink: 348 bytes leftover after parsing attributes in process `syz.6.5584'. [ 1742.258683][T27830] netlink: 'syz.5.5586': attribute type 21 has an invalid length. [ 1742.278408][T27829] bridge0: entered promiscuous mode [ 1742.284632][T27829] vlan2: entered promiscuous mode [ 1742.289787][T27829] bond0: entered promiscuous mode [ 1742.294852][T27829] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 1742.304224][T27829] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 27829, name: syz.1.5585 [ 1742.313410][T27829] preempt_count: 201, expected: 0 [ 1742.318468][T27829] RCU nest depth: 0, expected: 0 [ 1742.323526][T27829] 3 locks held by syz.1.5585/27829: [ 1742.328888][T27829] #0: ffffffff8ec81120 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1742.338553][T27829] #1: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1742.347772][T27829] #2: ffff888024864368 (&dev_addr_list_lock_key#6/3){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1742.358162][T27829] Preemption disabled at: [ 1742.358181][T27829] [] dev_uc_add+0x56/0x120 [ 1742.368631][T27829] CPU: 0 UID: 0 PID: 27829 Comm: syz.1.5585 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1742.368660][T27829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1742.368675][T27829] Call Trace: [ 1742.368685][T27829] [ 1742.368696][T27829] dump_stack_lvl+0x189/0x250 [ 1742.368738][T27829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1742.368771][T27829] ? __pfx__printk+0x10/0x10 [ 1742.368799][T27829] ? print_lock_name+0xde/0x100 [ 1742.368821][T27829] ? dev_uc_add+0x56/0x120 [ 1742.368849][T27829] __might_resched+0x495/0x610 [ 1742.368887][T27829] ? dev_uc_add+0x56/0x120 [ 1742.368909][T27829] ? __pfx___might_resched+0x10/0x10 [ 1742.368932][T27829] ? vprintk_emit+0x63e/0x7a0 [ 1742.368979][T27829] __mutex_lock+0x106/0xe80 [ 1742.369014][T27829] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1742.369044][T27829] ? dev_set_promiscuity+0x10e/0x260 [ 1742.369067][T27829] ? __pfx___mutex_lock+0x10/0x10 [ 1742.369105][T27829] ? __netdev_printk+0x365/0x4d0 [ 1742.369136][T27829] dev_set_promiscuity+0x10e/0x260 [ 1742.369160][T27829] bond_change_rx_flags+0x219/0x690 [ 1742.369183][T27829] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1742.369206][T27829] ? __netdev_printk+0x365/0x4d0 [ 1742.369239][T27829] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1742.369258][T27829] __dev_set_promiscuity+0x531/0x740 [ 1742.369280][T27829] ? __pfx_netdev_info+0x10/0x10 [ 1742.369309][T27829] netif_set_promiscuity+0x50/0xe0 [ 1742.369333][T27829] dev_set_promiscuity+0x126/0x260 [ 1742.369356][T27829] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 1742.369378][T27829] __dev_set_promiscuity+0x531/0x740 [ 1742.369399][T27829] ? netdev_info+0x10a/0x160 [ 1742.369426][T27829] netif_set_promiscuity+0x50/0xe0 [ 1742.369450][T27829] dev_set_promiscuity+0x126/0x260 [ 1742.369475][T27829] br_manage_promisc+0x180/0x560 [ 1742.369511][T27829] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1742.369534][T27829] __dev_set_promiscuity+0x531/0x740 [ 1742.369564][T27829] ? __hw_addr_add_ex+0x3c5/0x770 [ 1742.369590][T27829] __dev_set_rx_mode+0x17c/0x260 [ 1742.369613][T27829] dev_uc_add+0xc8/0x120 [ 1742.369638][T27829] macvlan_open+0x446/0x8e0 [ 1742.369670][T27829] __dev_open+0x46d/0x880 [ 1742.369706][T27829] ? __pfx___dev_open+0x10/0x10 [ 1742.369744][T27829] __dev_change_flags+0x1ea/0x6d0 [ 1742.369771][T27829] ? __pfx___dev_change_flags+0x10/0x10 [ 1742.369803][T27829] rtnl_newlink_create+0x555/0xb00 [ 1742.369837][T27829] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1742.369856][T27829] ? rtnl_newlink+0x8db/0x1c70 [ 1742.369888][T27829] ? __pfx___mutex_lock+0x10/0x10 [ 1742.369925][T27829] ? ns_capable+0x8a/0xf0 [ 1742.369952][T27829] rtnl_newlink+0x16d6/0x1c70 [ 1742.369976][T27829] ? netlink_sendmsg+0x805/0xb30 [ 1742.370001][T27829] ? __pfx_rtnl_newlink+0x10/0x10 [ 1742.370041][T27829] ? kasan_quarantine_put+0xdd/0x220 [ 1742.370065][T27829] ? lockdep_hardirqs_on+0x9c/0x150 [ 1742.370090][T27829] ? nlmon_xmit+0xb0/0x100 [ 1742.370103][T27829] ? kmem_cache_free+0x18f/0x400 [ 1742.370125][T27829] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1742.370148][T27829] ? lockdep_hardirqs_on+0x9c/0x150 [ 1742.370171][T27829] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1742.370198][T27829] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1742.370224][T27829] ? __dev_queue_xmit+0x27e/0x3a70 [ 1742.370252][T27829] ? __lock_acquire+0xab9/0xd20 [ 1742.370293][T27829] ? __pfx_rtnl_newlink+0x10/0x10 [ 1742.370316][T27829] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1742.370344][T27829] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1742.370366][T27829] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1742.370388][T27829] ? ref_tracker_free+0x63a/0x7d0 [ 1742.370408][T27829] ? __copy_skb_header+0xa7/0x550 [ 1742.370428][T27829] ? __pfx_ref_tracker_free+0x10/0x10 [ 1742.370459][T27829] netlink_rcv_skb+0x208/0x470 [ 1742.370475][T27829] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1742.370499][T27829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1742.370524][T27829] ? netlink_deliver_tap+0x2e/0x1b0 [ 1742.370539][T27829] ? netlink_deliver_tap+0x2e/0x1b0 [ 1742.370574][T27829] netlink_unicast+0x75b/0x8d0 [ 1742.370604][T27829] netlink_sendmsg+0x805/0xb30 [ 1742.370628][T27829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1742.370646][T27829] ? aa_sock_msg_perm+0x94/0x160 [ 1742.370667][T27829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1742.370687][T27829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1742.370702][T27829] __sock_sendmsg+0x21c/0x270 [ 1742.370724][T27829] ____sys_sendmsg+0x505/0x830 [ 1742.370743][T27829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1742.370765][T27829] ? import_iovec+0x74/0xa0 [ 1742.370784][T27829] ___sys_sendmsg+0x21f/0x2a0 [ 1742.370801][T27829] ? __pfx____sys_sendmsg+0x10/0x10 [ 1742.370842][T27829] ? __fget_files+0x2a/0x420 [ 1742.370859][T27829] ? __fget_files+0x3a0/0x420 [ 1742.370882][T27829] __x64_sys_sendmsg+0x19b/0x260 [ 1742.370900][T27829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1742.370923][T27829] ? rcu_is_watching+0x15/0xb0 [ 1742.370946][T27829] ? do_syscall_64+0xbe/0x3b0 [ 1742.370969][T27829] do_syscall_64+0xfa/0x3b0 [ 1742.370988][T27829] ? lockdep_hardirqs_on+0x9c/0x150 [ 1742.371006][T27829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.371021][T27829] ? clear_bhb_loop+0x60/0xb0 [ 1742.371057][T27829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.371072][T27829] RIP: 0033:0x7f9c5758e929 [ 1742.371087][T27829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1742.371102][T27829] RSP: 002b:00007f9c5845c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1742.371119][T27829] RAX: ffffffffffffffda RBX: 00007f9c577b5fa0 RCX: 00007f9c5758e929 [ 1742.371131][T27829] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1742.371142][T27829] RBP: 00007f9c57610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1742.371153][T27829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.371163][T27829] R13: 0000000000000000 R14: 00007f9c577b5fa0 R15: 00007f9c578dfa28 [ 1742.371186][T27829] [ 1742.937792][ C0] vkms_vblank_simulate: vblank timer overrun [ 1742.943864][T27829] [ 1742.946217][T27829] ============================= [ 1742.951109][T27829] [ BUG: Invalid wait context ] [ 1742.955985][T27829] 6.15.0-syzkaller-12293-g7fdaba912981 #0 Tainted: G W [ 1742.964342][T27829] ----------------------------- [ 1742.969208][T27829] syz.1.5585/27829 is trying to lock: [ 1742.974604][T27829] ffff888069408d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 1742.985075][T27829] other info that might help us debug this: [ 1742.990967][T27829] context-{5:5} [ 1742.994426][T27829] 3 locks held by syz.1.5585/27829: [ 1742.999619][T27829] #0: ffffffff8ec81120 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1743.009209][T27829] #1: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1743.018287][T27829] #2: ffff888024864368 (&dev_addr_list_lock_key#6/3){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1743.028506][T27829] stack backtrace: [ 1743.032233][T27829] CPU: 0 UID: 0 PID: 27829 Comm: syz.1.5585 Tainted: G W 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1743.032264][T27829] Tainted: [W]=WARN [ 1743.032270][T27829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1743.032281][T27829] Call Trace: [ 1743.032290][T27829] [ 1743.032297][T27829] dump_stack_lvl+0x189/0x250 [ 1743.032328][T27829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1743.032353][T27829] ? __pfx__printk+0x10/0x10 [ 1743.032373][T27829] ? print_lock_name+0xde/0x100 [ 1743.032390][T27829] __lock_acquire+0xbcb/0xd20 [ 1743.032415][T27829] ? dev_set_promiscuity+0x10e/0x260 [ 1743.032430][T27829] lock_acquire+0x120/0x360 [ 1743.032452][T27829] ? dev_set_promiscuity+0x10e/0x260 [ 1743.032468][T27829] ? vprintk_emit+0x63e/0x7a0 [ 1743.032486][T27829] __mutex_lock+0x182/0xe80 [ 1743.032511][T27829] ? dev_set_promiscuity+0x10e/0x260 [ 1743.032528][T27829] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1743.032551][T27829] ? dev_set_promiscuity+0x10e/0x260 [ 1743.032568][T27829] ? __pfx___mutex_lock+0x10/0x10 [ 1743.032594][T27829] ? __netdev_printk+0x365/0x4d0 [ 1743.032616][T27829] dev_set_promiscuity+0x10e/0x260 [ 1743.032634][T27829] bond_change_rx_flags+0x219/0x690 [ 1743.032651][T27829] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1743.032667][T27829] ? __netdev_printk+0x365/0x4d0 [ 1743.032690][T27829] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1743.032705][T27829] __dev_set_promiscuity+0x531/0x740 [ 1743.032722][T27829] ? __pfx_netdev_info+0x10/0x10 [ 1743.032744][T27829] netif_set_promiscuity+0x50/0xe0 [ 1743.032761][T27829] dev_set_promiscuity+0x126/0x260 [ 1743.032778][T27829] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 1743.032796][T27829] __dev_set_promiscuity+0x531/0x740 [ 1743.032812][T27829] ? netdev_info+0x10a/0x160 [ 1743.032832][T27829] netif_set_promiscuity+0x50/0xe0 [ 1743.032849][T27829] dev_set_promiscuity+0x126/0x260 [ 1743.032866][T27829] br_manage_promisc+0x180/0x560 [ 1743.032893][T27829] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1743.032911][T27829] __dev_set_promiscuity+0x531/0x740 [ 1743.032927][T27829] ? __hw_addr_add_ex+0x3c5/0x770 [ 1743.032945][T27829] __dev_set_rx_mode+0x17c/0x260 [ 1743.032961][T27829] dev_uc_add+0xc8/0x120 [ 1743.032979][T27829] macvlan_open+0x446/0x8e0 [ 1743.033000][T27829] __dev_open+0x46d/0x880 [ 1743.033025][T27829] ? __pfx___dev_open+0x10/0x10 [ 1743.033051][T27829] __dev_change_flags+0x1ea/0x6d0 [ 1743.033069][T27829] ? __pfx___dev_change_flags+0x10/0x10 [ 1743.033089][T27829] rtnl_newlink_create+0x555/0xb00 [ 1743.033111][T27829] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1743.033126][T27829] ? rtnl_newlink+0x8db/0x1c70 [ 1743.033152][T27829] ? __pfx___mutex_lock+0x10/0x10 [ 1743.033176][T27829] ? ns_capable+0x8a/0xf0 [ 1743.033202][T27829] rtnl_newlink+0x16d6/0x1c70 [ 1743.033227][T27829] ? netlink_sendmsg+0x805/0xb30 [ 1743.033253][T27829] ? __pfx_rtnl_newlink+0x10/0x10 [ 1743.033287][T27829] ? kasan_quarantine_put+0xdd/0x220 [ 1743.033312][T27829] ? lockdep_hardirqs_on+0x9c/0x150 [ 1743.033341][T27829] ? nlmon_xmit+0xb0/0x100 [ 1743.033355][T27829] ? kmem_cache_free+0x18f/0x400 [ 1743.033375][T27829] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1743.033400][T27829] ? lockdep_hardirqs_on+0x9c/0x150 [ 1743.033420][T27829] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1743.033444][T27829] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1743.033470][T27829] ? __dev_queue_xmit+0x27e/0x3a70 [ 1743.033493][T27829] ? __lock_acquire+0xab9/0xd20 [ 1743.033525][T27829] ? __pfx_rtnl_newlink+0x10/0x10 [ 1743.033548][T27829] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1743.033573][T27829] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1743.033596][T27829] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1743.033619][T27829] ? ref_tracker_free+0x63a/0x7d0 [ 1743.033641][T27829] ? __copy_skb_header+0xa7/0x550 [ 1743.033660][T27829] ? __pfx_ref_tracker_free+0x10/0x10 [ 1743.033685][T27829] netlink_rcv_skb+0x208/0x470 [ 1743.033700][T27829] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1743.033725][T27829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1743.033743][T27829] ? netlink_deliver_tap+0x2e/0x1b0 [ 1743.033758][T27829] ? netlink_deliver_tap+0x2e/0x1b0 [ 1743.033787][T27829] netlink_unicast+0x75b/0x8d0 [ 1743.033813][T27829] netlink_sendmsg+0x805/0xb30 [ 1743.033830][T27829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1743.033846][T27829] ? aa_sock_msg_perm+0x94/0x160 [ 1743.033867][T27829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1743.033888][T27829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1743.033903][T27829] __sock_sendmsg+0x21c/0x270 [ 1743.033925][T27829] ____sys_sendmsg+0x505/0x830 [ 1743.033942][T27829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1743.033961][T27829] ? import_iovec+0x74/0xa0 [ 1743.033978][T27829] ___sys_sendmsg+0x21f/0x2a0 [ 1743.033994][T27829] ? __pfx____sys_sendmsg+0x10/0x10 [ 1743.034021][T27829] ? __fget_files+0x2a/0x420 [ 1743.034038][T27829] ? __fget_files+0x3a0/0x420 [ 1743.034058][T27829] __x64_sys_sendmsg+0x19b/0x260 [ 1743.034075][T27829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1743.034095][T27829] ? rcu_is_watching+0x15/0xb0 [ 1743.034110][T27829] ? do_syscall_64+0xbe/0x3b0 [ 1743.034131][T27829] do_syscall_64+0xfa/0x3b0 [ 1743.034151][T27829] ? lockdep_hardirqs_on+0x9c/0x150 [ 1743.034170][T27829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.034185][T27829] ? clear_bhb_loop+0x60/0xb0 [ 1743.034202][T27829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.034217][T27829] RIP: 0033:0x7f9c5758e929 [ 1743.034233][T27829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1743.034254][T27829] RSP: 002b:00007f9c5845c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1743.034272][T27829] RAX: ffffffffffffffda RBX: 00007f9c577b5fa0 RCX: 00007f9c5758e929 [ 1743.034284][T27829] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1743.034295][T27829] RBP: 00007f9c57610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1743.034305][T27829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1743.034314][T27829] R13: 0000000000000000 R14: 00007f9c577b5fa0 R15: 00007f9c578dfa28 [ 1743.034330][T27829] [ 1743.611814][ C0] vkms_vblank_simulate: vblank timer overrun [ 1743.625147][T27829] macvlan2: entered promiscuous mode [ 1743.631021][T27829] bridge0: port 2(macvlan2) entered blocking state [ 1743.637723][T27829] bridge0: port 2(macvlan2) entered disabled state [ 1743.644808][T27829] macvlan2: entered allmulticast mode [ 1743.650275][T27829] bridge0: entered allmulticast mode [ 1743.680198][T27829] macvlan2: left allmulticast mode [ 1743.685426][T27829] bridge0: left allmulticast mode [ 1743.693700][T27829] bridge0: left promiscuous mode [ 1743.698747][T27829] vlan2: left promiscuous mode [ 1743.703632][T27829] bond0: left promiscuous mode [ 1743.708430][T27829] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 1743.717793][T27829] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 27829, name: syz.1.5585 [ 1743.726972][T27829] preempt_count: 201, expected: 0 [ 1743.729350][T18603] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 1743.732023][T27829] RCU nest depth: 0, expected: 0 [ 1743.744504][T27829] INFO: lockdep is turned off. [ 1743.749314][T27829] Preemption disabled at: [ 1743.749325][T27829] [] dev_uc_del+0x56/0x110 [ 1743.759729][T27829] CPU: 0 UID: 0 PID: 27829 Comm: syz.1.5585 Tainted: G W 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1743.759760][T27829] Tainted: [W]=WARN [ 1743.759768][T27829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1743.759782][T27829] Call Trace: [ 1743.759791][T27829] [ 1743.759799][T27829] dump_stack_lvl+0x189/0x250 [ 1743.759838][T27829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1743.759870][T27829] ? __pfx__printk+0x10/0x10 [ 1743.759894][T27829] ? prb_read_valid+0x3c/0x60 [ 1743.759913][T27829] ? dev_uc_del+0x56/0x110 [ 1743.759936][T27829] __might_resched+0x495/0x610 [ 1743.759957][T27829] ? dev_uc_del+0x56/0x110 [ 1743.759977][T27829] ? __pfx___might_resched+0x10/0x10 [ 1743.759995][T27829] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1743.760023][T27829] ? vprintk_emit+0x63e/0x7a0 [ 1743.760048][T27829] __mutex_lock+0x106/0xe80 [ 1743.760093][T27829] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1743.760141][T27829] ? dev_set_promiscuity+0x10e/0x260 [ 1743.760163][T27829] ? __pfx___mutex_lock+0x10/0x10 [ 1743.760194][T27829] ? __dev_set_promiscuity+0x531/0x740 [ 1743.760216][T27829] ? __netdev_printk+0x365/0x4d0 [ 1743.760245][T27829] dev_set_promiscuity+0x10e/0x260 [ 1743.760265][T27829] ? netdev_info+0x10a/0x160 [ 1743.760292][T27829] bond_change_rx_flags+0x219/0x690 [ 1743.760314][T27829] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1743.760339][T27829] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1743.760359][T27829] __dev_set_promiscuity+0x531/0x740 [ 1743.760380][T27829] ? __pfx_netdev_info+0x10/0x10 [ 1743.760408][T27829] netif_set_promiscuity+0x50/0xe0 [ 1743.760430][T27829] dev_set_promiscuity+0x126/0x260 [ 1743.760459][T27829] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 1743.760483][T27829] __dev_set_promiscuity+0x531/0x740 [ 1743.760505][T27829] ? lock_release+0x4b/0x3e0 [ 1743.760535][T27829] netif_set_promiscuity+0x50/0xe0 [ 1743.760574][T27829] dev_set_promiscuity+0x126/0x260 [ 1743.760598][T27829] br_manage_promisc+0x4db/0x560 [ 1743.760632][T27829] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1743.760656][T27829] __dev_set_promiscuity+0x531/0x740 [ 1743.760680][T27829] __dev_set_rx_mode+0x17c/0x260 [ 1743.760701][T27829] dev_uc_del+0xc0/0x110 [ 1743.760730][T27829] macvlan_stop+0x259/0x3e0 [ 1743.760754][T27829] ? __pfx_macvlan_stop+0x10/0x10 [ 1743.760778][T27829] __dev_close_many+0x364/0x6f0 [ 1743.760811][T27829] ? __pfx___dev_close_many+0x10/0x10 [ 1743.760844][T27829] ? __pfx___netdev_walk_all_upper_dev+0x10/0x10 [ 1743.760875][T27829] ? hsr_netdev_notify+0x29e/0xcf0 [ 1743.760896][T27829] dev_close_many+0x225/0x410 [ 1743.760930][T27829] ? __pfx_dev_close_many+0x10/0x10 [ 1743.760965][T27829] unregister_netdevice_many_notify+0x834/0x2320 [ 1743.761014][T27829] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1743.761042][T27829] ? unregister_netdevice_queue+0x1b3/0x380 [ 1743.761067][T27829] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1743.761099][T27829] ? netdev_upper_dev_unlink+0x91/0xd0 [ 1743.761131][T27829] ? macvlan_dellink+0x3d1/0x460 [ 1743.761155][T27829] rtnl_newlink_create+0x802/0xb00 [ 1743.761184][T27829] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1743.761204][T27829] ? rtnl_newlink+0x8db/0x1c70 [ 1743.761237][T27829] ? __pfx___mutex_lock+0x10/0x10 [ 1743.761271][T27829] ? ns_capable+0x8a/0xf0 [ 1743.761304][T27829] rtnl_newlink+0x16d6/0x1c70 [ 1743.761337][T27829] ? netlink_sendmsg+0x805/0xb30 [ 1743.761364][T27829] ? __pfx_rtnl_newlink+0x10/0x10 [ 1743.761407][T27829] ? kasan_quarantine_put+0xdd/0x220 [ 1743.761439][T27829] ? lockdep_hardirqs_on+0x9c/0x150 [ 1743.761481][T27829] ? nlmon_xmit+0xb0/0x100 [ 1743.761498][T27829] ? kmem_cache_free+0x18f/0x400 [ 1743.761524][T27829] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1743.761556][T27829] ? lockdep_hardirqs_on+0x9c/0x150 [ 1743.761582][T27829] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1743.761613][T27829] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1743.761646][T27829] ? __dev_queue_xmit+0x27e/0x3a70 [ 1743.761677][T27829] ? __lock_acquire+0xab9/0xd20 [ 1743.761718][T27829] ? __pfx_rtnl_newlink+0x10/0x10 [ 1743.761749][T27829] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1743.761782][T27829] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1743.761812][T27829] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1743.761843][T27829] ? ref_tracker_free+0x63a/0x7d0 [ 1743.761872][T27829] ? __copy_skb_header+0xa7/0x550 [ 1743.761898][T27829] ? __pfx_ref_tracker_free+0x10/0x10 [ 1743.761933][T27829] netlink_rcv_skb+0x208/0x470 [ 1743.761954][T27829] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1743.761986][T27829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1743.762024][T27829] ? netlink_deliver_tap+0x2e/0x1b0 [ 1743.762042][T27829] ? netlink_deliver_tap+0x2e/0x1b0 [ 1743.762064][T27829] netlink_unicast+0x75b/0x8d0 [ 1743.762100][T27829] netlink_sendmsg+0x805/0xb30 [ 1743.762123][T27829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1743.762145][T27829] ? aa_sock_msg_perm+0x94/0x160 [ 1743.762173][T27829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1743.762200][T27829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1743.762221][T27829] __sock_sendmsg+0x21c/0x270 [ 1743.762250][T27829] ____sys_sendmsg+0x505/0x830 [ 1743.762274][T27829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1743.762300][T27829] ? import_iovec+0x74/0xa0 [ 1743.762323][T27829] ___sys_sendmsg+0x21f/0x2a0 [ 1743.762346][T27829] ? __pfx____sys_sendmsg+0x10/0x10 [ 1743.762384][T27829] ? __fget_files+0x2a/0x420 [ 1743.762407][T27829] ? __fget_files+0x3a0/0x420 [ 1743.762436][T27829] __x64_sys_sendmsg+0x19b/0x260 [ 1743.762467][T27829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1743.762493][T27829] ? rcu_is_watching+0x15/0xb0 [ 1743.762515][T27829] ? do_syscall_64+0xbe/0x3b0 [ 1743.762545][T27829] do_syscall_64+0xfa/0x3b0 [ 1743.762571][T27829] ? lockdep_hardirqs_on+0x9c/0x150 [ 1743.762597][T27829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.762618][T27829] ? clear_bhb_loop+0x60/0xb0 [ 1743.762640][T27829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.762661][T27829] RIP: 0033:0x7f9c5758e929 [ 1743.762681][T27829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1743.762699][T27829] RSP: 002b:00007f9c5845c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1743.762721][T27829] RAX: ffffffffffffffda RBX: 00007f9c577b5fa0 RCX: 00007f9c5758e929 [ 1743.762737][T27829] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1743.762751][T27829] RBP: 00007f9c57610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1743.762764][T27829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1743.762777][T27829] R13: 0000000000000000 R14: 00007f9c577b5fa0 R15: 00007f9c578dfa28 [ 1743.762817][T27829] [ 1743.981258][T18603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1743.984796][ C0] vkms_vblank_simulate: vblank timer overrun [ 1743.990336][T18603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1744.439454][T27830] netlink: 'syz.5.5586': attribute type 6 has an invalid length. [ 1744.447220][T27830] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5586'. [ 1744.515188][T18603] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1744.526500][T18603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.536892][T18603] usb 6-1: config 0 descriptor?? [ 1744.951117][T18603] kone 0003:1E7D:2CED.0065: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 1745.188866][T18603] usb 6-1: USB disconnect, device number 28