last executing test programs: 12m44.412091778s ago: executing program 2 (id=3643): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x8002, 0x8) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x40080000, 0x7b, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x90, 0x0, 0xffffffffffffffff, {0x2, 0x0, 0x4, 0xec6f, 0x5, 0x9, {0x8, 0x7f, 0x0, 0x5, 0x100000000000000, 0x1, 0x0, 0x5, 0x3, 0xa000, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000a532ef81e019c01917f46e72d9049d66a5a3aa89dadd34263238b89032d1a31bf71b67f0d3e06595ee20a4424379e4e0edbde4765b86f4154d1e68d00442a0ee0316c89db5c9e93eb75a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000080003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYRES16=r4, @ANYRES8=r0, @ANYRES64=r6, @ANYBLOB="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"], 0x1d0}}, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) 12m42.50301523s ago: executing program 2 (id=3652): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)="d882e4ed71d9862060bf9d6a6fbb2d56626a0f4c8810a60b0434243ca06564034978a8a509e1cfef3113b0a19a07e5fea9cdec870d7028fe29a8977ac46aac030c8a226ee1247c647c1ff4b5639d18e390d68dd8c3595511a1d355b09f1d21c1febbfada6487dd9f331be34e4d8c0c4782cb8020bdf42f689310e2fe7e3576f15a7008851b84ca53b8676dfe320540b9854bce", 0x93}, {&(0x7f0000000400)="362e21edb1bad26d5295cd5c4a77d7044e50a00b6991f5a9a33b9888de5fd3482c897a2e9536dad73822615b2fd90819cad48466d8967de899f564c327763eb41c10d180603a0e2e3a2424a2f691a25e49293da315f856c15a759e1dd5e86fbf18f94bd1eb7eab608b4610e458048bb50af719b8bef64076c89692131890154857c41dffd5154b87a10a09f9e133faae7a801a9f6176f5a9bbde416a63ce7fa47af902d40a", 0xa5}, {&(0x7f00000004c0)="1117c0c8ae885f281b08b88ad788a84bd2dcfbf1773dde373b803f87997a322b05fc1bbb8079066e11fbe9149a04fa88b618748079070adb84e5743ccefae47f01c2bb6cb895b0f41bf8c3709a08e0c19388c4c08927ff6131773806c286ff143fbafeeef224bd5f68994e1f3597c8c2275eab555548dc854ccf48e86ca480e01c5c6988c62255d8d9bac555f93370b2b693138f2f154f4e188006305226e3c78e6832f2a56201d85b2155225c85a1b52e12abaf65346e705adc6a11f0bfa1c2a81c6985f15872454aa482bd7eebd0ef753f2cb0dd7f7a3277de7c2a01302ca7b2cfcbcc60d5ae588a382e4494eba9dc9cafb8b849f84cbd0e2bf65e", 0xfc}, {&(0x7f00000005c0)="000f056803e95b42d2c882fd5654532e8b769cd6353e14902e234db47bef64c122dfaa5fe0dee91665589c40ddf108365f8167662b070889ac7a152f0d503b6a5e8c00901c2583e8dacab5f824dd6901ca7eab8fa8f4c506d9f345a05aeb5f738cc5a012e72e6b4b7bc6ae962dbc252417f7cf908cc7b57e", 0x78}, {&(0x7f0000000640)="6da3cfd5b4e983261aa6", 0xa}, {&(0x7f0000000680)="ba247feb2b36ba318d289e28eaa8831785406ccba7547769e6a411041c154b9919a1d0e8732f842b238013b301e3180738067c0f07dc2ff3f44bfb6ef5273c38bdc0fbe7d4a3e66845fd41a448e5c5a19ecec4d218f459c20811d69a5c89e6984506fc4555c17f18c69d1692f2439e8aca685bb88f7fa319e400c151ae4aeb5695e74ccf0b56ec8bd276ae233eec581a5bcb1454e8d500b3bad187812e3ac9c99b263c0673712fda8ab871bd7871f3326e2a759c15f23c90d76a8b61485f01b6042d94b5918446e4253dce6bf3eba528", 0xd0}, {&(0x7f0000000780)="8a02fc006613e23e733e3153ee22e1abcf78e393aa4569c0918a240da287fc063530a7ee512a13138b1005cd238f0f5a1e08a8ca5d6b02f7a694ad3a95549f98bcba251b39324fe30be07f5878327d04dd66af3438fd6e68d18d4314adcb91dad7aafa2e996bdd7f02a525a1786fd2559c459ea5f11b52f650c43e04c2858d09e3547924c684a166ca6a6a3b9d7a59931acb4b640b799b2565ca71d934b1c50c2c977ba446a62ecf0838554577e5ecbe7d1514215948f6ac71b6e2b95cb172515ebfcaf8af34eee03414975e", 0xcc}, {&(0x7f0000000880)}], 0x8, &(0x7f0000000940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x60}}, {{&(0x7f00000009c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000a00)="2f23f24b5bfc46f42aa6d2544e2d78f0e6d223df562b8cddafb873b152c282126f9627bedca4b58aefc8a16f733b73fb233ce32638de4ed3927a3f93188e7a9ea53f686e431228ea6c9214cc179614600a97bd9a2327e6b8dedf8bffa686316b781d5ec8c523c0fd9d814f00f88f907379270793d01e45913b6e0cc95ba3b5e97940f86b1a538f74416c9d807e0ebee70578341a0eaab1ee23c95072ee81c0dee7253b6e42b54baf8b9f427b160bf2d682ae805b1ca7c8c7bae2d0ec515c7d7e62fcc55a44", 0xc5}, {&(0x7f0000000b00)="4365a298f31b761dac5a2602a6323dac7593281ad938fd6d29d266c52b97ad01ff945ac14547fa023dbff82786bb6474a3ec7781bdd7eab4175fe839d51a8019eed8d08f969641a611ff2e4938e6cfbda34de4bead688944043abaf8df0ae65e6431e7ae7a1c5da84e760999eeb72f6efcad401363a6a99d70bf52d563c8b6b85ff3c29e94cf93a7325ad0ecb4283866b8d786ff723ffae92d959aba9b8a3ac8f6511dbc", 0xa4}, {&(0x7f0000000bc0)="13174795415c70682abe2e0b730d9b178c79ae57af82224958a5c67e11967f32c4449848a13578be916ce7004bba14635e80c132593648dd01d22eaad0cb66b43de2c58beba27bb2ba175c2d868fc3d683b059597a89b613a646bc87f58dc9cc50d3fe4163ff3522679b9429e09db6a1042690aea0266cb7df133ffe935577b25600439eb22a36114926655fcc9a7af8c00f695674cccd629243ac25ccc635bdd7739474fc5b2e62", 0xa8}, {&(0x7f0000000c80)="8eb348f347b3f870bef941e71abe9dd8627b1d4bcd8992d60c8f9dce33df5c9c909563765dd74bb57eac36c54489f23acb8e32b06250f62af152727cf53ddba39e024a5494c3cb24a62ce9fb1d630c8a2cd42dea30e0bb5074f0e62767ea80", 0x5f}, {&(0x7f0000000d00)="7ed5a718a93f0572e611fa57f25f9e7faf81963ac95cd5908dd1f5dbd3e45997a0111dd704ac068cb45e622a2480b418e2cf746ef63d5b56801c00bbe05d2e5057fdd22c5b418e500e6378503b665d26161f3650abb8ed2999cf484e145286e29942b34691cc6a5bb68faa63d33915a8", 0x70}, {&(0x7f0000000d80)="a67d5baabc4ad85bdba864b2ec1516559a7b3cb1e16775e69ce969e075d78d517a6e8fc5731b95941c741498772844b320d338efb90470d3a6dc68f882cfbf10f40d1e72642c7f949052c5f23cb31bb8f65cf99b37264bd03274b75dd6dd5d799a9644dd04689b39e87569bc89661d647aafde64c66df395e415ac3335998bfaa6c2fa6ede12b8b8c1b1f149da3db62f341a764853fbcc85cb1b68187e", 0x9d}], 0x6, &(0x7f0000000f00)=[@ip_retopts={{0xd8, 0x0, 0x7, {[@rr={0x7, 0xb, 0xf2, [@dev={0xac, 0x14, 0x14, 0xa}, @remote]}, @timestamp={0x44, 0x14, 0x72, 0x0, 0xc, [0x9, 0x4, 0x80000001, 0x6]}, @timestamp_prespec={0x44, 0x1c, 0x12, 0x3, 0x4, [{@rand_addr=0x64010100, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1}, {@remote, 0x1}]}, @end, @lsrr={0x83, 0xb, 0x26, [@loopback, @remote]}, @timestamp_prespec={0x44, 0x14, 0x2d, 0x3, 0x7, [{@rand_addr=0x64010102, 0xaef8}, {@empty, 0x1}]}, @ssrr={0x89, 0xb, 0x44, [@multicast1, @broadcast]}, @timestamp={0x44, 0x28, 0x3f, 0x0, 0x6, [0x2, 0x6, 0x10, 0xfa4f, 0xc, 0x7, 0x7, 0x5, 0x1636fd44]}, @timestamp={0x44, 0x24, 0xe2, 0x0, 0xc, [0xffff, 0x697, 0x3, 0xff, 0x7f, 0x9, 0x4, 0x6]}, @ssrr={0x89, 0x13, 0x18, [@dev={0xac, 0x14, 0x14, 0x20}, @remote, @loopback, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}], 0x110}}], 0x2, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x54, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 12m42.322242268s ago: executing program 2 (id=3654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) unshare(0x22020600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1702000070000000000063a1f4eb000000000000000000000000000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r1}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x68, &(0x7f0000000200)}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x34, 0x2c, 0xf35, 0x70bd23, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x440}, 0x0) chroot(&(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000040)=@nullb, r4, &(0x7f0000000140)) socket$pppoe(0x18, 0x1, 0x0) 12m41.339581774s ago: executing program 2 (id=3660): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x55459d45c9412840, {0x42, 0x1, 0x1}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x0, 0x34, 0x67, 0x0, 0x59, 0x6, 0x0, @loopback, @empty}, @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x2, 0xc2, 0x2, 0x4e24, 0x4e20}, 0x2}}}}}}}, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000000c0)=0x1) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)=0x9) 12m38.968073787s ago: executing program 2 (id=3667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030cffe5000904000000010300000a"], 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x8, 0x4, 0x4004, 0x1000, 0x4000ee, 0x0, 0x7fffffffffffb, 0x5, 0x10000000000000, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x347255}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x8, 0x4, 0x4004, 0x1000, 0x4000ee, 0x0, 0x7fffffffffffb, 0x5, 0x10000000000000, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x347255}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x20000000000080, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0xf7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2de, 0x101, 0x100, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x9, 0x7fffffffffffffff, 0x6, 0xfffffffffffffffb, 0xd, 0x11, 0xa, 0x5, 0x20000000000a8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8c, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x2, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x1, 0x3, 0x1e4b, 0x2, 0x79, 0x3, 0x80000000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x9, 0x2000ae, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x20000000000080, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0xf7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2de, 0x101, 0x100, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x9, 0x7fffffffffffffff, 0x6, 0xfffffffffffffffb, 0xd, 0x11, 0xa, 0x5, 0x20000000000a8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8c, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x2, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x1, 0x3, 0x1e4b, 0x2, 0x79, 0x3, 0x80000000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x9, 0x2000ae, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 12m35.649936538s ago: executing program 2 (id=3681): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="04010000100007000000000000000000fc020000000000000000000000000000e00000020000000000000000000000004e1f000000000000000000000200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff01000000000000000000000000fd01000000002b0000002001000000000000000000000000000000000000000000000000000000000000020000000000000000000100000000000000001000000000ffffffffffffffff000000000000000000000000080000000000000000000000000020000000000007000000000000000000000000000000000004c06dbc0c0309ba240000000000000000000a0002"], 0x104}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r8) splice(r4, 0x0, r8, 0x0, 0x10000000000066, 0xa) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 12m19.987227586s ago: executing program 32 (id=3681): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="04010000100007000000000000000000fc020000000000000000000000000000e00000020000000000000000000000004e1f000000000000000000000200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff01000000000000000000000000fd01000000002b0000002001000000000000000000000000000000000000000000000000000000000000020000000000000000000100000000000000001000000000ffffffffffffffff000000000000000000000000080000000000000000000000000020000000000007000000000000000000000000000000000004c06dbc0c0309ba240000000000000000000a0002"], 0x104}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r8) splice(r4, 0x0, r8, 0x0, 0x10000000000066, 0xa) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 7m17.128235761s ago: executing program 5 (id=5136): openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x10140, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="77bdb3b3b7487ed0358f5e8bb6224e12f78ef870bff9b4961f4a098ccf49d85e28", 0x21}], 0x1, 0xffffffff, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r5, 0x100, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000c40)=ANY=[@ANYBLOB="7f454c4605fc007f000400000000000002003e00edfffbff94020000000000004000000000000000dd010000000000000004000000003800010001000200000003"], 0x178) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7m16.417428804s ago: executing program 5 (id=5145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000002c0), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x1f, 0x1, 0x525, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000001c0)=0xc000c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) sendfile(r6, r5, 0x0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x29441, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000640)) r11 = socket$unix(0x1, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="371f865cf7d12e000000000000002e9b56fd0000", @ANYRES32=r7, @ANYRES64=r3], 0x20) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r14, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r14, 0xc0585604, &(0x7f00000008c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x2, 0x6, 0x6, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000040000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000ff0007020000f8ffffffb703000008000000b70400000000000085000000820036924c4b000036000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) 7m16.161848745s ago: executing program 5 (id=5148): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x880, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x6, 0x570000, 0x61bdca69, 0x3e8, 0x7fffffff, 0xc, 0x0, 0xc, 0x10001, 0x3, 0x6, 0x9, 0x574, 0xffff8000, 0x6, 0x3, 0x96, 0xb0, 0x279, 0x40d6, 0x100, 0x5, 0x40, 0xfffffff8, 0x34, 0x3, 0x4, 0x0, 0x7169, 0x4, 0x329, 0x0, 0x7fff, 0x2, 0x400, 0x2, 0x0, 0xe876, 0x45, 0x9, 0x2, 0xe, 0x33b1, 0xea, 0x41a3, 0x7, 0x49b, 0x7fff, 0x2, 0x7, 0x5, 0xffffffff, 0x8, 0xc, 0x4, 0x64a, 0x6, 0x8001, 0x96, 0x82, 0x0, 0x7f, 0x3, 0xf, 0xffff788a, 0x8, 0x1, 0xa, 0x8, 0x57b, 0x1, 0x3, 0x3, 0xfffffffd, 0x5f, 0xffffb346, 0x5, 0xbe, 0x3, 0x751, 0x80000000, 0x3, 0x8, 0xfffffff9, 0x8001, 0x1, 0xffff, 0xc, 0x100, 0x7, 0x7, 0x5, 0x740, 0x9d, 0xd, 0xed6, 0x5, 0x9, 0x4e3, 0x4, 0x6, 0x6, 0x4, 0x0, 0x5, 0x6, 0x2, 0x9, 0x4, 0x7, 0x10001, 0x2e40b38d, 0xd5a9, 0x5, 0x6, 0xb, 0xffffff8e, 0x200, 0xff, 0x0, 0xda1, 0x28000, 0x80000000, 0x8, 0xca, 0xff, 0x5, 0x1ff, 0x1, 0x4, 0x1, 0x0, 0x2, 0x5, 0x4, 0x8, 0x3, 0xc, 0xb518, 0x962c, 0x8, 0x4, 0x0, 0x5, 0x2, 0x9, 0x8, 0x4, 0x6, 0x3, 0x0, 0x3, 0xfa0, 0x6, 0x2, 0x6f4, 0x5534, 0x3, 0x6, 0x8, 0x9129e4a, 0x1, 0x9, 0x6ae76120, 0x5, 0x5, 0x3, 0xd, 0x200, 0x5, 0x1, 0x10, 0x5, 0x6, 0x4, 0x5, 0x5, 0xd, 0x5841dd52, 0x7fff, 0x7, 0x5, 0x10000, 0x1, 0x8, 0x0, 0xa, 0x6, 0x9, 0x8, 0x9, 0x0, 0x9, 0x8, 0x3, 0x4, 0x8, 0xffff, 0x1, 0x96, 0xfffffff8, 0x70, 0x2, 0x4, 0x81, 0x6, 0x3ff, 0x3, 0x0, 0x6, 0x84685c, 0x6, 0x9, 0x9, 0x1df, 0x1, 0x3, 0xfffffff9, 0x1, 0xb1, 0x6ab, 0x0, 0x1, 0x5c4, 0xcf6b, 0x1, 0x5, 0x7, 0x9, 0xffff, 0x5c2, 0x9, 0x6, 0xe45, 0x8, 0x416, 0x9, 0x6, 0x8, 0x6, 0x5207, 0xa5fe, 0x4, 0x3, 0x893, 0x7, 0x80000001, 0x5, 0x3, 0x9, 0x100, 0x0, 0x9, 0x7d68]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xfff, 0x3, 0x3, 0x4, 0x10000, 0x4, 0x650e, 0x4, 0x10, 0x2, 0x6, 0xf7, 0x0, 0x3, 0x100, 0x8000, 0x8, 0x4, 0x6, 0x6, 0x3b90, 0xc85, 0x1, 0xfff, 0x8000, 0x9, 0x3, 0xd4, 0x4, 0x81, 0x9, 0x52da4ded, 0x10001, 0x5, 0x3, 0x2, 0x9, 0x2, 0x3ff, 0x3, 0x7f8, 0x6, 0x1, 0x6, 0x6, 0xc00000, 0xffffffff, 0x5, 0x7fffffff, 0x0, 0x29, 0x9, 0x1, 0x7, 0x2, 0x4, 0x10000, 0x0, 0x2, 0x1, 0x14f9, 0x3, 0x6, 0xdf, 0x8, 0x10, 0x10, 0x7, 0x1, 0x3, 0x10001, 0x1, 0x10001, 0x4, 0x5, 0x5, 0xfffffff7, 0x5013feac, 0x4, 0x437, 0x8, 0x5, 0x5, 0x81, 0x5, 0x3e60, 0x8, 0x6, 0x7fffffff, 0x0, 0x2, 0x10001, 0x331024f3, 0x0, 0x41, 0x6f141348, 0x50, 0xffff83a9, 0xfffffffa, 0x4, 0x3, 0x0, 0x2, 0x1a, 0x6, 0x80000000, 0xc, 0xc3, 0x8, 0xfff, 0x7, 0x9, 0xffff0001, 0x5, 0x4000000, 0x6, 0x3ff, 0x1, 0x7, 0x1, 0x200, 0xff000000, 0x29f, 0x5, 0x7fff, 0xffff, 0x7, 0x9, 0x6, 0x74, 0x2, 0x0, 0x4ba3620f, 0x8000, 0x8, 0x7fffffff, 0x4, 0x5, 0x695, 0xffffffff, 0xd1b3, 0xffff, 0x6, 0x80000001, 0x9, 0x4, 0xb6, 0x4, 0x9, 0x2, 0xfffffff7, 0x2, 0x32, 0xfffffffe, 0x9, 0xffffffff, 0x6e1, 0x6, 0x9, 0x9, 0x2, 0x8001, 0x7, 0x1, 0x2, 0x59e0, 0x0, 0xfb54, 0x2, 0x9, 0x400, 0x5, 0x7fffffff, 0x100, 0x3, 0x7, 0x352, 0x8, 0xa4e3, 0x0, 0x8001, 0x0, 0x7, 0x7f, 0x8, 0x7, 0x2, 0x9505, 0xc2c, 0x1, 0x6, 0xffffffc0, 0x5b, 0xaa7f, 0xfffffffc, 0x80, 0x7, 0x8, 0x4, 0x8, 0x3, 0x200, 0x6, 0x1, 0x5, 0xb3, 0x5, 0x7fffffff, 0x6, 0x7, 0x1, 0xfffffffe, 0x4, 0x9, 0x100, 0xffff, 0x2, 0x7, 0x1, 0x6, 0x80000000, 0x4, 0x6, 0x3, 0xed4, 0x10000, 0x8, 0x2, 0x1, 0xb, 0x5, 0x50, 0x40, 0x5, 0x32a4, 0x4, 0x800, 0x1ff, 0x0, 0x699, 0x2, 0x1, 0x4, 0x8000, 0x3, 0x8, 0x200, 0xfffffeff, 0xffffffd9, 0xfffffe00, 0x8, 0x101, 0x80, 0x8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x1, 0xdf57, 0x2d4, 0x4, {0x10, 0x0, 0x200, 0xfffb, 0x66, 0xffff}, {0x2, 0x0, 0xbeeb, 0x1, 0x200, 0x200}, 0x3d48c076, 0x29, 0x2}}]}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x81}, 0x800) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) (async) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x880, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x6, 0x570000, 0x61bdca69, 0x3e8, 0x7fffffff, 0xc, 0x0, 0xc, 0x10001, 0x3, 0x6, 0x9, 0x574, 0xffff8000, 0x6, 0x3, 0x96, 0xb0, 0x279, 0x40d6, 0x100, 0x5, 0x40, 0xfffffff8, 0x34, 0x3, 0x4, 0x0, 0x7169, 0x4, 0x329, 0x0, 0x7fff, 0x2, 0x400, 0x2, 0x0, 0xe876, 0x45, 0x9, 0x2, 0xe, 0x33b1, 0xea, 0x41a3, 0x7, 0x49b, 0x7fff, 0x2, 0x7, 0x5, 0xffffffff, 0x8, 0xc, 0x4, 0x64a, 0x6, 0x8001, 0x96, 0x82, 0x0, 0x7f, 0x3, 0xf, 0xffff788a, 0x8, 0x1, 0xa, 0x8, 0x57b, 0x1, 0x3, 0x3, 0xfffffffd, 0x5f, 0xffffb346, 0x5, 0xbe, 0x3, 0x751, 0x80000000, 0x3, 0x8, 0xfffffff9, 0x8001, 0x1, 0xffff, 0xc, 0x100, 0x7, 0x7, 0x5, 0x740, 0x9d, 0xd, 0xed6, 0x5, 0x9, 0x4e3, 0x4, 0x6, 0x6, 0x4, 0x0, 0x5, 0x6, 0x2, 0x9, 0x4, 0x7, 0x10001, 0x2e40b38d, 0xd5a9, 0x5, 0x6, 0xb, 0xffffff8e, 0x200, 0xff, 0x0, 0xda1, 0x28000, 0x80000000, 0x8, 0xca, 0xff, 0x5, 0x1ff, 0x1, 0x4, 0x1, 0x0, 0x2, 0x5, 0x4, 0x8, 0x3, 0xc, 0xb518, 0x962c, 0x8, 0x4, 0x0, 0x5, 0x2, 0x9, 0x8, 0x4, 0x6, 0x3, 0x0, 0x3, 0xfa0, 0x6, 0x2, 0x6f4, 0x5534, 0x3, 0x6, 0x8, 0x9129e4a, 0x1, 0x9, 0x6ae76120, 0x5, 0x5, 0x3, 0xd, 0x200, 0x5, 0x1, 0x10, 0x5, 0x6, 0x4, 0x5, 0x5, 0xd, 0x5841dd52, 0x7fff, 0x7, 0x5, 0x10000, 0x1, 0x8, 0x0, 0xa, 0x6, 0x9, 0x8, 0x9, 0x0, 0x9, 0x8, 0x3, 0x4, 0x8, 0xffff, 0x1, 0x96, 0xfffffff8, 0x70, 0x2, 0x4, 0x81, 0x6, 0x3ff, 0x3, 0x0, 0x6, 0x84685c, 0x6, 0x9, 0x9, 0x1df, 0x1, 0x3, 0xfffffff9, 0x1, 0xb1, 0x6ab, 0x0, 0x1, 0x5c4, 0xcf6b, 0x1, 0x5, 0x7, 0x9, 0xffff, 0x5c2, 0x9, 0x6, 0xe45, 0x8, 0x416, 0x9, 0x6, 0x8, 0x6, 0x5207, 0xa5fe, 0x4, 0x3, 0x893, 0x7, 0x80000001, 0x5, 0x3, 0x9, 0x100, 0x0, 0x9, 0x7d68]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xfff, 0x3, 0x3, 0x4, 0x10000, 0x4, 0x650e, 0x4, 0x10, 0x2, 0x6, 0xf7, 0x0, 0x3, 0x100, 0x8000, 0x8, 0x4, 0x6, 0x6, 0x3b90, 0xc85, 0x1, 0xfff, 0x8000, 0x9, 0x3, 0xd4, 0x4, 0x81, 0x9, 0x52da4ded, 0x10001, 0x5, 0x3, 0x2, 0x9, 0x2, 0x3ff, 0x3, 0x7f8, 0x6, 0x1, 0x6, 0x6, 0xc00000, 0xffffffff, 0x5, 0x7fffffff, 0x0, 0x29, 0x9, 0x1, 0x7, 0x2, 0x4, 0x10000, 0x0, 0x2, 0x1, 0x14f9, 0x3, 0x6, 0xdf, 0x8, 0x10, 0x10, 0x7, 0x1, 0x3, 0x10001, 0x1, 0x10001, 0x4, 0x5, 0x5, 0xfffffff7, 0x5013feac, 0x4, 0x437, 0x8, 0x5, 0x5, 0x81, 0x5, 0x3e60, 0x8, 0x6, 0x7fffffff, 0x0, 0x2, 0x10001, 0x331024f3, 0x0, 0x41, 0x6f141348, 0x50, 0xffff83a9, 0xfffffffa, 0x4, 0x3, 0x0, 0x2, 0x1a, 0x6, 0x80000000, 0xc, 0xc3, 0x8, 0xfff, 0x7, 0x9, 0xffff0001, 0x5, 0x4000000, 0x6, 0x3ff, 0x1, 0x7, 0x1, 0x200, 0xff000000, 0x29f, 0x5, 0x7fff, 0xffff, 0x7, 0x9, 0x6, 0x74, 0x2, 0x0, 0x4ba3620f, 0x8000, 0x8, 0x7fffffff, 0x4, 0x5, 0x695, 0xffffffff, 0xd1b3, 0xffff, 0x6, 0x80000001, 0x9, 0x4, 0xb6, 0x4, 0x9, 0x2, 0xfffffff7, 0x2, 0x32, 0xfffffffe, 0x9, 0xffffffff, 0x6e1, 0x6, 0x9, 0x9, 0x2, 0x8001, 0x7, 0x1, 0x2, 0x59e0, 0x0, 0xfb54, 0x2, 0x9, 0x400, 0x5, 0x7fffffff, 0x100, 0x3, 0x7, 0x352, 0x8, 0xa4e3, 0x0, 0x8001, 0x0, 0x7, 0x7f, 0x8, 0x7, 0x2, 0x9505, 0xc2c, 0x1, 0x6, 0xffffffc0, 0x5b, 0xaa7f, 0xfffffffc, 0x80, 0x7, 0x8, 0x4, 0x8, 0x3, 0x200, 0x6, 0x1, 0x5, 0xb3, 0x5, 0x7fffffff, 0x6, 0x7, 0x1, 0xfffffffe, 0x4, 0x9, 0x100, 0xffff, 0x2, 0x7, 0x1, 0x6, 0x80000000, 0x4, 0x6, 0x3, 0xed4, 0x10000, 0x8, 0x2, 0x1, 0xb, 0x5, 0x50, 0x40, 0x5, 0x32a4, 0x4, 0x800, 0x1ff, 0x0, 0x699, 0x2, 0x1, 0x4, 0x8000, 0x3, 0x8, 0x200, 0xfffffeff, 0xffffffd9, 0xfffffe00, 0x8, 0x101, 0x80, 0x8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x1, 0xdf57, 0x2d4, 0x4, {0x10, 0x0, 0x200, 0xfffb, 0x66, 0xffff}, {0x2, 0x0, 0xbeeb, 0x1, 0x200, 0x200}, 0x3d48c076, 0x29, 0x2}}]}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 7m14.207576933s ago: executing program 5 (id=5151): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYRESDEC], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x126) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000380)={r5}) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000680)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xb, 0x9, 0x9, 0x0, r7}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sctp\x00') (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000100000035e2eefa1313fe2648105da08a49e94deb0b6d07521a49b86410"], 0x18}, 0x0) (async) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) 7m13.991864876s ago: executing program 5 (id=5152): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0xfff0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/57, 0x39}], 0x1}, 0x3}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 7m13.288252763s ago: executing program 5 (id=5154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) sendmsg$AUDIT_SET(r2, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x4, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x1, r4, 0x100, 0x1, 0x6, 0x0, 0x0, 0x1000, 0xfffffff8}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) r5 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x10400) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000003c0)={r3, 0x1, {0x0, 0x0, 0x0, 0x81, 0x7f, 0x0, 0x5, 0x20, 0x4, "cf9a50d14cd693386bc4f24560fffe6370210c865a9ed7244d2fc080f402726d008d67dc5a718b04f46c1ed4dca771635a80fd1d8f62c34afb3ecf3e2227d608", "3d63d880265aaee30b1619b9c05ba6ac38c8740e7b6f43cf1f1590179fc9fc0a0f7e46f805c6db337af05a745011b2971d3c3df4b3b0c6055f6e52ca64ec0aa0", "2d5c21e9cb10911d0fab580b3d4ac4ebd74b0d65b780ed54e473980d311a8994", [0x4, 0x2080813d]}}) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000001140)={0x0, 0x100000058, &(0x7f0000000080)={&(0x7f0000000040)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x200, 0x70bd2c}, 0x75}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c000280080001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000500)=0xc, 0x4) 7m12.485299524s ago: executing program 33 (id=5154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) sendmsg$AUDIT_SET(r2, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x4, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x1, r4, 0x100, 0x1, 0x6, 0x0, 0x0, 0x1000, 0xfffffff8}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) r5 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x10400) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000003c0)={r3, 0x1, {0x0, 0x0, 0x0, 0x81, 0x7f, 0x0, 0x5, 0x20, 0x4, "cf9a50d14cd693386bc4f24560fffe6370210c865a9ed7244d2fc080f402726d008d67dc5a718b04f46c1ed4dca771635a80fd1d8f62c34afb3ecf3e2227d608", "3d63d880265aaee30b1619b9c05ba6ac38c8740e7b6f43cf1f1590179fc9fc0a0f7e46f805c6db337af05a745011b2971d3c3df4b3b0c6055f6e52ca64ec0aa0", "2d5c21e9cb10911d0fab580b3d4ac4ebd74b0d65b780ed54e473980d311a8994", [0x4, 0x2080813d]}}) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000001140)={0x0, 0x100000058, &(0x7f0000000080)={&(0x7f0000000040)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x200, 0x70bd2c}, 0x75}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c000280080001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000500)=0xc, 0x4) 11.686080882s ago: executing program 3 (id=6738): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0xfff, 0x8001) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="cb05000050000000cf4ebfa646353e6f06000000000000009500000000000000f85a5ae149bd185bbd9f1b4fcac22abad755ea65ddaaaec4c72e40d8b18c853db39a60fef5407e1c6d"], 0x0, 0x5}, 0x94) r4 = eventfd(0xfffffff9) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000340)=""/90) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) set_mempolicy(0x1, 0x0, 0x7582) socket$caif_seqpacket(0x25, 0x5, 0x2) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[], 0x0) 8.417425574s ago: executing program 3 (id=6753): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x2000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x9, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0x0, 0xd000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x80a0000, 0x6000, 0xe, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x80, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0x9, 0x4, 0x1, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x4, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x4c, 0xf801, 0x0, [0x80000001, 0x0, 0xffffffffffffffff, 0x1]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x81, 0xa, 0x9, 0x0, 0x5, 0x8, 0x3, 0x7, 0x0, 0x8, 0x25, 0x8b, 0x0, 0x2, 0x7, 0x1, 0x8, 0x4, 0x8a, '\x00', 0x8e, 0x100000001}) ioctl$KVM_RUN(r3, 0xae80, 0x200000000000000) 8.264511431s ago: executing program 3 (id=6754): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x2b8, 0xb0000010, 0x118, 0x5c8f0200, 0x208, 0x3a8, 0x3a8, 0x208, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x15}, [0xff, 0xffffff00, 0xff, 0xff], [0xffffffff, 0x0, 0xff000000, 0xffffff00], 'macvlan0\x00', 'pim6reg0\x00', {}, {0xff}, 0x3a, 0x7, 0x4, 0x45}, 0x0, 0xf0, 0x118, 0x700, {}, [@common=@unspec=@nfacct={{}, {'syz1\x00', 0x10001}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xc309, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x33b) syz_usb_connect$uac1(0x3, 0x81, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xb, 0x0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x90, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0xd, 0x64, {0x7, 0x25, 0x1, 0xc, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x1, 0x3, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x9e}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfe, 0x0, 0x5, {0x7, 0x25, 0x1, 0x8, 0x1, 0x3}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x2c, 0x0}) 7.221670892s ago: executing program 0 (id=6760): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfe, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfd}}}}}]}}]}}, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)={{}, {}, [], {}, [], {}, {0x20, 0x4}}, 0x14, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x8a881, 0xbb) bpf$PROG_LOAD(0x5, 0x0, 0xfe3f) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async, rerun: 32) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x282, 0x0) sendfile(r2, r2, 0x0, 0x40008) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r3) r4 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/35, 0x23, 0x0, &(0x7f00000002c0)=""/180, 0xb4}, &(0x7f00000003c0)=0x40) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) (async) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000400)="3a4a0ae358207daac9", 0x9}], 0x1) (async, rerun: 64) r7 = fspick(0xffffffffffffff9c, 0x0, 0x0) (rerun: 64) fsmount(r7, 0x1, 0xc) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.143223174s ago: executing program 0 (id=6762): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0xcf40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="d4000000400007012bbd7000fedbdf25027c00150400c280b6000180b00010"], 0xd4}, 0x1, 0x0, 0x0, 0x4805}, 0xc000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_setattr(r2, &(0x7f0000000080)={0x38, 0x0, 0x6, 0x4, 0x30, 0x81, 0x0, 0xbcc, 0xc965, 0x3}, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000100)={0x3, 0x1, [0x4dd, 0x6, 0xc, 0xfffffff7, 0x1, 0x7, 0xb8, 0x1]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000280)={0x1e0000, 0x0, {[0x0, 0x1, 0x5, 0x17, 0x10001, 0x3c9, 0x9, 0x1f98]}}) chroot(0x0) 6.879006656s ago: executing program 3 (id=6763): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0xfff, 0x8001) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="cb05000050000000cf4ebfa646353e6f06000000000000009500000000000000f85a5ae149bd185bbd9f1b4fcac22abad755ea65ddaaaec4c72e40d8b18c853db39a60fef5407e1c6d"], 0x0, 0x5}, 0x94) r4 = eventfd(0xfffffff9) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000340)=""/90) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) set_mempolicy(0x1, 0x0, 0x7582) socket$caif_seqpacket(0x25, 0x5, 0x2) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[], 0x0) 6.734176965s ago: executing program 0 (id=6764): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f000001f500)={0x4, 0x3, 0x2, {0x1, @pix={0x8, 0x80, 0x34343459, 0x0, 0x5, 0xb, 0x5, 0xfeedcafe, 0x1, 0x1, 0x2, 0x1}}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7ffc, 0x1800}], 0x1) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000340)=[@code={0xa, 0x39, {"f36e400f0d3e48b8fcff0000000000000f23c80f21f8350800d0000f23f8420f69d8470f011f2e66460fc7b497464c69020f01f866b813010f00d0430f01c466baa10066ed"}}], 0x56}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x13, 0x7, 0x106c, 0x8, 0x8000000000000, 0x9, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae504000905"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000340)={0x101, 0x34524742, 0x2, @stepwise={0x2, 0x8, 0x2bdc4a4, 0x2, 0x42, 0x81}}) syz_usb_control_io(r7, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="400d02000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4001) close_range(r1, 0xffffffffffffffff, 0x0) 5.19125679s ago: executing program 4 (id=6767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ffffffff00000200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900f40000002e000000080026007f1700000800270003"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000001c0)=0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x1a8, 0xc8, 0x1a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x90000, 0x9, 0x3, 0x146dd345, 0x3, 0x43a, 0x6}}, @common=@srh1={{0x90}, {0x0, 0x7f, 0xb, 0x9, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @dev={0xfe, 0x80, '\x00', 0x32}, [0xff0000ff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffffff], 0x801, 0x21}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0x4695338a4f0a80fe, 0xffffffff, 0xff, 0xff000000], 'ip6erspan0\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0xfc, 0x3}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@mh={{0x28}, {"25c9", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x4}, {0x4, 0x3, 0x6}, 0x5, 0xb8cc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000a5867e6bf3dbb8efc57483af904e7b48f0652abbcc7e3e8ffdd3067117389756524836679320e87b4bb5e8e64752d4ed70c337729a7a82c1", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000ffff000000000800080070030000"], 0x34}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c40)={0x258, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6614e652a71a4325}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe40bde831e2ac676}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) socket$packet(0x11, 0x2, 0x300) 4.976827451s ago: executing program 4 (id=6769): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000"], &(0x7f0000001500), 0x200) unshare(0x2c020400) socket(0x15, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) 4.757391232s ago: executing program 0 (id=6772): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}}) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000300), 0x8000000000000000, 0x840) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x30, 0x0, &(0x7f00000002c0)=[@free_buffer, @free_buffer, @acquire_done={0x40106309, 0x1}, @register_looper], 0x0, 0x0, 0x0}) (async) bind(r1, &(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x2, {{0x92a821fe09338549, 0x3}, 0x4}}, 0x80) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x38, 0x40, 0x1, 0xfff7fffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x4, 0x4a}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc840) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000440)=0x0) ptrace$setregs(0xd, r6, 0x8, &(0x7f0000000480)="560283") (async) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/15) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x250) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000020, &(0x7f00000011c0)=ANY=[@ANYBLOB='='], 0x0, 0x0, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x54, 0x24, 0xf0b, 0x80, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 4.027816879s ago: executing program 6 (id=6774): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r3 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000ff2505a1a4030109023b000101004053090400d20302060000052406000005240008000d240f010080000007000200090905820220000703fb090503020000010603"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000740)=ANY=[@ANYBLOB="40310000000089c28120b3ad47309dda8c3008a2a31b9aa4d387e1784440a5b5dc7b7f022ea1b107a5416b624b3e60cdf9ea575d5db1567ab1b5930aa75b968f8ca964225313fb88704d44a6574e762af0874a837c6bf8a1697a5ee0cc456827ce4807b8ffe7275567eb1de2061171e7ef0f2b68fc99a5700ff3ad0a97daa92e21d53a540fee"], 0x0, 0x0}) (async, rerun: 32) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) read$char_usb(r5, 0x0, 0x30) (async) r6 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) (async) r10 = dup3(r9, r8, 0x80000) recvmmsg$unix(r10, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1, &(0x7f00000006c0)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@rights={{0xc}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x4, 0x58ca2280, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0xc080) (async, rerun: 64) open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r11, 0x0) 3.92622976s ago: executing program 6 (id=6775): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000386f6e851e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x20040000) unshare(0x20030400) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r1, 0x10e, 0x9, 0x0, 0x0) unshare(0x8000400) 3.829723932s ago: executing program 6 (id=6776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d657461000063000014000280080002400000001f08000140000000120900010073797a30000000395fdc5553d9efbd32000000001400000011000100"/124], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.643659003s ago: executing program 6 (id=6777): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req={0x6f, 0x4, 0x6, 0x7}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xe, 0x0, 0xffff}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'tunl0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="05", 0x1, 0x408d5, &(0x7f0000000140)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.349471673s ago: executing program 6 (id=6778): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000100)={0x20, 0x24, 0x1a, {0x1a, 0x0, "fcedfa253d8043e925819d25a1c63ac62b23c698b003ca1c"}}, 0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000100)={0x20, 0x24, 0x1a, {0x1a, 0x0, "fcedfa253d8043e925819d25a1c63ac62b23c698b003ca1c"}}, 0x0, 0x0, 0x0}, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 3.233150423s ago: executing program 3 (id=6779): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0xa, 0x1, 'A'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) splice(r1, 0x0, r3, 0x0, 0x7ffc, 0xd) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) syz_usb_control_io(r0, 0x0, 0x0) 3.067867371s ago: executing program 0 (id=6780): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x198, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x2000}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3.067110225s ago: executing program 4 (id=6781): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x3, 0xfb, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1041, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0x0, 0x50, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0x3b}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x1, 0x4, 0x5, 0x9, 0xb1}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x8, 0x4, "c291"}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0xf, "4e98"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x1, 0x6, 0x81}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x404, 0x4, 0x11, 0xe, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x81, 0xa, 0x5, 0xd, 0x9}, @as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1000, 0x8000, 0x0, 0xfa}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x47, 0x4, 0x4, 0x9, "", "d3"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x7, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0xec, 0x0, {0x7, 0x25, 0x1, 0x4, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x85, 0x1, 0xff, 0x6, "b7"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x0, 0x1002}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0x8, 0x7, "e7369063264384"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4, 0x2, 0x81, 0x6, "d00cec23848b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x38, 0x6, 0x4, {0x7, 0x25, 0x1, 0x4, 0xbd, 0x9961}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x5, 0xb3, 0x8, 0x10, 0x5}, 0x1d, &(0x7f0000000780)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x2, 0x3, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x7e, 0x5, 0x6, 0x3, 0x1}, @ptm_cap={0x3}]}, 0x1, [{0x9c, &(0x7f00000007c0)=@string={0x9c, 0x3, "a18fd034c4ece90cc711d680cf362fdc32b643901c5f65e549bcfb8fd49c5cd8219cd399ad580c250c94700d8e73b5e7972fd71f2d07a6aee61c321f8b232dfa3994749f681d838177fa9f72c5ff4d9ccc391e75418468384249f3fbc3e4981b03a9d3804ac7398d47a8fab3c63dec6ef156555b0929fb3038806a7e4ce6e5abd4e11f24129933c296fc1a0241f2ced3092469b1757264366f20"}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000a00)={0x14, &(0x7f00000008c0)={0x20, 0x4, 0xcc, {0xcc, 0x22, "77c00d24385ad9b19ed28df9455f39b86eeedfaa64dc3daad7586e5d2ea4d7945687c7397a65436a40ae94e5d6ef5062b5c240f8fbdeeaa7b6a2fcdcb0e1239be9281e93b37bc43149a6f6f71b40ebff1c87f8f8f76a9e03eacecd8e3cec349616a1c7a5b5b750c24b04dc526049543bbd80b32dc20f507a1cec14048ca4dbc31d90fd111ef55ecdf3fe45dd7b68ed0914c24da9f607e1114841f7274af03f81026bb2c3506ba155e88c7adbcd0f88bc3c15ff0ca0a64b3dc2e856d0ced40cfdfcbee9bc22325abf7308"}}, &(0x7f00000009c0)={0x0, 0x3, 0x15, @string={0x15, 0x3, "89e6730b9b6ecbbd3945c1238bea4792b59c2b"}}}, &(0x7f0000000c40)={0x44, &(0x7f0000000a40)={0x20, 0x8, 0x29, "c03d38c5a45402d651e705d58b7af30cf5f35ff786a8389897de7b8fcf85d46ba2012f827a41d52be5"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b00)={0x20, 0x81, 0x3, "177f76"}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "a988"}, &(0x7f0000000b80)={0x20, 0x83, 0x3, "0c60f1"}, &(0x7f0000000bc0)={0x20, 0x84, 0x3, "68c464"}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "c1d7ee"}}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000080)=[0x9, 0xf]) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000cc0)={0x14, &(0x7f0000000540)={0x0, 0x23, 0x6c, {0x6c, 0x6, "1ccc28594948d9f8f3e718e735c69e584dec9e9dfa7a233f2c6bd624f6b59d29a2c392fa715877c998e25a657365ddb2ad60657fe8b3924af021a4e86bc2313aa5f15eef81d467d8bdf25353219f6541d19842eca49057f26cf231c3e436679d27cda08dc964e1995997"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000000f00)={0x34, &(0x7f0000000d00)={0x0, 0x1a, 0x97, "a71d671ed9ca25153aa306e952b62f5e378609d0bf8bd491de737717d5503e18d56eeed0d98c7bfb307cb9e35e1709d678808731dfed9e73d09730350f99f28f9980aa1125aa9b6fa431247a4c4b410d6d3297bf9c561c6992c7bdd664d4df46aa02eaf4c6f4a7e3198b78392160de46497ed367925a39e0c877e4c7e1d41766ad78f0524f513377e1a104dc83d979facd30de9f61c02c"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e40)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000e80)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000ec0)={0xc0, 0xa2, 0x2f, "e82b96d529a4ae83a9a57ca56ae7cf1a43e8190e876facff07332e4b2318ea089f63a80ba4e4eb6a1d23f98b41df4e"}}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x22, 0x70, {0x70, 0x7, "25e5dfb6fbf00e26c3587468118603c8771588e3c76c1689da536f649659aba2f8d5c5748769e3c96290a9ce5968b74a2cf05481b6ee3597c12402f572d2a83163e24dcbc4a51e95d6d266b6863bec38ef3c5a55e2666e9da15598a6ad5fdfae81d0173434eeb29f598a257a59ba"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0xe, 0xa1, "2a7edc80ab5a1dfc85f714e65b6ca15e84142a430a8714449f8db2fb9ec932a116159fc7753ec24294b521f710ac6a0dbccca85f459a570ad34eb01224e1c53db931fd13f71c5c136fb734772ac0b9a5256c53fc8d368fc76cf7f73fc75ce6ad1937c7f69eff48adbd40484456e29b398c9f0589e1d9aa81fbf6f236f21d8fd939fb52440961812ce09ca85350ca872cda017fb69b80d63802aacce05751f88ba4"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x88}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x81, 0x1, '\a'}, &(0x7f0000000380)={0x20, 0x82, 0x2, '}>'}, &(0x7f0000000400)={0x20, 0x83, 0x2, "109c"}, &(0x7f0000000440)={0x20, 0x84, 0x1, '1'}, &(0x7f0000000480)={0x20, 0x85, 0x3, "a6d52c"}}) 3.030732772s ago: executing program 0 (id=6782): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000400)={[0x2, 0xffffffffffff8000, 0xc, 0x1c, 0xd802, 0x5, 0xff, 0x4, 0xffffffffd3d32f97, 0xd, 0x7fffffff, 0x80000001, 0x1, 0x1, 0x5, 0x96], 0xc000, 0x82}) r3 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5}) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8008001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x64, 0x10, 0x1, 0x70bd27, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x64}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) recvmmsg(r8, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}, 0x70000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xfffffff7}], 0x3, 0x40, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x30000, 0x1000, 0xc, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x1000, 0x3, 0x9, 0x8, 0xb, 0x9, 0xa, 0x5, 0x0, 0x3, 0xc4}, {0xd000, 0x98ddb7fb0f345f3, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0xb000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x2, 0x3, 0x3}, {0x2, 0x26000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x5, 0x25, 0x46, 0xe, 0x4b}, {0x1000, 0xd000, 0x0, 0x0, 0x6, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x21, 0x3}, {0x6000, 0xeeef0000, 0xb, 0x9d, 0xd, 0xfe, 0x0, 0xf, 0x5, 0x3, 0x0, 0xf8}, {0x100000, 0xd000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0x4000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x5]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000120fcff0700040000000100000804004880100001800c0010800400088004002a800c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x3, 0x4, 0x6, 0xe, 0x3, 0x4b}]}) 2.927175685s ago: executing program 1 (id=6783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ffffffff00000200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900f40000002e000000080026007f1700000800270003"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000001c0)=0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x1a8, 0xc8, 0x1a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x90000, 0x9, 0x3, 0x146dd345, 0x3, 0x43a, 0x6}}, @common=@srh1={{0x90}, {0x0, 0x7f, 0xb, 0x9, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @dev={0xfe, 0x80, '\x00', 0x32}, [0xff0000ff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffffff], 0x801, 0x21}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0x4695338a4f0a80fe, 0xffffffff, 0xff, 0xff000000], 'ip6erspan0\x00', 'ipvlan0\x00', {}, {}, 0x3c, 0xfc, 0x3}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@mh={{0x28}, {"25c9", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x4}, {0x4, 0x3, 0x6}, 0x5, 0xb8cc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000a5867e6bf3dbb8efc57483af904e7b48f0652abbcc7e3e8ffdd3067117389756524836679320e87b4bb5e8e64752d4ed70c337729a7a82c1", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000ffff000000000800080070030000"], 0x34}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c40)={0x258, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe40bde831e2ac676}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) socket$packet(0x11, 0x2, 0x300) 2.279778728s ago: executing program 1 (id=6784): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) mlock(&(0x7f00009be000/0x1000)=nil, 0x1000) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000043f000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7fffff7a, 0x0, 0xe4, 0x1000, 0x0, 0x2, 0x0, 0x19}) 2.253141937s ago: executing program 1 (id=6785): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x14}]}]}]}, 0x38}}, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x17, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x29, 0xc2, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 1.073344889s ago: executing program 4 (id=6786): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000040)={'\x00', 0xf, 0x6, 0xfffffffe}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$NILFS_IOCTL_SYNC(r1, 0x80086e8a, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000100)={0x80}) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x3, 0x3}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x13140000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x2, 0x102, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000000500)={0xa87, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r1) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f00000101c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000010300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000010480)={&(0x7f00000102c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000010440)={&(0x7f0000010340)={0xf8, r9, 0xc00, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x64, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x408d0) ftruncate(r3, 0x7fffffffffffffff) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000104c0), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r10, 0xc08c5335, &(0x7f0000010500)={0xc, 0xfffffffb, 0x1, 'queue1\x00', 0x4}) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000105c0)={0x7fff, 0x0, r10}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000010640), r8) sendmsg$NL80211_CMD_SET_BEACON(r11, &(0x7f0000011740)={&(0x7f0000010600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000011700)={&(0x7f0000010680)={0x1064, r12, 0x608, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4c}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x1044, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x37, 0x3, "de415fe177aff6c5c19ed21f317920ffcd203cf2cf5ea34b42fb2a5eeb44d6cb32cf482e686c8bf52d5a48f7efa08f8df345ac"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "213ed14abca91cc5b09bb4e8a5adc15e5b7a617c4c5bd2d4ed5481f38828fb1700ed3856869122441bd06a38687dbb51482cb1b0858cec348480bb11732198c6eef5e52a4f2d703d325347f079ba6f092099cd8e74c862844e977e27a94ff4d64bb1577ff44e63bfa33ae6571225669aefd71868d2681f72b3360460f95f60dcfe215d4da70c965222e7765d90dd87a6a2ba32f8088501be81ae058955dddba32700a189f4612bb1bea7a80c2031965dc8610e28b6e454aea49af1cd81ab756de0de369d63ba8756098f8333ca1b31342a8d023c5a39bd94fe780940a6a043ef5513af744a101fe7d4bc46f478f1e5acebea01262de835258a7372e2db1882ca140a0680a131edb88f053c6ef8a73df39520ad70853b087ff7cedbe7aba77231fc3449c7976093e0fe173863e088c05d379be2b2f4d8944d30688d8b2e20fcbd0304191d93fc03a82f52fba86aa048536277ff55d0426a389c8a4ab48f4b4984427cfc7ea4598eeeb64f02026eecf8c26e7f859112369f6e3cd4c18c9254f923678d7b10786904c6e51dc3d0f4b05543996899eb18923932a40e27b134dca69cdcc92d827d824004e73fcadcbfe4d29998df1a1a5e59751098f0862a096b107f739d337883d22e1685605708ca5c3675690401e19361abdcdd1b77e08c27d1c369baf88519a1eaba919e7ed6bebcf92df98979b33097555adc1dd44e2e60ab99bc0efa7c1505987cf237e1d0ce302c6fd8398bf4462247dd0280068607dbcd6f860c0bc661b81a49ded8458bdd716911041b66c2e8972db41df0e797062ccbbb8896862689bf0a64955fd0f916234e5606faf4b9ac20ef4954ac73bd35f916699234c1bbffec081bd35072f06151a9a4fea4f949d9772d7b4238438a2a6904f8b0a7d50c23357bbb3fa60c290a4da54250183d019c659e8947a12f36f18d7643397e93e91889d06b85ebffa16ca3e6c636aa58a14bdf078e9b6567742bb4bb1e4af05f0f69c119194b7f4798506f0500568b0606e1a344e24c89c151672a383496c751a9ed2ab4cec3537808bd14ce747e9bb2000b1b606c699728d3b49a5f212d9a136e155c4914028429f47fc5bd73facb36b1606ab33d17e305637c439d0d4e0ed7eeaecd78506d86b4d0a13910f7fd884866001f4c18c2e719ec2b2160be25b48fb0d2077f017064e46088ecd8b6a589bcb40fbfe595d70842ab1298ed62610d7b96eb9ad87f4e911a6b6473edac8a3fa446f6076b00eaaf381e97d482a6d8476b90a96d582b937b9b2313eac73c949259c9e4b882ab23cd313a4a070ba9476935d0fda00dcddb42499ad739e1d9bb38d4632b83c16cf6d0a08eecb52829433328fcfadacebede9e67d5612477299dd0817146083055ed0c0bd9ed4a926d8dd29b7f70e5692aff0f59b602bd6ed29c30b2693b275d59ddeb05ace464b1ab3eab1e30834b1f47ac3373e8b88633f80048b571c78b6ce10488af325f904530112e43b9838e80389d6feccfc0b2b8071150ef6b505aa9566ce46640f873fd79b1f50e6108ebd9deb740bed8a8254e59489f67c04728625b1e45b313c0338595c4a005d2b9a83bd7ccb9d910dc3f08c59ced01c1b83277db005517224731e373b8950606ff11514ad9303a159000e587c13e0a5328d621761b7a12a250dea54fd21ab9e289ef1c180af4c7485d985e11a43b23e2f1edea627a4eff7f93eda3730d7cf4d450349f95bc69c001df965a26cd3c7c0274285511f72228923f651d28d073dca5a7c1c470fbfa351627938ce285cbd338e40e6eb0cb2f454b437901a7502f19cbf30b92e345dc8c7150ca2ae755964d690f8bdabbac13a89f9c73a47ee85f581e33e0a4b7604c2100a165909cbc1734255dc771ccc25fc154f9f9e64fcf62f9dd9505296da9e4ed2454c6e87b1564f6197d68574376df14727208467cf45c0d7d1c903c64df473933d97ea78060fb51663c6de553bbd11d55537a4c56d473dcb08f3183e562b426b95b5729e0fc01fc07254c291332f21c6636f0bf0b3b51efdc5aa7d892dbffda9b8e28954bd98fcfc9a16e84f4214c9fd9e14bfbbf1e20d10f7dca6d39f395ba64f2819a2db3b2c3ebdcbc348944f48758d5623c336e39cd266fcc53e88c92463c7d07a1b1ba2a3dc15d296ce83d2d35801d323dd34cbb9cd1d9f1dc4af214c91c842553bcdf2593454fb47789b3e56a792778f46e1a7e934843de4ab95914e909c3149d424e6ad19e27643692c36c260f4a34d21e6e5797a50bc6f170db1c15c31167cb838082cc3404f25e0658ae91d18805712627339479659cb00377e9c7ccf9a60047c5a9cdd509897241ec8f7a99c31eafb8aea4b5d4f5bca683c2a7a1dd070c825da6c3de2d0a3887f0cac9f51f2d58d1dad50b6205f2ff2be054f0cac58c854a07aaa3113605bd02f7d78e139bcf14be5aebde618871dd4651adfa5c7c19e91197ad1fe28a42f4a56d8e0bb70296d6f552c3bab8c3fc2d060dba7f0a1859bbe9fd71798df5fd91426e639f34961a225774cc740dc6b0794277dc047593197b44e10e709e8ebec3545799f2935d0a28986139d4f9e37aee4a34f274e74a0f819fc1aa9780077099ef41db82a7296fe03c6db52b0f7860ebd4318df9834da2d61758ea42907bb47977bca02067583d120e1bb3994dbf4097d5a3e3e520e29cb3edc7bd749da40540585c171f88643f9e24e8a71dc701b5ae40d38d0e8f1cff53ba6bd0e3c9129c668868e284fc9ad6ee5b51c09fa1743233a630d4b7ed4ae515d4e63ecc25df6d4942a1c068633dcdd3023e63b7202ec64121e23f11c1ec1976941e553c449df557310123cb4fb0f6653fe50b89cf71bbc6da0722b5c4125abfb6f253c0c1de0f25403800d6e5410818c7244f6156e79cd5231d6e3d3ac3bfaf6d30039b3daf35356d64c47cde56de143b6201e0801b582cfc47ec545686dfa4554c13fcbfd59fae788e297acdbdad4cb40efa77bdf0d4c3827bd321be24301092f698f3ec6ca2cdd3115ec27aa080e0a964148613696d90c46ad16a3deb7d90ceee4146df9c74b72089884e5f475a9021084551bce1824ff9b17101284c78dce0725279bcee65eb400440b31dd950d27129c36888d4d98ed76484f7470d02a272dbd38dd3a667903afedf66897550573cfb1ad3458b7c1d4db98a88345ce3ce1ac7e7318c29b739830e72b9ab840bc92f42c20b11395a9cdaf4a9c4a957bc78c3e5a9eab7daa943b6a4d118d4f16b2b998cfeb6c5b3de3a069529ca9b72c7532071c761975ba59fccfbab81d809d77d09580e6524ae8c7b861b5f21f8f73ff0ace882e46ac210fe998b53a356ec5cd5f71907ccbfbc03a6bc320e3492267996492687876cba811732e51a08b7d94787855e6aa5ba9ce6e544b016d355931cc4c1b8d5b215d22dc1e85e5d65c7471416f107c33a2a598bbeec13fe6f986fc8fa52cb9fc6592c7b7190d434192a972cb44a969d62f21cda391dcefec301c0b0682b5c6b53e33c4e514a7784ec50852011be2575214c133d3d331de4ff4825293d1efa6fb7774bcbd47a65d913ec74fa07b7c2e5ae3242d8f80c101c01d5aad8c53400268c1dada0e305bd78a55e804518c983844b5ee90e4f748b5bbe62ba073f12d858249632fd20dbc7fd8c076945c9918429e8905e9dc6820c0c6d6ef2806b9b5f9553031a05be7ca9e7aed2ee5d7ed6b77251552689ea06bc4117b6b1ac12c74ad9c8aacfe243debd09f4759b3f40bb9987dd6f0990a534a02355cb7788b4b888faa754efd15449092cf52a34a85727c39855ce6dfe2909d4b2b3eba7eb696305048210ca08034d168dcc2c45bb7d084d435db72df0fded64f6f23d5ba8bfabe38989cf94e9ae4b7c90786482a059cc3fe37ebc51cd13bc1ce1c2d8ce15ef00ff6c55bdc1cb5ec6bc6b4446a3b64a46644c2c98f99ac586ec66015f6551db790a3ba19d982e19fd4cc43adb267d4aeff868af60f73b774789b5c0b36122b8f39d1058f1c579484e53f1e434b211433b2cab9eaf13504bda664f32e8eb385f9078b5b612479720d4f4c5b8f179bbafae5e6aa68d5db6e0b2256d90068e6720637fa1292bfe6a3f8fd7d4150921dd469fc5019e7c890ae8d80787a5663cee60b282fa1f3914a95da0e022fc5fa3f4910dc7ee1f56e16b586fa82a24ed69245440a9a70318df6b98b55c7809a0487ce3836ad1c43f1370c5365b4a20f3a6dc05a390d4b018394522e3076daecb84e32e1e16894426b57a2e5e6250e60c80476212a2f2f851e913b5711981a909ece507f7c33a97af4980b872c52c04b30f9d0916e62ba558146b2b9aba0591998c199c71176c2dbd77d14ce7fb0fc6fb8b8fa8a65a4b4cecaf4886eecb760545d372e0dd69be5d6c2f02ad6633533a0a5df0303eabe323e97be7cbb0b3793ba7e2f2ef227527e8f9ea40a331f1f69b63ca3ff0afd5eb87542d40bb9d2acbcc104ca731a4e8cbff133a4edecaea9536d01061ef1ef7ea98d179a9e6afd6938f0eab067fe4db6b8a7dd6db2b69ad4d91efdf0f90f0a31af1395ba0e8015657fc134ae7fb0bb3fbfd2aa1ca7154f7742ebb4c5b432d5c327c9421574f823f50c0bb32e6979e2b6e44baa8de79c3075d392554399bb619bede34f809c4378a577a1ab4d76e26abf7c1654f131c8a24cd6c51f556480dfc464b61b84dcdcfff91594a6e8ca5565a43e2d34811589090ad43ed424bc580fba03bc2a7251dc8777473489ce55ce889d9089dbac204a2d08d4ed45bc372e04abe7c1f378ec96ad27799ddc1a836948ad77c1d84406db817b5d9a0f8bd6bf95e17c58028033deff52cd2c1e0142ee918844b7e90a4874552eb7e2d33049aceb440bcc58c829d32bccfcae9e1549d1bca9699ab22c4844cfe087c7a460b96f89a927dd214f6b0202e653f0aab8fbeef5a4aa84eef3b520e6ee75e8b7a6b4b7bacdc27fb94e05949290c7d509892fa092ffaaf059e0930560ae4b6fda993981a994aa75963057f5ae503bcdc19e64662a53814bf9f50796d62af45e33f081718ceae0fa0d1e7c979022e6db4cdd8d9b3dec0855ed17d83291a1f84ff277330352a0a5c1b186bf560fe3f79c7d0706adb093fc7f13cd5847f185d80f38ffff8fedb812af2b16f341d237a973ab963ba361ae26ec59ff0008f96d72aa97acabf1cbf30309088b0db28bda84f65ba952f83668bd53c5274ea38ffbb285e5189ba88346470fbc7179353bb5830519f13e2048c12acecc83ae9d185f6d928d9119348ffee7f1592ed7538c63aaf5f6d362d0c20828c6812b827a117cac809499c3f93dae29ed58fabd97dd93af8aa32ac0f3446acef614a73ab43de60dd8eb287b1f1f3c7cc28af84b906ea9af361032977748624c77d348e6f2da876f39cebaad6ea7d967170608852d0c45fc290cb3a14ca13cbd9b06a433cc0ed31e9ba0f110635e55b55a6b62000c279dadbb7e5bf125ba46fc404fa922efcbd3764cd006c27839ae774c0fb000d0ed7927835cbfe26a3f59ce77905cdfa58eb90cb8d900170b67c654326126cbf0021f02299351f20195fa20478a2e1416bd5009691b17f152b23a24e7c626f3c62ad7304c444ad7243613c022abdccb964e10a2c8b1412f32dc30931e47a91a5bb481fd39ad00fa61e1f7b0b045500a58ced9fdba81dd9308b23e503b46c50a81dcee98ca91d7785571726612f7a17f12b6857672baecd7ac47403727ce4e8a66813a949bee34fa27c878d72eeed34d1b80f67153a6d9a22120703f6dc74e4af9e92e8819e2baa993134"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x1064}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) splice(r2, &(0x7f0000011780)=0x7fff, r1, &(0x7f00000117c0)=0x4, 0x3, 0x6) write$fb(r11, &(0x7f0000011800)="a5ef490c65554b24bbbd1ce397413faa4fc867021c5b1f6beb938b52e6ee54bf", 0x20) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r1, &(0x7f0000011840)={0x80000000}) ioctl$VT_SETMODE(r11, 0x5602, &(0x7f0000011880)={0x9, 0xe, 0x83ea, 0x0, 0x2}) 978.442691ms ago: executing program 4 (id=6787): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x0, 0x42488102, 0x9289, 0x100, 0xa, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d00010027bd7000fcdbdf2502000000", @ANYRES32, @ANYBLOB="0200d0070a0001"], 0x28}, 0x1, 0x0, 0x0, 0x2000d191}, 0x800) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f0000000280)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000002c0)={0x0, 0x1fffffe, 0x800007, 0x100080000000006, 0x346a, 0x140000001, 0xfffdfffffffffffe, 0x4, 0x4, 0x2, 0xfffffffd, 0x2}) close(r1) r3 = socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) fadvise64(r3, 0xb5de, 0x9, 0x5) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) close_range(r3, r4, 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xd000, 0xf, 0x6f, 0xfb, 0xe4, 0x40, 0xd0, 0x0, 0x2e, 0xc}, {0x4000, 0x3000, 0xa, 0x0, 0x40, 0x5, 0x7, 0x7f, 0x5, 0x3, 0x3, 0xf9}, {0xb000, 0xdddd0000, 0xe, 0x5, 0x6, 0x9, 0x0, 0x88, 0x1, 0xa7, 0x7, 0x8}, {0x6000, 0xe000, 0xc, 0x7, 0x4, 0x41, 0x28, 0x3, 0x8, 0x2, 0xe, 0x8}, {0x2000, 0x25000, 0x9, 0x0, 0x8, 0x1, 0xab, 0x7b, 0x7, 0x89, 0xf7, 0x83}, {0x8000000, 0x40000, 0xe, 0xa0, 0xb1, 0x7, 0x8, 0xa0, 0x84, 0xf, 0x5, 0xfd}, {0x1, 0xffffffff, 0x10, 0x5, 0x7, 0x4, 0x4, 0x14, 0x7, 0x81, 0x1, 0x1}, {0xdddd1000, 0xa000, 0x9, 0x5, 0xf, 0x7, 0x4, 0x9, 0x4, 0xc, 0x7, 0x46}, {0x2, 0x30}, {0xeeee0000, 0x9}, 0x40010031, 0x0, 0x40000, 0x30010, 0x400008, 0x19500, 0xeeee8000, [0x6800000000000000, 0x4, 0x7, 0x3]}) r5 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 756.09287ms ago: executing program 1 (id=6788): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) syz_usb_connect$printer(0x2, 0x36, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x1401, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 471.957208ms ago: executing program 4 (id=6789): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0xfff, 0x8001) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="cb05000050000000cf4ebfa646353e6f06000000000000009500000000000000f85a5ae149bd185bbd9f1b4fcac22abad755ea65ddaaaec4c72e40d8b18c853db39a60fef5407e1c6d"], 0x0, 0x5}, 0x94) r4 = eventfd(0xfffffff9) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000340)=""/90) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) set_mempolicy(0x1, 0x0, 0x7582) socket$caif_seqpacket(0x25, 0x5, 0x2) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) 292.641929ms ago: executing program 6 (id=6790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x8}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000380)=[{0x1e, 0x0, 0x0, 0xfd, @time={0x7}, {0x9}, {}, @result={0x0, 0x3}}], 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_connect$uac3(0x5, 0x8a, &(0x7f0000002480)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x0, 0x80, 0xc7, {0x8, 0xb, 0x2, 0x1, 0x1, 0x0, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x8, 0x3, 0xf5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x70, 0xf9, {0xa, 0x25, 0x25, 0x9, 0xfc, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x91, 0x81, 0x3, {0xa, 0x25, 0x25, 0x4, 0x96, 0x1}}}}}}}}]}}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0}) 103.927225ms ago: executing program 3 (id=6791): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000580)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x44}}, 0x8000002) unshare(0x2c020400) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000098000000000082f54fbe553f5700000000810000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c0002800800070000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfb}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded0", 0xab}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208", 0x82}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000500)={{&(0x7f0000000140)=[{0x7fffffffffffffff, 0xa0, 0x8, {0x7, 0x7dc}, 0x2, 0x7f, 0xfffffffb}, {0x4, 0x3, 0x3, {0x1, 0x1c}, 0x3, 0x6, 0x8000}, {0xb0, 0x4a, 0x5, {0x39, 0x28d}, 0xdf5d, 0x5, 0x3}, {0x7fff, 0x2, 0x9, {0x7fffffff, 0x10001}, 0xfffffffffffff199, 0x81, 0x4}, {0x6, 0x0, 0x1ff, {0x7}, 0x3, 0x1, 0xa074}, {0xfffffffffffffff0, 0xc5, 0x100400000000000, {0xfffffffffffffc00, 0x7}, 0x3, 0x3, 0xff}, {0x9aa, 0x4, 0x9, {0x8, 0xb}, 0xb, 0x6, 0x4}, {0x0, 0x401, 0x9084, {0x5, 0xb4f}, 0x4, 0x0, 0x3}], 0x8, 0x40, 0xf, 0x25d}, {&(0x7f0000000340)=[{0xd6c, 0x6}, {0x4, 0xfffffffffffffffb}, {0x8, 0x7}, {0x9, 0xe1c}, {0x7362, 0x8}, {0x2}], 0x6, 0x10, 0x6, 0xf}, {&(0x7f00000003c0)=[0x1c, 0x7f, 0x5, 0x9bd, 0x6, 0x101], 0x6, 0x8, 0x3, 0x9}, {&(0x7f0000000400)=[{0x1, 0x4, 0x6, 0x6, 0x8}, {0x4, 0x4, 0x1, 0x0, 0x4}, {0x4194, 0x7, 0x9, 0x3, 0x81}, {0x0, 0x0, 0x4, 0x8}], 0x4, 0x28, 0xf24f}, {&(0x7f00000004c0)=[0x0, 0x7fffffffffffffff, 0x8, 0x7, 0x8, 0x6, 0xffffffff80000000], 0x7, 0x8, 0x28fa, 0x3}}) 87.865536ms ago: executing program 1 (id=6792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000005e000d030000000000000000c7bc2856d3f6bbbde7"], 0x24}], 0x1}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x99f}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x201}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x7000000}}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, &(0x7f0000004380)='syzkaller\x00', 0x6, 0x1d, &(0x7f0000000000)=""/29, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 0s ago: executing program 1 (id=6793): openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001100000227bd7000fbdbdf2507000000", @ANYRES32, @ANYBLOB="200000000020000008000400070000f7acca5c917421ead49274610bc2a200c3540000d8fe4720c25b2ea1d4488c6928e0bf000000000000ebe62ff1182a563d7c5582a3ed66f33295ddb40352f833a68019028ea0cb6b13d1b3610b006ae0fc4a885a234d"], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x800) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xffff1000, 0x0, r2}) kernel console output (not intermixed with test programs): ce number 45 [ 1497.830269][ T5913] usb usb2-port1: unable to enumerate USB device [ 1497.877841][ T24] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 1498.057824][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 1498.190071][ T24] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 1498.278990][ T5913] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1498.357861][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 1498.363584][ T24] usb usb1-port1: attempt power cycle [ 1498.469461][ T5913] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 1498.479116][ T5913] usb 5-1: config 5 has no interface number 0 [ 1498.485236][ T5913] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1498.529013][ T5913] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 1498.558548][ T5913] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1498.578950][ T5913] usb 5-1: config 5 interface 123 has no altsetting 0 [ 1498.597520][ T5913] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1498.609671][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.618920][ T5913] usb 5-1: Product: syz [ 1498.623319][ T5913] usb 5-1: Manufacturer: syz [ 1498.634951][ T5913] usb 5-1: SerialNumber: syz [ 1498.747870][ T24] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 1498.768655][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 1498.897885][ T24] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 1498.918432][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 1498.925070][T30081] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6371'. [ 1498.935735][ T24] usb usb1-port1: unable to enumerate USB device [ 1500.328454][ T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1500.498087][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1500.503585][T30101] pimreg: entered allmulticast mode [ 1500.512436][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.525677][T30101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6377'. [ 1500.535818][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1500.543821][T30101] pimreg: left allmulticast mode [ 1500.551926][ T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1500.573901][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.582534][ T24] usb 2-1: Product: syz [ 1500.586741][ T24] usb 2-1: Manufacturer: syz [ 1500.591848][ T24] usb 2-1: SerialNumber: syz [ 1500.603656][ T24] usb 2-1: config 0 descriptor?? [ 1500.834678][T30094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.855192][T30107] kvm: pic: single mode not supported [ 1500.855490][T30107] kvm: pic: single mode not supported [ 1500.878002][T30107] kvm: pic: single mode not supported [ 1500.883816][T30107] kvm: pic: single mode not supported [ 1500.889314][T30107] pic_ioport_write: 79 callbacks suppressed [ 1500.889330][T30107] kvm: pic: level sensitive irq not supported [ 1500.908910][T30094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.980643][T30094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.991375][T30094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.002099][ T24] usb 2-1: Can not set alternate setting to 1, error: -71 [ 1501.020988][ T24] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -71 [ 1501.038693][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1501.039391][ T24] usb 2-1: USB disconnect, device number 79 [ 1501.107949][ T5913] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1501.138551][ T5913] usb 5-1: USB disconnect, device number 45 [ 1501.151122][ T5925] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1501.208086][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1501.217919][ T9] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1501.237943][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.245992][ T9] usb 4-1: Product: syz [ 1501.260347][ T9] usb 4-1: Manufacturer: syz [ 1501.270483][ T9] usb 4-1: SerialNumber: syz [ 1501.281497][ T9] usb 4-1: config 0 descriptor?? [ 1501.340578][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 1501.350268][ T5925] usb 1-1: config 0 has no interfaces? [ 1501.362473][ T5925] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1501.378004][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.386130][ T5925] usb 1-1: Product: syz [ 1501.396447][ T5925] usb 1-1: Manufacturer: syz [ 1501.402594][ T5925] usb 1-1: SerialNumber: syz [ 1501.412464][ T5925] usb 1-1: config 0 descriptor?? [ 1501.491135][ T9] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 1501.507795][ T9] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1501.665606][T30113] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1501.707016][T30113] netlink: 45 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1501.741302][T24423] usb 4-1: USB disconnect, device number 46 [ 1501.746164][ T5925] usb 1-1: USB disconnect, device number 79 [ 1502.177393][T30142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6389'. [ 1502.187894][ T5913] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1502.330315][T30147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6391'. [ 1502.347869][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 1502.362210][T30150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6391'. [ 1502.363922][ T5913] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1502.412227][ T5913] usb 2-1: config 0 has no interface number 0 [ 1502.455243][ T5913] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1502.494947][ T5913] usb 2-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 1502.523119][ T5913] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1502.599567][ T5913] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1502.628299][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.639832][ T5913] usb 2-1: Product: syz [ 1502.644276][ T5913] usb 2-1: Manufacturer: syz [ 1502.649451][ T5913] usb 2-1: SerialNumber: syz [ 1502.666806][ T5913] usb 2-1: config 0 descriptor?? [ 1502.682770][T30132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1502.952993][T30158] netlink: 'syz.3.6392': attribute type 8 has an invalid length. [ 1503.014982][T30132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.055621][T30132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.076978][T30132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6386'. [ 1503.088385][T24423] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1503.097658][T30132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6386'. [ 1503.129017][T30132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1503.179154][ T5913] ipheth 2-1:0.196: Unable to find endpoints [ 1503.223904][ T5913] usb 2-1: USB disconnect, device number 80 [ 1503.269638][T24423] usb 1-1: device descriptor read/64, error -71 [ 1503.423678][T30163] hsr0: entered promiscuous mode [ 1503.447238][T30163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6394'. [ 1503.479237][T30163] hsr_slave_0: left promiscuous mode [ 1503.496680][T30163] hsr_slave_1: left promiscuous mode [ 1503.530635][T30163] hsr0 (unregistering): left promiscuous mode [ 1503.547123][T24423] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1503.708077][T24423] usb 1-1: device descriptor read/64, error -71 [ 1503.848217][T24423] usb usb1-port1: attempt power cycle [ 1504.097881][ T5913] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1504.167925][ T5925] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1504.227933][T24423] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1504.247863][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 1504.248798][T24423] usb 1-1: device descriptor read/8, error -71 [ 1504.256406][ T5913] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1504.268706][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.276726][ T5913] usb 2-1: Product: syz [ 1504.281069][ T5913] usb 2-1: Manufacturer: syz [ 1504.285667][ T5913] usb 2-1: SerialNumber: syz [ 1504.293300][ T5913] usb 2-1: config 0 descriptor?? [ 1504.298383][ T5925] usb 5-1: device descriptor read/64, error -71 [ 1504.497858][T24423] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1504.508325][ T5913] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 1504.516038][ T5913] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1504.534535][T24423] usb 1-1: device descriptor read/8, error -71 [ 1504.537941][ T5925] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1504.589164][T30195] __nla_validate_parse: 1 callbacks suppressed [ 1504.589179][T30195] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.6403'. [ 1504.604938][T30195] openvswitch: netlink: Message has 16 unknown bytes. [ 1504.658289][T24423] usb usb1-port1: unable to enumerate USB device [ 1504.688561][ T5925] usb 5-1: device descriptor read/64, error -71 [ 1504.720504][ T5913] usb 2-1: USB disconnect, device number 81 [ 1504.798134][ T5925] usb usb5-port1: attempt power cycle [ 1505.107853][ T796] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1505.137904][ T5925] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1505.168936][ T5925] usb 5-1: device descriptor read/8, error -71 [ 1505.267829][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 1505.286247][T30203] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6405'. [ 1505.295658][T30203] 0·: renamed from hsr_slave_1 (while UP) [ 1505.303489][T30203] 0·: entered allmulticast mode [ 1505.309280][T30203] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1505.369815][ T796] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1505.383860][ T796] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1505.394260][ T796] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1505.404260][ T796] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1505.417515][ T5925] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1505.425307][ T796] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1505.434668][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.451204][ T5925] usb 5-1: device descriptor read/8, error -71 [ 1505.559221][ T5925] usb usb5-port1: unable to enumerate USB device [ 1505.577879][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1505.740006][ T796] usb 4-1: usb_control_msg returned -32 [ 1505.741333][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1505.745634][ T796] usbtmc 4-1:16.0: can't read capabilities [ 1505.756268][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.775455][ T9] usb 2-1: config 0 descriptor?? [ 1505.787561][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1506.097907][ T5913] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1506.247866][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 1506.256725][ T5913] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1506.266135][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.274449][ T5913] usb 1-1: Product: syz [ 1506.278900][ T5913] usb 1-1: Manufacturer: syz [ 1506.283515][ T5913] usb 1-1: SerialNumber: syz [ 1506.291703][ T5913] usb 1-1: config 0 descriptor?? [ 1506.703287][T30205] netlink: 'syz.0.6406': attribute type 1 has an invalid length. [ 1506.711588][T30205] netlink: 'syz.0.6406': attribute type 2 has an invalid length. [ 1506.763456][ T5913] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1506.773302][ T5913] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1506.809218][ T5913] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1506.835244][ T5913] usb 1-1: USB disconnect, device number 84 [ 1507.075956][T30216] netdevsim netdevsim6: Direct firmware load for / [ 1507.075956][T30216] failed with error -2 [ 1507.087298][T30216] netdevsim netdevsim6: Falling back to sysfs fallback for: / [ 1507.087298][T30216] [ 1507.551760][T30228] netlink: 'syz.0.6411': attribute type 10 has an invalid length. [ 1507.595186][T30229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6410'. [ 1507.713790][T30228] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1507.731908][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 1507.786560][ T9] usb 2-1: USB disconnect, device number 82 [ 1507.807111][T30228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1508.187876][ T5913] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1508.344756][ T9] usb 4-1: USB disconnect, device number 47 [ 1508.526631][ T5913] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1508.593377][ T5913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.630009][ T9] IPVS: starting estimator thread 0... [ 1508.651961][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1508.706910][ T5913] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.728022][T30248] IPVS: using max 35 ests per chain, 84000 per kthread [ 1508.780564][ T5913] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1508.818807][ T5905] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1508.833804][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1508.881341][ T5913] usb 1-1: Product: syz [ 1508.902526][ T5913] usb 1-1: Manufacturer: syz [ 1508.951982][ T5913] cdc_wdm 1-1:1.0: skipping garbage [ 1508.986458][ T5913] cdc_wdm 1-1:1.0: skipping garbage [ 1509.000447][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 1509.019430][ T5913] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1509.037703][ T5905] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1509.079472][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.119679][ T5905] usb 2-1: Product: syz [ 1509.139080][ T5905] usb 2-1: Manufacturer: syz [ 1509.165123][ T5905] usb 2-1: SerialNumber: syz [ 1509.195875][ T5905] usb 2-1: config 0 descriptor?? [ 1509.421062][ T5905] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 1509.450555][ T5905] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1509.550289][T30250] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6416'. [ 1509.604919][T30250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6416'. [ 1509.642453][ T5905] usb 2-1: USB disconnect, device number 83 [ 1510.470936][ T5913] usb 1-1: USB disconnect, device number 85 [ 1510.608000][ T5905] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1510.789757][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 1510.805645][ T5905] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1510.814518][ T5905] usb 4-1: config 179 has no interface number 0 [ 1510.821824][ T5905] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1510.834376][ T5905] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1510.845910][ T5905] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1510.857437][ T5905] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1510.869869][ T5905] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1510.884398][ T5905] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1510.893723][T18257] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1510.901653][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.932240][T30269] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1511.082484][T18257] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 1511.112088][T18257] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 1511.147117][T30286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.166746][T30286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.175127][T18257] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.212681][T18257] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1511.243930][ T5905] usb 4-1: USB disconnect, device number 48 [ 1511.250185][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1511.250227][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1511.267106][T18257] usb 5-1: config 0 has no interface number 0 [ 1511.279061][T18257] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1511.296205][T18257] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1511.336473][T18257] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1511.357140][T18257] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1511.372472][T18257] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1511.390981][T18257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.433190][T18257] usb 5-1: config 0 descriptor?? [ 1511.463215][T18257] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1511.666793][T30279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.687652][T30279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.738539][T18257] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 1511.763665][T18257] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1511.769087][ T796] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1511.781041][T18257] usb 5-1: MIDIStreaming interface descriptor not found [ 1511.949338][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 1511.961035][ T796] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1511.990544][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.020755][ T796] usb 2-1: Product: syz [ 1512.036408][T18257] usb 5-1: USB disconnect, device number 50 [ 1512.038312][ T796] usb 2-1: Manufacturer: syz [ 1512.050396][ T796] usb 2-1: SerialNumber: syz [ 1512.075686][ T796] usb 2-1: config 0 descriptor?? [ 1512.253742][T30305] kernel read not supported for file / ś7łĎüâW)ës“§Ç!QŹöěĄfsől{T‡rŇ)r§ÖOšő2:"ôŔT+Íźv|ŤŐ˛DvcŽ“ŘÖ Ĺ6Ňxăc: (pid: 30305 comm: syz.3.6431) [ 1512.310348][ T796] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 1512.310372][ T796] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1512.316376][ T30] audit: type=1800 audit(1775539887.435:6964): pid=30305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6431" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=157364 res=0 errno=0 [ 1512.343767][ T796] usb 2-1: USB disconnect, device number 84 [ 1513.618474][T30327] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1513.689518][T18257] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1513.711173][T30329] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1513.742727][T30329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6439'. [ 1513.758148][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1513.848687][T18257] usb 5-1: device descriptor read/64, error -71 [ 1513.858382][T30329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6439'. [ 1513.877023][T30330] bond1 (unregistering): Released all slaves [ 1513.911525][T30332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6439'. [ 1513.943001][ T9] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 1513.958795][ T9] usb 4-1: config 0 has no interface number 0 [ 1513.984248][ T9] usb 4-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.019536][ T9] usb 4-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.055025][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1514.068462][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.102566][ T9] usb 4-1: config 0 descriptor?? [ 1514.110876][T18257] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1514.258518][T18257] usb 5-1: device descriptor read/64, error -71 [ 1514.368570][T18257] usb usb5-port1: attempt power cycle [ 1514.458411][T24423] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1514.607998][T24423] usb 1-1: Using ep0 maxpacket: 16 [ 1514.620162][T24423] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.634052][T24423] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.647185][T24423] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1514.663178][T24423] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1514.673805][T24423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.692689][T24423] usb 1-1: config 0 descriptor?? [ 1514.729412][T18257] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1514.745379][ T9] usbhid 4-1:0.17: can't add hid device: -71 [ 1514.752125][ T9] usbhid 4-1:0.17: probe with driver usbhid failed with error -71 [ 1514.769985][T18257] usb 5-1: device descriptor read/8, error -71 [ 1514.780962][ T9] usb 4-1: USB disconnect, device number 49 [ 1515.017925][T18257] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1515.059135][T18257] usb 5-1: device descriptor read/8, error -71 [ 1515.117623][T30337] random: crng reseeded on system resumption [ 1515.151154][T24423] input: HID 0955:7214 Haptics as /devices/virtual/input/input160 [ 1515.178722][T18257] usb usb5-port1: unable to enumerate USB device [ 1515.207351][T24423] shield 0003:0955:7214.0063: Registered Thunderstrike controller [ 1515.222625][T24423] shield 0003:0955:7214.0063: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1515.364290][ T9] shield 0003:0955:7214.0063: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1515.376678][T18257] usb 1-1: USB disconnect, device number 86 [ 1515.396663][ T9] shield 0003:0955:7214.0063: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1515.443266][ T9] shield 0003:0955:7214.0063: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1515.477656][ T9] shield 0003:0955:7214.0063: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1516.470545][T30359] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1516.477078][T30359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1516.495035][T30359] vhci_hcd vhci_hcd.0: Device attached [ 1516.605174][T30366] xt_hashlimit: size too large, truncated to 1048576 [ 1516.727884][ T5925] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 1517.299139][T30360] vhci_hcd: connection reset by peer [ 1517.316900][T17848] vhci_hcd vhci_hcd.1: stop threads [ 1517.335790][T17848] vhci_hcd vhci_hcd.1: release socket [ 1517.358282][T17848] vhci_hcd vhci_hcd.1: disconnect device [ 1518.106521][T30394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6455'. [ 1518.147582][T30394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6455'. [ 1518.171907][T30394] netlink: 'syz.1.6455': attribute type 14 has an invalid length. [ 1518.264762][T30402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6458'. [ 1518.448490][T24423] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1518.516428][ T796] IPVS: starting estimator thread 0... [ 1518.618312][T30414] IPVS: using max 34 ests per chain, 81600 per kthread [ 1518.650603][T24423] usb 4-1: Using ep0 maxpacket: 8 [ 1518.669158][T24423] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.702057][T24423] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1518.744705][T24423] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1518.809570][T24423] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1518.847806][T24423] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1518.876312][T24423] usb 4-1: Product: syz [ 1518.896910][T24423] usb 4-1: Manufacturer: syz [ 1518.920200][T24423] usb 4-1: SerialNumber: syz [ 1518.951151][T24423] usb 4-1: config 0 descriptor?? [ 1519.010152][T30410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1519.077863][T24423] rc_core: IR keymap rc-imon-rsc not found [ 1519.090313][T24423] Registered IR keymap rc-empty [ 1519.152233][T24423] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1519.177308][T24423] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input161 [ 1519.681745][T30421] xt_hashlimit: size too large, truncated to 1048576 [ 1519.713399][T30422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1519.937562][T24423] usb 4-1: USB disconnect, device number 50 [ 1520.118429][T30433] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6466'. [ 1520.149418][ T30] audit: type=1326 audit(1775539895.275:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30431 comm="syz.6.6466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd08199c819 code=0x0 [ 1520.238267][ T796] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1520.398096][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 1520.409537][ T796] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1520.417640][ T796] usb 1-1: config 0 has no interface number 0 [ 1520.470389][ T796] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1520.557568][ T796] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1520.651133][ T796] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1520.671725][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.722927][T15632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1520.736626][ T796] usb 1-1: Product: syz [ 1520.751445][T15632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1520.759859][ T796] usb 1-1: Manufacturer: syz [ 1520.765551][T15632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1520.784374][ T796] usb 1-1: SerialNumber: syz [ 1520.784905][T15632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1520.804453][T15632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1520.837899][T19812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1520.845577][ T796] usb 1-1: config 0 descriptor?? [ 1520.858500][T19812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1520.865898][T19812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1520.883275][T19812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1520.898569][T19812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1521.038158][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1521.103726][ T796] radio-si470x 1-1:0.35: DeviceID=0x8249 ChipID=0x5d00 [ 1521.230534][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1521.302535][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1521.322970][ T796] radio-si470x 1-1:0.35: software version 146, hardware version 66 [ 1521.353564][T24423] IPVS: starting estimator thread 0... [ 1521.353592][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1521.382968][ T796] radio-si470x 1-1:0.35: submitting int urb failed (-90) [ 1521.442462][T30465] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6472'. [ 1521.462521][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1521.462744][T30466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.472395][T30464] IPVS: using max 58 ests per chain, 139200 per kthread [ 1521.525455][T30466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.544650][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1521.556585][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1521.607887][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1521.627004][ T796] radio-si470x 1-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 1521.664773][ T796] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -22 [ 1521.674479][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.711937][ T24] usb 4-1: config 0 descriptor?? [ 1521.721569][T30443] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1521.730779][ T796] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1521.763376][ T796] usb 1-1: USB disconnect, device number 87 [ 1521.878174][ T5925] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1521.985203][ C0] Bluetooth: hci0: Unexpected continuation: 1 bytes [ 1522.008074][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.016340][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.028924][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.041412][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.067952][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.078422][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.085311][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.095157][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.102288][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.109369][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.116195][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.123481][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.130926][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.138019][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.142730][T30474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6474'. [ 1522.167939][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.187933][ T796] usb 4-1: USB disconnect, device number 51 [ 1522.198115][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.207973][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.218296][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.227935][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.234891][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.241865][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.256585][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.264715][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.271606][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.281665][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.291767][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.298653][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.307973][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.331405][T19812] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1522.360371][T15632] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 1522.842173][T30484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6476'. [ 1522.937888][T15632] Bluetooth: hci2: command tx timeout [ 1523.552125][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.606636][T30479] netdevsim netdevsim4: Direct firmware load for / [ 1523.606636][T30479] failed with error -2 [ 1523.628568][T30444] chnl_net:caif_netlink_parms(): no params data found [ 1523.664553][T30479] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 1523.664553][T30479] [ 1523.759620][T30444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.771843][T30444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.779235][T30444] bridge_slave_0: entered allmulticast mode [ 1523.786481][T30444] bridge_slave_0: entered promiscuous mode [ 1523.800185][T30444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.818216][T30444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.836555][T30444] bridge_slave_1: entered allmulticast mode [ 1523.846934][T30444] bridge_slave_1: entered promiscuous mode [ 1523.888842][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.995252][T30496] xt_hashlimit: size too large, truncated to 1048576 [ 1524.086404][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.130263][T30500] netlink: 'syz.0.6478': attribute type 10 has an invalid length. [ 1524.196100][T30501] netlink: 'syz.0.6478': attribute type 10 has an invalid length. [ 1524.524497][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.538875][T30510] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6480'. [ 1524.593679][T30500] team0: Port device dummy0 added [ 1524.625680][T30501] team0: Port device dummy0 removed [ 1524.639377][T30501] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1524.657074][T30444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.668972][T30444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.743253][T30444] team0: Port device team_slave_0 added [ 1524.794426][T30444] team0: Port device team_slave_1 added [ 1524.947699][T30518] SET target dimension over the limit! [ 1524.996640][T30444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.007952][T15632] Bluetooth: hci2: command tx timeout [ 1525.109637][T30444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.227643][T30444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.273337][T30444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.367859][T30444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.448542][T30444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.639282][ T36] bridge_slave_1: left allmulticast mode [ 1525.666420][ T36] bridge_slave_1: left promiscuous mode [ 1525.686838][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.707403][ T36] bridge_slave_0: left allmulticast mode [ 1525.715973][ T36] bridge_slave_0: left promiscuous mode [ 1525.750936][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.837318][T30543] sctp: [Deprecated]: syz.4.6485 (pid 30543) Use of int in maxseg socket option. [ 1525.837318][T30543] Use struct sctp_assoc_value instead [ 1525.917871][T18257] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1526.125877][ T36] erspan0 (unregistering): left allmulticast mode [ 1526.424056][ T36] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1526.508506][ T36] bond0 (unregistering): (slave c5˙): Releasing backup interface [ 1526.523352][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1526.582580][ T36] bond0 (unregistering): Released all slaves [ 1526.595161][ T36] bond1 (unregistering): Released all slaves [ 1526.629065][ T36] bond2 (unregistering): Released all slaves [ 1526.655725][ T36] bond3 (unregistering): Released all slaves [ 1526.819236][T30444] hsr_slave_0: entered promiscuous mode [ 1526.846728][T30444] hsr_slave_1: entered promiscuous mode [ 1526.893486][T30444] debugfs: 'hsr0' already exists in 'hsr' [ 1526.922726][T30444] Cannot create hsr debugfs directory [ 1526.942106][ T36] tipc: Left network mode [ 1527.087894][T15632] Bluetooth: hci2: command tx timeout [ 1527.108842][T18257] usb 4-1: device descriptor read/64, error -71 [ 1527.149160][T24423] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1527.347862][T18257] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1527.370042][T24423] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.404887][T30569] xt_hashlimit: size too large, truncated to 1048576 [ 1527.416627][ T36] mac80211_hwsim hwsim31 wlan0 (unregistering): left allmulticast mode [ 1527.430254][T24423] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1527.470238][T24423] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x89 has invalid maxpacket 211 [ 1527.497834][T24423] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1527.516820][T24423] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1527.532550][T24423] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1527.539922][T18257] usb 4-1: Using ep0 maxpacket: 16 [ 1527.553161][T18257] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1527.572463][T24423] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 1527.584001][T18257] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1527.595225][T24423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.607494][T18257] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1527.620209][T24423] usb 5-1: Product: syz [ 1527.624393][T24423] usb 5-1: Manufacturer: syz [ 1527.629805][T18257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.639397][T24423] usb 5-1: SerialNumber: syz [ 1527.667909][T18257] usb 4-1: config 0 descriptor?? [ 1527.778967][ T36] hsr_slave_0: left promiscuous mode [ 1527.786540][ T36] 0·: left promiscuous mode [ 1527.794066][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1527.813675][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.914211][T24423] usb 5-1: selecting invalid altsetting 0 [ 1527.947688][T24423] uvcvideo 5-1:220.0: probe with driver uvcvideo failed with error -22 [ 1527.959494][ T36] veth1_macvtap: left promiscuous mode [ 1527.976977][T24423] usb 5-1: selecting invalid altsetting 0 [ 1527.978334][ T36] veth0_macvtap: left promiscuous mode [ 1527.990500][T24423] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1527.999348][ T36] veth1_vlan: left promiscuous mode [ 1528.008073][ T36] veth0_vlan: left promiscuous mode [ 1528.008073][T24423] usb 5-1: USB disconnect, device number 55 [ 1528.136867][T18257] mcp2221 0003:04D8:00DD.0064: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1528.459104][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1528.515489][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1528.536864][ T5925] usb 4-1: USB disconnect, device number 53 [ 1528.777211][T30593] netlink: 'syz.0.6494': attribute type 10 has an invalid length. [ 1528.982549][T30593] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1528.995347][T30582] netdevsim netdevsim6: Direct firmware load for / [ 1528.995347][T30582] failed with error -2 [ 1529.010450][T30582] netdevsim netdevsim6: Falling back to sysfs fallback for: / [ 1529.010450][T30582] [ 1529.021801][T30593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1529.096275][T30594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6494'. [ 1529.168931][T15632] Bluetooth: hci2: command tx timeout [ 1529.277886][T18257] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1529.459622][T18257] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1529.507488][T18257] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.524864][T30607] Cannot find add_set index 0 as target [ 1529.629493][T18257] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1529.658931][T30607] netlink: 'syz.4.6496': attribute type 1 has an invalid length. [ 1529.681593][ T36] IPVS: stop unused estimator thread 0... [ 1529.693891][T18257] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1529.755080][T18257] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1529.785113][T18257] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1529.803386][T18257] usb 1-1: Product: syz [ 1529.833767][T18257] usb 1-1: Manufacturer: syz [ 1529.862176][T18257] cdc_wdm 1-1:1.0: skipping garbage [ 1529.884483][T18257] cdc_wdm 1-1:1.0: skipping garbage [ 1529.908447][T18257] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1530.167926][ T5913] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1530.368766][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 1530.481206][ T5913] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1530.566747][ T5913] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1530.617084][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1530.635604][ T5913] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1530.635624][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.635635][ T5913] usb 5-1: Product: syz [ 1530.635643][ T5913] usb 5-1: Manufacturer: syz [ 1530.635651][ T5913] usb 5-1: SerialNumber: syz [ 1530.656742][T30621] Set syz0 is full, maxelem 0 reached [ 1530.683734][ T5913] usb 5-1: config 0 descriptor?? [ 1530.712614][T30621] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6498'. [ 1530.714557][T30621] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6498'. [ 1530.747821][T30444] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1530.752583][T30444] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1530.755718][T30444] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1530.766570][T30444] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1531.172911][ T5913] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1531.244347][T30444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.369392][T30444] 8021q: adding VLAN 0 to HW filter on device team0 [ 1531.382464][ T5913] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1531.412528][ T5913] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 1531.425983][T10070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.433131][T10070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1531.484915][T10070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.492087][T10070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1531.654970][T30444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1531.809799][T30444] veth0_vlan: entered promiscuous mode [ 1531.849734][T30444] veth1_vlan: entered promiscuous mode [ 1531.942941][T30444] veth0_macvtap: entered promiscuous mode [ 1531.983781][T30444] veth1_macvtap: entered promiscuous mode [ 1532.006051][T18257] usb 1-1: USB disconnect, device number 88 [ 1532.116000][T30444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1532.171349][T30444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1532.262137][T16751] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.300884][T16751] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.358873][T16751] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.372115][T30650] input: syz1 as /devices/virtual/input/input162 [ 1532.388610][T16751] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.436482][T30649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.487556][T30649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.619981][T16751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.651896][T16751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.671192][T18257] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1532.755702][T17848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.776904][T17848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.843633][T18257] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1532.877908][T18257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.899579][T18257] usb 1-1: Product: syz [ 1532.903820][T18257] usb 1-1: Manufacturer: syz [ 1532.915465][ T9] usb 5-1: USB disconnect, device number 56 [ 1532.936912][T18257] usb 1-1: SerialNumber: syz [ 1532.971693][T30663] xt_hashlimit: size too large, truncated to 1048576 [ 1533.208640][T18257] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1533.227977][T18257] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1533.311070][T18257] usb 1-1: USB disconnect, device number 89 [ 1533.338817][ T5913] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1533.838441][ T5913] usb 2-1: device descriptor read/64, error -71 [ 1534.089576][T18257] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1534.102408][ T5913] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1534.128106][ T30] audit: type=1800 audit(1775539909.245:6966): pid=30702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6509" name="bus" dev="ramfs" ino=159686 res=0 errno=0 [ 1534.247901][T18257] usb 4-1: Using ep0 maxpacket: 16 [ 1534.256000][T18257] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1534.269949][ T30] audit: type=1326 audit(1775539909.395:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.0.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1534.315800][T18257] usb 4-1: config 8 has an invalid interface number: 12 but max is 1 [ 1534.328034][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 1534.341950][T18257] usb 4-1: config 8 has an invalid interface number: 254 but max is 1 [ 1534.363367][T18257] usb 4-1: config 8 has no interface number 0 [ 1534.366217][ T5913] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 1534.380267][ T30] audit: type=1326 audit(1775539909.415:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.0.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1534.410250][T18257] usb 4-1: config 8 has no interface number 1 [ 1534.432652][T18257] usb 4-1: config 8 interface 12 has no altsetting 0 [ 1534.455153][ T5913] usb 2-1: config 0 has no interface number 0 [ 1534.466982][T18257] usb 4-1: config 8 interface 254 has no altsetting 0 [ 1534.481492][ T30] audit: type=1326 audit(1775539909.425:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.0.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1534.524919][ T5913] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.524999][T18257] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5 [ 1534.589293][ T5913] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.607602][ T30] audit: type=1326 audit(1775539909.425:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.0.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1534.638886][T18257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.662776][T18257] usb 4-1: Product: syz [ 1534.667366][ T5913] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1534.697462][T18257] usb 4-1: Manufacturer: syz [ 1534.712784][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.720996][T18257] usb 4-1: SerialNumber: syz [ 1534.738940][ T30] audit: type=1326 audit(1775539909.425:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.0.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1534.781704][ T5913] usb 2-1: config 0 descriptor?? [ 1534.863470][ T30] audit: type=1326 audit(1775539909.425:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.0.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1534.960131][ T30] audit: type=1326 audit(1775539909.425:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.0.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1535.050955][ T30] audit: type=1326 audit(1775539909.425:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.0.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1535.155960][ T30] audit: type=1326 audit(1775539909.425:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.0.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1535.271908][ T5913] hid (null): bogus close delimiter [ 1535.280153][ T5913] hid (null): unknown global tag 0xe5 [ 1535.543308][T18257] peak_usb 4-1:8.12: PEAK-System PCAN-Chip USB v52 fw v56.156.45 (1 channels) [ 1535.634453][ T5913] usb 2-1: USB disconnect, device number 86 [ 1535.744068][T18257] peak_usb 4-1:8.12 can0: sending command failure: -22 [ 1535.755038][T18257] peak_usb 4-1:8.12 can0: sending command failure: -22 [ 1535.762243][T18257] peak_usb 4-1:8.12 can0: sending command failure: -22 [ 1535.819476][T18257] peak_usb 4-1:8.12: probe with driver peak_usb failed with error -22 [ 1535.942172][T30723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6518'. [ 1536.136360][T30734] xt_hashlimit: size too large, truncated to 1048576 [ 1536.147615][T30736] binder: 30720:30736 ioctl c0306201 0 returned -14 [ 1536.737824][ T7694] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1536.916104][ T7694] usb 2-1: Using ep0 maxpacket: 8 [ 1536.947263][ T7694] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1536.983542][ T7694] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.078928][ T7694] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=cd.98 [ 1537.100636][T18257] usb 4-1: USB disconnect, device number 54 [ 1537.150872][ T7694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.183041][ T7694] usb 2-1: Product: syz [ 1537.189016][ T7694] usb 2-1: Manufacturer: syz [ 1537.194181][ T7694] usb 2-1: SerialNumber: syz [ 1537.439614][T30741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1537.449420][T30757] netlink: 'syz.3.6524': attribute type 10 has an invalid length. [ 1537.491463][T30741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1537.516760][T30757] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1537.587623][T30757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1537.892831][T30741] netlink: 'syz.1.6520': attribute type 10 has an invalid length. [ 1537.955558][T30741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.002480][T30741] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1538.117887][ T5913] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1538.207273][T30741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.310811][T30741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.337532][ T5913] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1538.370233][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.440594][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1538.558814][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.628314][ T5913] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1538.653984][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1538.701248][ T5913] usb 4-1: Product: syz [ 1538.714448][ T5913] usb 4-1: Manufacturer: syz [ 1538.746159][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 1538.771963][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 1538.805038][ T5913] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1539.404613][T30771] SET target dimension over the limit! [ 1539.433202][T30771] netdevsim netdevsim6: Direct firmware load for / [ 1539.433202][T30771] failed with error -2 [ 1539.445137][T30771] netdevsim netdevsim6: Falling back to sysfs fallback for: / [ 1539.445137][T30771] [ 1539.795362][ T7694] kl5kusb105 2-1:8.0: KL5KUSB105D / PalmConnect converter detected [ 1539.862785][ T7694] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 1539.926424][ T7694] usb 2-1: USB disconnect, device number 87 [ 1539.985076][ T7694] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 1540.028244][T30781] netlink: 'syz.4.6529': attribute type 12 has an invalid length. [ 1540.037418][ T7694] kl5kusb105 2-1:8.0: device disconnected [ 1540.078087][T30781] netlink: 'syz.4.6529': attribute type 29 has an invalid length. [ 1540.122912][T30781] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6529'. [ 1540.163796][T30781] netlink: 'syz.4.6529': attribute type 2 has an invalid length. [ 1540.195851][T30781] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6529'. [ 1540.198765][T30785] xt_hashlimit: size too large, truncated to 1048576 [ 1540.360407][T30787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6532'. [ 1540.384150][T30787] chnl_net:caif_netlink_parms(): no params data found [ 1540.749986][T18257] usb 4-1: USB disconnect, device number 55 [ 1540.807882][ T796] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1541.016234][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1541.038766][ T796] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1541.052526][ T796] usb 5-1: New USB device strings: Mfr=172, Product=0, SerialNumber=0 [ 1541.100969][ T796] usb 5-1: Manufacturer: syz [ 1541.122587][ T796] usb 5-1: config 0 descriptor?? [ 1541.146804][ T796] hub 5-1:0.0: USB hub found [ 1541.342662][ T796] hub 5-1:0.0: 1 port detected [ 1541.485489][T30810] loop3: detected capacity change from 0 to 7 [ 1541.497831][T18257] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1541.522502][T26741] Dev loop3: unable to read RDB block 7 [ 1541.540784][T26741] loop3: unable to read partition table [ 1541.553666][T26741] loop3: partition table beyond EOD, truncated [ 1541.567047][T30810] Dev loop3: unable to read RDB block 7 [ 1541.575245][T30810] loop3: unable to read partition table [ 1541.584381][T30810] loop3: partition table beyond EOD, truncated [ 1541.592993][T30810] loop_reread_partitions: partition scan of loop3 (ţ被xü—źŃŕ– ) failed (rc=-5) [ 1541.697813][T18257] usb 2-1: Using ep0 maxpacket: 32 [ 1541.710522][T18257] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1541.743663][T18257] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 1541.771350][T18257] usb 2-1: config 7 has no interface number 0 [ 1541.799566][T18257] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1541.851170][T18257] usb 2-1: config 7 interface 187 has no altsetting 0 [ 1541.892832][T18257] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1541.921249][T18257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.947030][T18257] usb 2-1: Product: syz [ 1541.971574][T18257] usb 2-1: Manufacturer: syz [ 1541.987882][T18257] usb 2-1: SerialNumber: syz [ 1542.173700][T30821] pimreg: entered allmulticast mode [ 1542.211168][T30821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6544'. [ 1542.223607][T18257] usb 2-1: Unknown endpoint type found, address 0x07 [ 1542.235792][T30821] pimreg: left allmulticast mode [ 1542.241125][T18257] usb 2-1: Unknown endpoint type found, address 0x03 [ 1542.257809][T18257] usb 2-1: Not enough endpoints found in device, aborting! [ 1542.330609][T18257] usb 2-1: USB disconnect, device number 88 [ 1542.455553][T30841] xt_hashlimit: size too large, truncated to 1048576 [ 1542.535240][ T796] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1542.565661][ T796] usb 5-1: USB disconnect, device number 57 [ 1542.806762][T30852] netdevsim netdevsim0: Direct firmware load for / [ 1542.806762][T30852] failed with error -2 [ 1542.818081][T30852] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 1542.818081][T30852] [ 1544.030551][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1544.030569][ T30] audit: type=1326 audit(1775539919.155:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30871 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1544.165225][ T796] IPVS: starting estimator thread 0... [ 1544.199157][ T30] audit: type=1326 audit(1775539919.155:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30871 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1544.250801][ T30] audit: type=1326 audit(1775539919.155:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30871 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1544.274183][T30877] IPVS: using max 35 ests per chain, 84000 per kthread [ 1544.348510][ T30] audit: type=1326 audit(1775539919.155:7018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30871 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1544.435926][ T30] audit: type=1326 audit(1775539919.155:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30871 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1544.520435][ T30] audit: type=1326 audit(1775539919.225:7020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30871 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1544.569918][ T30] audit: type=1326 audit(1775539919.225:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30871 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1544.603811][ T30] audit: type=1326 audit(1775539919.225:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30871 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1544.664364][T30884] pimreg: entered allmulticast mode [ 1544.665231][T30886] input: syz1 as /devices/virtual/input/input163 [ 1544.676355][ T30] audit: type=1326 audit(1775539919.235:7023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30871 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1544.702484][T30884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6561'. [ 1544.727968][T30884] pimreg: left allmulticast mode [ 1544.747877][ T30] audit: type=1326 audit(1775539919.235:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30871 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741299c819 code=0x7ffc0000 [ 1544.948149][T30892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6564'. [ 1545.032825][T30897] netlink: 'syz.0.6563': attribute type 10 has an invalid length. [ 1545.078764][T30897] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1545.092093][T30897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1545.153754][T30863] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1545.232363][T30900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6563'. [ 1545.241390][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1545.534729][T30903] netdevsim netdevsim3: Direct firmware load for / [ 1545.534729][T30903] failed with error -2 [ 1545.547950][T30903] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 1545.547950][T30903] [ 1545.555280][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1545.572753][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1545.581382][ T9] usb 2-1: config 0 has no interface number 0 [ 1545.599752][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1545.609987][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.619078][ T9] usb 2-1: Product: syz [ 1545.623247][ T9] usb 2-1: Manufacturer: syz [ 1545.629733][ T9] usb 2-1: SerialNumber: syz [ 1545.645583][ T9] usb 2-1: config 0 descriptor?? [ 1545.656475][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1545.818525][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.825679][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.864728][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1545.895704][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1545.907904][ T796] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1546.063715][ T796] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1546.101389][ T796] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.140402][T30896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.157890][ T796] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1546.172883][T30896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.205868][ T796] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.274818][ T796] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1546.314119][ T796] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1546.346949][ T796] usb 1-1: Product: syz [ 1546.369975][ T796] usb 1-1: Manufacturer: syz [ 1546.468772][ T796] cdc_wdm 1-1:1.0: skipping garbage [ 1546.493677][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1546.502369][ T9] usb 2-1: USB disconnect, device number 89 [ 1546.528651][ T796] cdc_wdm 1-1:1.0: skipping garbage [ 1546.543691][ T796] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1546.566316][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1546.623036][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1546.665260][ T9] quatech2 2-1:0.51: device disconnected [ 1546.877848][T18257] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1547.050777][T18257] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1547.084734][T18257] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1547.172512][T18257] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1547.203327][T18257] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1547.234567][T18257] usb 4-1: Product: syz [ 1547.237880][T30927] binder: BINDER_SET_CONTEXT_MGR already set [ 1547.255553][T18257] usb 4-1: Manufacturer: syz [ 1547.257983][ T796] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1547.270595][T30927] binder: 30924:30927 ioctl 4018620d 200000000100 returned -16 [ 1547.279927][T18257] usb 4-1: SerialNumber: syz [ 1547.290044][T18257] usb 4-1: config 0 descriptor?? [ 1547.309970][T30919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1547.342008][T18257] usb 4-1: selecting invalid altsetting 0 [ 1547.429752][ T796] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1547.453709][ T796] usb 5-1: string descriptor 0 read error: -22 [ 1547.499269][ T796] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 1547.535333][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.075795][T30929] pimreg: entered allmulticast mode [ 1548.085557][T30929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6573'. [ 1548.099646][T30929] pimreg: left allmulticast mode [ 1548.200191][T30923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.223546][T30923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.239883][ T796] usbhid 5-1:1.0: can't add hid device: -71 [ 1548.259127][ T796] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1548.287706][ T796] usb 5-1: USB disconnect, device number 58 [ 1549.117121][ T796] usb 1-1: USB disconnect, device number 90 [ 1549.177861][ T5913] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1549.196874][T30944] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1549.339899][ T5913] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.353074][ T5913] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1549.363258][ T5913] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1549.387961][ T5913] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1549.397675][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.405169][T30949] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.6580'. [ 1549.405965][ T5913] usb 5-1: Product: syz [ 1549.421136][ T5913] usb 5-1: Manufacturer: syz [ 1549.425843][ T5913] usb 5-1: SerialNumber: syz [ 1549.547884][ T796] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1549.583594][T30953] netdevsim netdevsim1: Direct firmware load for / [ 1549.583594][T30953] failed with error -2 [ 1549.594937][T30953] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 1549.594937][T30953] [ 1549.654921][ T5913] uvcvideo 5-1:220.0: Found Unit with invalid ID 0 [ 1549.676884][ T5913] uvcvideo 5-1:220.0: probe with driver uvcvideo failed with error -22 [ 1549.698955][ T5925] usb 4-1: USB disconnect, device number 56 [ 1549.709911][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 1549.747035][ T5913] usb 5-1: USB disconnect, device number 59 [ 1549.758027][ T796] usb 1-1: config 0 has no interfaces? [ 1549.785694][ T796] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1549.827129][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.880677][ T796] usb 1-1: config 0 descriptor?? [ 1549.960845][T30958] loop8: detected capacity change from 0 to 7 [ 1549.970127][T30958] Dev loop8: unable to read RDB block 7 [ 1549.976035][T30958] loop8: unable to read partition table [ 1549.982624][T30958] loop8: partition table beyond EOD, truncated [ 1549.989098][T30958] loop_reread_partitions: partition scan of loop8 (ţ被xü^>Ńŕ– ) failed (rc=-5) [ 1550.093786][ T5913] usb 1-1: USB disconnect, device number 91 [ 1550.187872][ T5925] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1550.352431][ T5925] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1550.367994][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1550.428674][ T5925] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1550.439032][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.449601][ T5925] usb 4-1: Product: syz [ 1550.453902][ T5925] usb 4-1: Manufacturer: syz [ 1550.461529][ T5925] usb 4-1: SerialNumber: syz [ 1550.470812][ T5925] usb 4-1: config 0 descriptor?? [ 1550.501777][ T5925] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1550.522622][T30966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.530004][T30966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.747876][ T5913] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1550.888156][ T5913] usb 1-1: device descriptor read/64, error -71 [ 1550.907538][T30975] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1550.940136][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.976661][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.003201][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.034094][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.147854][ T5913] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1551.297883][ T5913] usb 1-1: device descriptor read/64, error -71 [ 1551.408299][ T5913] usb usb1-port1: attempt power cycle [ 1551.447840][ T796] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1551.598087][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 1551.605871][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.620150][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1551.632279][ T796] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1551.642920][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.657111][ T796] usb 2-1: config 0 descriptor?? [ 1551.680371][ T796] hub 2-1:0.0: USB hub found [ 1551.749032][ T5913] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1551.775315][ T5913] usb 1-1: device descriptor read/8, error -71 [ 1551.877681][ T796] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1552.017888][ T5913] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1552.038736][ T5913] usb 1-1: device descriptor read/8, error -71 [ 1552.116945][T30956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.125893][T30956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.136304][ T5925] gspca_sunplus: reg_r err -71 [ 1552.142884][ T5925] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1552.154806][ T5913] usb usb1-port1: unable to enumerate USB device [ 1552.163161][ T5925] usb 4-1: USB disconnect, device number 57 [ 1552.419457][T30981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.443956][T30981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.472826][T30993] netlink: 'syz.4.6591': attribute type 10 has an invalid length. [ 1552.489915][ T796] usbhid 2-1:0.0: can't add hid device: -71 [ 1552.499381][ T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1552.510861][T30993] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1552.538431][ T796] usb 2-1: USB disconnect, device number 90 [ 1552.595950][T30993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1552.637032][T30994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6591'. [ 1552.827947][ T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1552.977844][ T796] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1552.990514][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1553.008127][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1553.041894][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1553.064701][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.102525][ T9] usb 1-1: Product: syz [ 1553.120969][ T9] usb 1-1: Manufacturer: syz [ 1553.139895][ T9] usb 1-1: SerialNumber: syz [ 1553.197666][ T796] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1553.216025][T31004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6595'. [ 1553.225469][ T796] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.238574][ T796] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1553.250138][ T796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.278367][ T796] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1553.302881][ T796] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1553.316563][ T796] usb 5-1: Product: syz [ 1553.326960][ T796] usb 5-1: Manufacturer: syz [ 1553.354721][ T796] cdc_wdm 5-1:1.0: skipping garbage [ 1553.360223][ T796] cdc_wdm 5-1:1.0: skipping garbage [ 1553.366073][ T796] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1553.484667][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1553.512784][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1553.668699][ T9] usb 1-1: USB disconnect, device number 96 [ 1554.086363][T31008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6596'. [ 1554.676205][T31024] tipc: Started in network mode [ 1554.690333][T31024] tipc: Node identity a2785d1bd17, cluster identity 4711 [ 1554.705331][T31024] tipc: Enabled bearer , priority 0 [ 1554.720711][T31022] syzkaller0: entered promiscuous mode [ 1554.734091][T31022] syzkaller0: entered allmulticast mode [ 1554.775367][T31022] tipc: Resetting bearer [ 1554.788010][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1554.816804][T31022] tipc: Disabling bearer [ 1554.957785][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1554.965175][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.976454][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.986928][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1554.999393][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.013942][ T9] usb 4-1: config 0 descriptor?? [ 1555.232959][T31017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.245901][T31017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.467716][ T9] wacom 0003:056A:0084.0066: unbalanced delimiter at end of report description [ 1555.478475][ T9] wacom 0003:056A:0084.0066: parse failed [ 1555.484265][ T9] wacom 0003:056A:0084.0066: probe with driver wacom failed with error -22 [ 1555.881146][ T9] usb 5-1: USB disconnect, device number 60 [ 1556.847157][T31046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1557.411512][T24423] usb 4-1: USB disconnect, device number 58 [ 1557.717494][T31058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.724891][T31058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.910868][T31069] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6613'. [ 1557.932042][T31058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1557.944404][T31058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1558.151993][T17848] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.189417][T17848] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.199571][T17848] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.209247][T17848] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.517837][T18257] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1558.548306][T31080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1558.575104][T31081] ALSA: mixer_oss: invalid OSS volume '' [ 1558.625200][T31083] xt_hashlimit: max too large, truncated to 1048576 [ 1558.649592][T31083] netlink: 'syz.4.6616': attribute type 11 has an invalid length. [ 1558.658152][T31083] netlink: 'syz.4.6616': attribute type 11 has an invalid length. [ 1558.674084][T31083] netlink: 'syz.4.6616': attribute type 11 has an invalid length. [ 1558.682996][T31083] netlink: 'syz.4.6616': attribute type 11 has an invalid length. [ 1558.698099][T18257] usb 4-1: Using ep0 maxpacket: 32 [ 1558.698251][T31083] netlink: 'syz.4.6616': attribute type 11 has an invalid length. [ 1558.718538][T31083] netlink: 'syz.4.6616': attribute type 11 has an invalid length. [ 1558.726826][T18257] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1558.727039][T31083] netlink: 'syz.4.6616': attribute type 11 has an invalid length. [ 1558.748049][T18257] usb 4-1: config 0 has no interface number 0 [ 1558.748299][T31083] netlink: 'syz.4.6616': attribute type 11 has an invalid length. [ 1558.754173][T18257] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1558.778334][T31083] netlink: 'syz.4.6616': attribute type 11 has an invalid length. [ 1558.783157][T18257] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1558.786724][T31083] netlink: 'syz.4.6616': attribute type 11 has an invalid length. [ 1558.812345][T18257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.833798][T18257] usb 4-1: Product: syz [ 1558.843993][T18257] usb 4-1: Manufacturer: syz [ 1558.852879][T18257] usb 4-1: SerialNumber: syz [ 1558.870006][T18257] usb 4-1: config 0 descriptor?? [ 1558.882171][T31077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1559.021731][T31091] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6619'. [ 1559.094986][T31077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1559.347364][T31099] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 1559.914768][T31101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6623'. [ 1560.279858][T31115] xt_hashlimit: size too large, truncated to 1048576 [ 1560.619014][T31118] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1560.726887][T31121] FAULT_INJECTION: forcing a failure. [ 1560.726887][T31121] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.742110][T31121] CPU: 1 UID: 0 PID: 31121 Comm: syz.1.6628 Tainted: G L syzkaller #0 PREEMPT(full) [ 1560.742138][T31121] Tainted: [L]=SOFTLOCKUP [ 1560.742144][T31121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1560.742156][T31121] Call Trace: [ 1560.742163][T31121] [ 1560.742171][T31121] dump_stack_lvl+0xe8/0x150 [ 1560.742197][T31121] should_fail_ex+0x412/0x560 [ 1560.742215][T31121] should_failslab+0xa8/0x100 [ 1560.742230][T31121] __kmalloc_noprof+0xe8/0x760 [ 1560.742243][T31121] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1560.742267][T31121] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1560.742296][T31121] ? tomoyo_path_number_perm+0x219/0x630 [ 1560.742321][T31121] tomoyo_path_number_perm+0x246/0x630 [ 1560.742344][T31121] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1560.742359][T31121] ? __lock_acquire+0x6b5/0x2cf0 [ 1560.742378][T31121] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1560.742411][T31121] ? __fget_files+0x2a/0x420 [ 1560.742431][T31121] ? __fget_files+0x2a/0x420 [ 1560.742446][T31121] ? __fget_files+0x3a0/0x420 [ 1560.742461][T31121] ? __fget_files+0x2a/0x420 [ 1560.742481][T31121] security_file_ioctl+0xc3/0x2a0 [ 1560.742499][T31121] __se_sys_ioctl+0x47/0x170 [ 1560.742513][T31121] do_syscall_64+0x14d/0xf80 [ 1560.742526][T31121] ? trace_irq_disable+0x3b/0x150 [ 1560.742535][T31121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.742550][T31121] ? clear_bhb_loop+0x40/0x90 [ 1560.742572][T31121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.742590][T31121] RIP: 0033:0x7f806519c819 [ 1560.742608][T31121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.742623][T31121] RSP: 002b:00007f8066095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1560.742639][T31121] RAX: ffffffffffffffda RBX: 00007f8065415fa0 RCX: 00007f806519c819 [ 1560.742646][T31121] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1560.742652][T31121] RBP: 00007f8066095090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.742658][T31121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1560.742664][T31121] R13: 00007f8065416038 R14: 00007f8065415fa0 R15: 00007f806553fa48 [ 1560.742680][T31121] [ 1560.742685][T31121] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1560.969979][T31121] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1561.328102][ T29] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1561.352814][T31132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1561.366565][T31132] ALSA: mixer_oss: invalid OSS volume '˙dev/iommu' [ 1561.489876][ T29] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 1561.504692][ T29] usb 2-1: config 0 has no interface number 0 [ 1561.517610][ T29] usb 2-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 1561.540459][ T29] usb 2-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 1561.570567][ T29] usb 2-1: config 0 interface 48 has no altsetting 0 [ 1561.584896][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1561.604987][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.629112][ T29] usb 2-1: config 0 descriptor?? [ 1561.800669][T18257] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1561.846837][T18257] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1561.891866][T18257] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1561.924130][T31125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.945768][T18257] usb 4-1: USB disconnect, device number 59 [ 1561.963424][T31125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.003657][ T29] usb 2-1: string descriptor 0 read error: -32 [ 1562.018905][ T29] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1562.161491][T31140] tipc: Started in network mode [ 1562.166434][T31140] tipc: Node identity 080211000001, cluster identity 4711 [ 1562.175044][T31140] tipc: Enabled bearer , priority 0 [ 1562.182784][T31140] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 1562.190713][T31140] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 1562.569394][T31145] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6635'. [ 1562.844429][ T29] usb 2-1: USB disconnect, device number 91 [ 1563.287951][T31073] tipc: Node number set to 134418688 [ 1563.441304][T31164] xt_hashlimit: size too large, truncated to 1048576 [ 1563.979409][T31178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1564.392787][T31180] tipc: Enabling of bearer rejected, failed to enable media [ 1564.876280][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1564.876296][ T30] audit: type=1800 audit(1775539939.995:7082): pid=31195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6651" name="bus" dev="tmpfs" ino=631 res=0 errno=0 [ 1564.997862][T18257] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1565.068542][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1565.169526][T18257] usb 5-1: Using ep0 maxpacket: 8 [ 1565.176011][T18257] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1565.184441][T18257] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.194920][T18257] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1565.208248][T18257] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1565.217443][T18257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.233831][T18257] usbtmc 5-1:16.0: bulk endpoints not found [ 1565.244064][ T9] usb 4-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 1565.248314][ T29] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1565.262001][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1565.274371][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1565.290618][ T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1565.299790][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.308216][ T9] usb 4-1: Product: syz [ 1565.312362][ T9] usb 4-1: Manufacturer: syz [ 1565.316934][ T9] usb 4-1: SerialNumber: syz [ 1565.324375][ T9] usb 4-1: config 0 descriptor?? [ 1565.335229][ T9] usb 4-1: ucan: probing device on interface #0 [ 1565.342211][ T9] usb 4-1: ucan: invalid EP count (1) [ 1565.347601][ T9] usb 4-1: ucan: probe failed; try to update the device firmware [ 1565.408350][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 1565.416792][ T29] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 1565.425983][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.434129][ T29] usb 1-1: Product: syz [ 1565.437818][ T9] usb 5-1: USB disconnect, device number 61 [ 1565.438539][ T29] usb 1-1: Manufacturer: syz [ 1565.450739][ T29] usb 1-1: SerialNumber: syz [ 1565.459886][ T29] usb 1-1: config 0 descriptor?? [ 1565.471196][ T29] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1565.480951][ T29] usb 1-1: Detected FT2232H [ 1565.574973][T31209] xt_hashlimit: size too large, truncated to 1048576 [ 1565.646461][T31186] veth0: entered promiscuous mode [ 1565.653862][T31186] veth0: left promiscuous mode [ 1565.876920][T31200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.889718][T31200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.915197][ T29] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1565.932072][ T29] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1565.971192][ T29] usb 1-1: USB disconnect, device number 97 [ 1565.986631][T31217] tipc: Enabling of bearer rejected, failed to enable media [ 1565.996406][ T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1566.009364][ T29] ftdi_sio 1-1:0.0: device disconnected [ 1566.134564][T31219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1566.224682][T31223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1566.271711][T31223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1566.573133][T31233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1567.228363][T31242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1567.794579][T18257] usb 4-1: USB disconnect, device number 60 [ 1567.808265][ T29] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1568.050738][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 1568.074770][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1568.109525][ T29] usb 2-1: config 2 has an invalid interface number: 83 but max is 0 [ 1568.147873][ T29] usb 2-1: config 2 has no interface number 0 [ 1568.180149][ T29] usb 2-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=54.63 [ 1568.217907][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.247818][ T29] usb 2-1: Product: syz [ 1568.252025][ T29] usb 2-1: Manufacturer: syz [ 1568.256629][ T29] usb 2-1: SerialNumber: syz [ 1568.521320][T31247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.552118][T31247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.599586][T31276] xt_hashlimit: size too large, truncated to 1048576 [ 1568.661700][ T29] usb 2-1: USB disconnect, device number 92 [ 1568.771933][T31283] FAULT_INJECTION: forcing a failure. [ 1568.771933][T31283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.801812][T31283] CPU: 0 UID: 0 PID: 31283 Comm: syz.6.6673 Tainted: G L syzkaller #0 PREEMPT(full) [ 1568.801835][T31283] Tainted: [L]=SOFTLOCKUP [ 1568.801839][T31283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1568.801845][T31283] Call Trace: [ 1568.801851][T31283] [ 1568.801856][T31283] dump_stack_lvl+0xe8/0x150 [ 1568.801877][T31283] should_fail_ex+0x412/0x560 [ 1568.801896][T31283] _copy_to_user+0x31/0xb0 [ 1568.801911][T31283] simple_read_from_buffer+0xe1/0x170 [ 1568.801929][T31283] proc_fail_nth_read+0x1bb/0x230 [ 1568.801946][T31283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1568.801962][T31283] ? rw_verify_area+0x2a6/0x4d0 [ 1568.801974][T31283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1568.801989][T31283] vfs_read+0x20c/0xa70 [ 1568.801999][T31283] ? fdget_pos+0x246/0x320 [ 1568.802011][T31283] ? __pfx___mutex_lock+0x10/0x10 [ 1568.802027][T31283] ? __pfx_vfs_read+0x10/0x10 [ 1568.802040][T31283] ? __fget_files+0x2a/0x420 [ 1568.802051][T31283] ? __fget_files+0x3a0/0x420 [ 1568.802060][T31283] ? __fget_files+0x2a/0x420 [ 1568.802073][T31283] ksys_read+0x150/0x270 [ 1568.802086][T31283] ? __pfx_ksys_read+0x10/0x10 [ 1568.802097][T31283] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 1568.802115][T31283] do_syscall_64+0x14d/0xf80 [ 1568.802128][T31283] ? trace_irq_disable+0x3b/0x150 [ 1568.802138][T31283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.802148][T31283] ? clear_bhb_loop+0x40/0x90 [ 1568.802161][T31283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.802171][T31283] RIP: 0033:0x7fd08195d04e [ 1568.802182][T31283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1568.802191][T31283] RSP: 002b:00007fd08293ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1568.802204][T31283] RAX: ffffffffffffffda RBX: 00007fd0829406c0 RCX: 00007fd08195d04e [ 1568.802211][T31283] RDX: 000000000000000f RSI: 00007fd0829400a0 RDI: 0000000000000004 [ 1568.802217][T31283] RBP: 00007fd082940090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.802224][T31283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.802230][T31283] R13: 00007fd081c16038 R14: 00007fd081c15fa0 R15: 00007fd081d3fa48 [ 1568.802245][T31283] [ 1569.616986][ T30] audit: type=1800 audit(1775539944.735:7083): pid=31294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6678" name="SYSV798dd82c" dev="tmpfs" ino=0 res=0 errno=0 [ 1570.228179][T18257] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1570.415648][T18257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.453260][T18257] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1570.475407][T18257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.495269][T18257] usb 1-1: config 0 descriptor?? [ 1570.595607][T31335] Cannot find set identified by id 1 to match [ 1570.758029][T18257] usbhid 1-1:0.0: can't add hid device: -71 [ 1570.782179][T18257] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1570.810863][T18257] usb 1-1: USB disconnect, device number 98 [ 1571.040400][T31345] xt_hashlimit: size too large, truncated to 1048576 [ 1571.048093][ T29] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1571.212183][ T29] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1571.243817][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.277675][ T29] usb 2-1: Product: syz [ 1571.277863][T18257] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1571.304072][ T29] usb 2-1: Manufacturer: syz [ 1571.321226][ T29] usb 2-1: SerialNumber: syz [ 1571.348377][ T29] usb 2-1: config 0 descriptor?? [ 1571.374463][ T29] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1571.422209][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1571.442391][ T29] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1571.462023][ T29] usb 2-1: media controller created [ 1571.485703][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1571.513452][T18257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1571.528265][T18257] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1571.538123][T18257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.555319][T18257] usb 1-1: config 0 descriptor?? [ 1571.628893][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1571.640825][ T29] DVB: Unable to find symbol mt352_attach() [ 1571.702286][ T29] DVB: Unable to find symbol nxt6000_attach() [ 1571.730869][ T29] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1571.771261][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input166 [ 1571.798714][ T29] dvb-usb: schedule remote query interval to 1000 msecs. [ 1571.810643][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1571.820457][ T29] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1571.822692][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1571.832907][ T29] dvb-usb: bulk message failed: -22 (7/0) [ 1571.848324][ T29] dvb-usb: bulk message failed: -22 (7/0) [ 1571.868673][ T9] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1571.912451][ T9] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1571.949399][T24423] usb 2-1: USB disconnect, device number 93 [ 1571.959416][ T9] usb 5-1: Product: syz [ 1571.963618][ T9] usb 5-1: Manufacturer: syz [ 1571.972565][ T9] usb 5-1: SerialNumber: syz [ 1571.983056][T31302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.007507][T31302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.030616][T18257] usbhid 1-1:0.0: can't add hid device: -71 [ 1572.046812][T18257] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1572.105436][T24423] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1572.118737][T18257] usb 1-1: USB disconnect, device number 99 [ 1572.217641][ T9] usb 5-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 1572.240522][ T9] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1572.249290][ T9] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1572.303114][ T9] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 1572.327032][ T9] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1572.349006][ T9] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1572.380236][ T9] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1572.407526][ T9] usb 5-1: USB disconnect, device number 62 [ 1572.449439][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1572.489283][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1572.523708][ T9] visor 5-1:1.0: device disconnected [ 1572.931503][T31389] pimreg: entered allmulticast mode [ 1572.948931][T31389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6701'. [ 1572.967313][T31389] pimreg: left allmulticast mode [ 1572.998730][T31391] 8021q: VLANs not supported on vxcan0 [ 1573.128031][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1573.297864][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1573.304640][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.315733][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.325667][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1573.327890][ T29] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1573.336897][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.352298][ T9] usb 5-1: config 0 descriptor?? [ 1573.360077][ T9] hub 5-1:0.0: USB hub found [ 1573.491450][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1573.500562][ T29] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 1573.508942][ T29] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.519269][ T29] usb 2-1: config 63 has no interface number 0 [ 1573.525481][ T29] usb 2-1: config 63 interface 66 has no altsetting 0 [ 1573.534998][ T29] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1573.544127][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.552238][ T29] usb 2-1: Product: syz [ 1573.556409][ T29] usb 2-1: Manufacturer: syz [ 1573.563804][ T29] usb 2-1: SerialNumber: syz [ 1573.564229][ T9] hub 5-1:0.0: 1 port detected [ 1573.766941][ T30] audit: type=1326 audit(1775539948.885:7084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c3f9c819 code=0x7ffc0000 [ 1573.790035][ T30] audit: type=1326 audit(1775539948.885:7085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c3f9c819 code=0x7ffc0000 [ 1573.813856][ T30] audit: type=1326 audit(1775539948.885:7086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fe0c3f9c819 code=0x7ffc0000 [ 1573.819442][ T29] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1573.838791][ T30] audit: type=1326 audit(1775539948.885:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c3f9c819 code=0x7ffc0000 [ 1573.849190][ T29] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1573.868375][ T30] audit: type=1326 audit(1775539948.885:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c3f9c819 code=0x7ffc0000 [ 1573.899156][ T30] audit: type=1326 audit(1775539948.885:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0c3f9c819 code=0x7ffc0000 [ 1573.899288][ T29] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1573.922974][ T30] audit: type=1326 audit(1775539948.885:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c3f9c819 code=0x7ffc0000 [ 1573.932344][ T29] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1573.966458][ T29] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1573.979506][ T29] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1573.984300][ T30] audit: type=1326 audit(1775539948.885:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0c3f9c819 code=0x7ffc0000 [ 1573.990919][ T29] uvcvideo 2-1:63.66: No streaming interface found for terminal 29. [ 1574.012846][ T30] audit: type=1326 audit(1775539948.885:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c3f9c819 code=0x7ffc0000 [ 1574.020698][ T29] uvcvideo 2-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1574.045335][ T30] audit: type=1326 audit(1775539948.885:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.6702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0c3f9c819 code=0x7ffc0000 [ 1574.092501][ T29] usb 2-1: USB disconnect, device number 94 [ 1574.112396][ T9] usb 5-1: USB disconnect, device number 63 [ 1574.448800][ T29] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1574.577843][ T5925] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1574.610805][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1574.626859][ T29] usb 2-1: not running at top speed; connect to a high speed hub [ 1574.673331][ T29] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 1574.712770][ T29] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.724353][ T5925] usb 1-1: device descriptor read/64, error -71 [ 1574.754630][ T29] usb 2-1: config 63 has no interface number 0 [ 1574.789422][ T29] usb 2-1: config 63 interface 66 has no altsetting 0 [ 1574.807354][ T29] usb 2-1: string descriptor 0 read error: -22 [ 1574.821057][ T29] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1574.840921][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.909579][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1574.936620][ T29] uvcvideo 2-1:63.66: Found UVC 0.07 device (174f:8acf) [ 1574.978208][ T5925] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1575.081201][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1575.090978][ T9] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.104365][ T9] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1575.117898][ T5925] usb 1-1: device descriptor read/64, error -71 [ 1575.124369][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1575.149839][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.204733][T31435] tipc: Enabling of bearer rejected, failed to enable media [ 1575.228072][ T5925] usb usb1-port1: attempt power cycle [ 1575.442601][T31423] bridge_slave_0: left allmulticast mode [ 1575.459525][T31423] bridge_slave_0: left promiscuous mode [ 1575.470711][T31423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.504019][T31423] bridge_slave_1: left allmulticast mode [ 1575.521012][T31423] bridge_slave_1: left promiscuous mode [ 1575.537279][T31423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.583585][T31446] dlm: non-version read from control device 0 [ 1575.592394][T31423] bond0: (slave bond_slave_0): Releasing backup interface [ 1575.610869][ T5925] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1575.654982][T31423] bond0: (slave bond_slave_1): Releasing backup interface [ 1575.676663][ T5925] usb 1-1: device descriptor read/8, error -71 [ 1575.714880][T31446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.741808][T31423] team0: Port device team_slave_0 removed [ 1575.751484][T31446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.804332][T31423] team0: Port device team_slave_1 removed [ 1575.819868][T31423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.839017][T31423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.857606][T31423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1575.959048][ T5925] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1575.980145][ T5925] usb 1-1: device descriptor read/8, error -71 [ 1576.017884][ T7694] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1576.108127][ T5925] usb usb1-port1: unable to enumerate USB device [ 1576.158233][ T7694] usb 4-1: device descriptor read/64, error -71 [ 1576.177894][T18257] usb 5-1: USB disconnect, device number 64 [ 1576.398313][ T7694] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1576.451647][ T29] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1576.477571][ T29] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1576.489575][ T29] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1576.500483][ T29] uvcvideo 2-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1576.510692][ T29] uvcvideo 2-1:63.66: No streaming interface found for terminal 29. [ 1576.518815][ T29] uvcvideo 2-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1576.547841][ T7694] usb 4-1: device descriptor read/64, error -71 [ 1576.561636][ T29] usb 2-1: USB disconnect, device number 95 [ 1576.658656][ T7694] usb usb4-port1: attempt power cycle [ 1576.994262][T31465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1577.015072][ T7694] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1577.048770][ T7694] usb 4-1: device descriptor read/8, error -71 [ 1577.297902][ T7694] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1577.332498][ T7694] usb 4-1: device descriptor read/8, error -71 [ 1577.396201][T31473] validate_nla: 25 callbacks suppressed [ 1577.396220][T31473] netlink: 'syz.6.6729': attribute type 10 has an invalid length. [ 1577.418010][T31472] netdevsim netdevsim0: Direct firmware load for / [ 1577.418010][T31472] failed with error -2 [ 1577.434357][T31472] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 1577.434357][T31472] [ 1577.461836][ T7694] usb usb4-port1: unable to enumerate USB device [ 1577.496434][T31473] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1577.527227][T31473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1577.585826][T31474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6729'. [ 1577.841191][T31481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6730'. [ 1579.297902][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1579.447897][ T9] usb 4-1: device descriptor read/64, error -71 [ 1579.700204][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1579.847825][ T9] usb 4-1: device descriptor read/64, error -71 [ 1579.869698][T31517] netlink: 'syz.0.6740': attribute type 26 has an invalid length. [ 1580.010753][ T9] usb usb4-port1: attempt power cycle [ 1580.377819][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1580.487473][ T9] usb 4-1: device descriptor read/8, error -71 [ 1580.757929][ T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1580.823575][ T9] usb 4-1: device descriptor read/8, error -71 [ 1580.998161][ T9] usb usb4-port1: unable to enumerate USB device [ 1581.046730][T24423] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1581.227926][T24423] usb 2-1: device descriptor read/64, error -71 [ 1581.494729][T31549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1581.521336][T24423] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1581.659746][T31554] xt_hashlimit: size too large, truncated to 1048576 [ 1581.687826][T24423] usb 2-1: device descriptor read/64, error -71 [ 1581.834121][T24423] usb usb2-port1: attempt power cycle [ 1582.118441][T18257] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1582.197975][T24423] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1582.230192][T24423] usb 2-1: device descriptor read/8, error -71 [ 1582.288043][T18257] usb 1-1: Using ep0 maxpacket: 8 [ 1582.294979][T18257] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1582.310330][T18257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.343692][T18257] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1582.358204][T18257] pvrusb2: ********** [ 1582.366440][T18257] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1582.390341][T18257] pvrusb2: Important functionality might not be entirely working. [ 1582.406663][T18257] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1582.431284][T18257] pvrusb2: ********** [ 1582.477891][T24423] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1582.485533][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1582.518427][T24423] usb 2-1: device descriptor read/8, error -71 [ 1582.558921][ T2345] pvrusb2: Invalid write control endpoint [ 1582.567261][T18257] usb 1-1: USB disconnect, device number 104 [ 1582.638762][T24423] usb usb2-port1: unable to enumerate USB device [ 1582.660612][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1582.678915][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7 [ 1582.715604][ T2345] pvrusb2: Invalid write control endpoint [ 1582.741763][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 1582.753902][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1582.769994][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.787996][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1582.800860][ T9] usb 4-1: Product: syz [ 1582.809915][ T9] usb 4-1: Manufacturer: syz [ 1582.814527][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1582.831645][ T9] usb 4-1: SerialNumber: syz [ 1582.850055][ T2345] pvrusb2: Device being rendered inoperable [ 1582.876290][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1582.890075][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1582.918904][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1582.924442][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1582.961469][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1583.064909][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1583.078119][ T9] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1583.085499][ T9] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1583.163526][ T9] usb 4-1: USB disconnect, device number 69 [ 1583.209987][T26789] udevd[26789]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1583.229298][T31585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.238525][T31585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.068493][T18257] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1584.077582][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1584.217868][T18257] usb 4-1: device descriptor read/64, error -71 [ 1584.230461][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1584.240051][ T9] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1584.249097][ T9] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 1584.257288][ T9] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1584.276923][ T9] usb 1-1: config 129 has no interface number 0 [ 1584.286318][ T9] usb 1-1: config 129 has no interface number 1 [ 1584.300260][ T9] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1584.329632][ T9] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1584.353597][ T9] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1584.387346][ T9] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1584.398915][ T9] usb 1-1: config 129 interface 5 has no altsetting 0 [ 1584.430396][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1584.436642][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1584.454564][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.486613][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1584.494990][T18257] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1584.518616][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 1584.638878][T18257] usb 4-1: device descriptor read/64, error -71 [ 1584.758462][T18257] usb usb4-port1: attempt power cycle [ 1584.816037][T31618] kvm: pic: single mode not supported [ 1584.816053][T31618] kvm: pic: level sensitive irq not supported [ 1584.846849][T31618] kvm: pic: single mode not supported [ 1584.853471][T31618] kvm: pic: level sensitive irq not supported [ 1584.879181][T31618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.919312][T31618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.106803][ T9] usb 1-1: USB disconnect, device number 105 [ 1585.138209][T18257] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1585.194071][T18257] usb 4-1: device descriptor read/8, error -71 [ 1585.363029][T31622] pimreg: entered allmulticast mode [ 1585.393600][T31622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6767'. [ 1585.435272][T31622] pimreg: left allmulticast mode [ 1585.468402][T18257] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1585.542073][T18257] usb 4-1: device descriptor read/8, error -71 [ 1585.586258][ T30] kauditd_printk_skb: 418 callbacks suppressed [ 1585.586271][ T30] audit: type=1326 audit(1775539960.705:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.1.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806519c819 code=0x7ffc0000 [ 1585.616706][ T30] audit: type=1326 audit(1775539960.705:7513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.1.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806519c819 code=0x7ffc0000 [ 1585.641133][ T30] audit: type=1326 audit(1775539960.745:7514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.1.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806519c819 code=0x7ffc0000 [ 1585.673479][ T30] audit: type=1326 audit(1775539960.765:7515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.1.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806519c819 code=0x7ffc0000 [ 1585.673969][T18257] usb usb4-port1: unable to enumerate USB device [ 1585.781694][ T30] audit: type=1326 audit(1775539960.765:7516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.1.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806519c819 code=0x7ffc0000 [ 1585.848564][T31634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1585.981361][ T30] audit: type=1326 audit(1775539960.795:7517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.1.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f806519c819 code=0x7ffc0000 [ 1586.056699][ T30] audit: type=1326 audit(1775539960.795:7518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.1.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806519c819 code=0x7ffc0000 [ 1586.106840][ T30] audit: type=1326 audit(1775539960.795:7519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.1.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806519c819 code=0x7ffc0000 [ 1586.161987][ T30] audit: type=1326 audit(1775539960.795:7520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.1.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806519c819 code=0x7ffc0000 [ 1586.210231][ T30] audit: type=1326 audit(1775539960.795:7521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.1.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806519c819 code=0x7ffc0000 [ 1586.255648][T31642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1586.280089][T31640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6773'. [ 1586.314560][T31640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6773'. [ 1586.584743][T31649] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6775'. [ 1586.696035][T31651] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6776'. [ 1586.717087][T31651] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6776'. [ 1587.547941][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1587.687904][ T29] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1587.713702][T31667] netlink: 'syz.0.6782': attribute type 10 has an invalid length. [ 1587.728766][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1587.748715][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1587.766480][ T9] usb 4-1: config 0 has no interface number 0 [ 1587.776642][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1587.807285][T31667] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1587.819601][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1587.831512][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.840383][ T9] usb 4-1: Product: syz [ 1587.845050][T31667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1587.860352][ T9] usb 4-1: Manufacturer: syz [ 1587.864973][ T9] usb 4-1: SerialNumber: syz [ 1587.897218][ T9] usb 4-1: config 0 descriptor?? [ 1587.902372][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1587.911941][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1587.926314][ T9] em28xx 4-1:0.132: Video interface 132 found: [ 1587.934700][T31668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6782'. [ 1587.948968][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.984018][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.003877][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1588.025503][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1588.035961][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.058380][ T29] usb 5-1: config 0 descriptor?? [ 1588.079341][T31671] pimreg: entered allmulticast mode [ 1588.086947][T31671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6783'. [ 1588.098508][T31671] pimreg: left allmulticast mode [ 1588.268069][T24423] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1588.313364][ T9] em28xx 4-1:0.132: chip ID is em2874 [ 1588.440413][T24423] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1588.452427][T24423] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.464850][T24423] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1588.475705][T24423] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.491240][T24423] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1588.504774][T24423] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1588.506087][T31663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.514075][T24423] usb 1-1: Product: syz [ 1588.527040][T28909] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1588.538297][T24423] usb 1-1: Manufacturer: syz [ 1588.561433][T31663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.562837][T24423] cdc_wdm 1-1:1.0: skipping garbage [ 1588.578213][T24423] cdc_wdm 1-1:1.0: skipping garbage [ 1588.587370][T24423] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1588.617864][ T29] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0067/input/input167 [ 1588.690916][T28909] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1588.700587][T28909] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1588.712929][T28909] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1588.731764][T28909] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 1588.738494][ T29] appleir 0003:05AC:8241.0067: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 1588.742198][T28909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.795056][T31663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.824773][T31663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.843416][T28909] usb 2-1: Product: syz [ 1588.847614][T28909] usb 2-1: Manufacturer: syz [ 1588.876196][ T29] usb 5-1: USB disconnect, device number 65 [ 1588.916793][T28909] usb 2-1: SerialNumber: syz [ 1588.931694][T31677] fido_id[31677]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1588.975415][ T9] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1588.989425][ T9] em28xx 4-1:0.132: board has no eeprom [ 1589.147901][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1589.155986][ T9] em28xx 4-1:0.132: analog set to bulk mode. [ 1589.162399][T18257] em28xx 4-1:0.132: Registering V4L2 extension [ 1589.192511][T28909] usb 2-1: Can't get UAC3 power state for id 10 [ 1589.215175][T28909] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 1589.239339][T28909] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1589.287884][T28909] usb 2-1: USB disconnect, device number 100 [ 1589.542205][T31684] xt_hashlimit: size too large, truncated to 1048576 [ 1589.710049][T31688] xt_hashlimit: size too large, truncated to 1048576 [ 1590.238978][T31696] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6790'. [ 1590.299641][T18257] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1590.327642][ T5925] usb 4-1: USB disconnect, device number 74 [ 1590.345497][T18257] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 1590.375173][ T5925] em28xx 4-1:0.132: Disconnecting em28xx [ 1590.381065][ T29] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1590.435874][T31701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6792'. [ 1590.462145][T31700] geneve2: entered allmulticast mode [ 1590.539521][ T29] usb 5-1: device descriptor read/64, error -71 [ 1590.620492][T18257] usb 4-1: Decoder not found [ 1590.640611][T18257] em28xx 4-1:0.132: failed to create media graph [ 1590.646995][T18257] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1590.715513][T18257] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1590.715947][T31705] ================================================================== [ 1590.732448][T31705] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1590.739806][T31705] Read of size 8 at addr ffff888068d70790 by task v4l_id/31705 [ 1590.747334][T31705] [ 1590.749650][T31705] CPU: 1 UID: 0 PID: 31705 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1590.749666][T31705] Tainted: [L]=SOFTLOCKUP [ 1590.749670][T31705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1590.749677][T31705] Call Trace: [ 1590.749682][T31705] [ 1590.749688][T31705] dump_stack_lvl+0xe8/0x150 [ 1590.749704][T31705] print_report+0xba/0x230 [ 1590.749716][T31705] ? v4l2_fh_open+0xac/0x420 [ 1590.749730][T31705] kasan_report+0x117/0x150 [ 1590.749744][T31705] ? v4l2_fh_open+0xac/0x420 [ 1590.749758][T31705] v4l2_fh_open+0xac/0x420 [ 1590.749770][T31705] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1590.749786][T31705] em28xx_v4l2_open+0x157/0x9a0 [ 1590.749798][T31705] ? do_raw_spin_lock+0x12b/0x2f0 [ 1590.749810][T31705] v4l2_open+0x1bf/0x3a0 [ 1590.749825][T31705] chrdev_open+0x4cd/0x5e0 [ 1590.749838][T31705] ? __pfx_chrdev_open+0x10/0x10 [ 1590.749849][T31705] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1590.749861][T31705] ? __pfx_chrdev_open+0x10/0x10 [ 1590.749873][T31705] do_dentry_open+0x785/0x14e0 [ 1590.749889][T31705] vfs_open+0x3b/0x340 [ 1590.749901][T31705] ? path_openat+0x2df0/0x3860 [ 1590.749912][T31705] path_openat+0x2e08/0x3860 [ 1590.749925][T31705] ? __pfx_stack_trace_save+0x10/0x10 [ 1590.749937][T31705] ? stack_depot_save_flags+0x33/0x810 [ 1590.749954][T31705] ? __pfx_path_openat+0x10/0x10 [ 1590.749964][T31705] ? __x64_sys_openat+0x138/0x170 [ 1590.749978][T31705] ? do_syscall_64+0x14d/0xf80 [ 1590.749990][T31705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.750002][T31705] ? __lock_acquire+0x6b5/0x2cf0 [ 1590.750015][T31705] do_file_open+0x23e/0x4a0 [ 1590.750028][T31705] ? __pfx_do_file_open+0x10/0x10 [ 1590.750042][T31705] ? _raw_spin_unlock+0x28/0x50 [ 1590.750052][T31705] ? alloc_fd+0x64b/0x6c0 [ 1590.750068][T31705] do_sys_openat2+0x113/0x200 [ 1590.750082][T31705] ? __pfx_do_sys_openat2+0x10/0x10 [ 1590.750095][T31705] ? exc_page_fault+0x6a/0xc0 [ 1590.750108][T31705] ? do_user_addr_fault+0xc6f/0x1340 [ 1590.750123][T31705] __x64_sys_openat+0x138/0x170 [ 1590.750137][T31705] do_syscall_64+0x14d/0xf80 [ 1590.750150][T31705] ? trace_irq_disable+0x3b/0x150 [ 1590.750159][T31705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.750169][T31705] ? clear_bhb_loop+0x40/0x90 [ 1590.750180][T31705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.750190][T31705] RIP: 0033:0x7f0af44a7407 [ 1590.750200][T31705] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1590.750208][T31705] RSP: 002b:00007ffc32288280 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1590.750220][T31705] RAX: ffffffffffffffda RBX: 00007f0af4b59880 RCX: 00007f0af44a7407 [ 1590.750227][T31705] RDX: 0000000000000000 RSI: 00007ffc32288f1a RDI: ffffffffffffff9c [ 1590.750234][T31705] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1590.750240][T31705] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1590.750247][T31705] R13: 00007ffc322884d0 R14: 00007f0af4cc0000 R15: 0000561870f8c4d8 [ 1590.750257][T31705] [ 1590.750260][T31705] [ 1591.050302][T31705] Allocated by task 18257: [ 1591.054701][T31705] kasan_save_track+0x3e/0x80 [ 1591.059367][T31705] __kasan_kmalloc+0x93/0xb0 [ 1591.063939][T31705] __kmalloc_cache_noprof+0x31c/0x660 [ 1591.069288][T31705] em28xx_v4l2_init+0x10b/0x2e70 [ 1591.074205][T31705] em28xx_init_extension+0x120/0x1c0 [ 1591.079470][T31705] process_scheduled_works+0xb6e/0x18c0 [ 1591.084998][T31705] worker_thread+0xa53/0xfc0 [ 1591.089657][T31705] kthread+0x388/0x470 [ 1591.093713][T31705] ret_from_fork+0x51e/0xb90 [ 1591.098284][T31705] ret_from_fork_asm+0x1a/0x30 [ 1591.103027][T31705] [ 1591.105333][T31705] Freed by task 18257: [ 1591.109383][T31705] kasan_save_track+0x3e/0x80 [ 1591.114060][T31705] kasan_save_free_info+0x46/0x50 [ 1591.119067][T31705] __kasan_slab_free+0x5c/0x80 [ 1591.123810][T31705] kfree+0x1c1/0x630 [ 1591.127685][T31705] em28xx_v4l2_init+0x1683/0x2e70 [ 1591.132704][T31705] em28xx_init_extension+0x120/0x1c0 [ 1591.137973][T31705] process_scheduled_works+0xb6e/0x18c0 [ 1591.143506][T31705] worker_thread+0xa53/0xfc0 [ 1591.148075][T31705] kthread+0x388/0x470 [ 1591.152125][T31705] ret_from_fork+0x51e/0xb90 [ 1591.156694][T31705] ret_from_fork_asm+0x1a/0x30 [ 1591.161439][T31705] [ 1591.163747][T31705] The buggy address belongs to the object at ffff888068d70000 [ 1591.163747][T31705] which belongs to the cache kmalloc-8k of size 8192 [ 1591.177788][T31705] The buggy address is located 1936 bytes inside of [ 1591.177788][T31705] freed 8192-byte region [ffff888068d70000, ffff888068d72000) [ 1591.191744][T31705] [ 1591.194050][T31705] The buggy address belongs to the physical page: [ 1591.200442][T31705] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888068d74000 pfn:0x68d70 [ 1591.210511][T31705] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1591.218988][T31705] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1591.227487][T31705] page_type: f5(slab) [ 1591.231448][T31705] raw: 00fff00000000240 ffff88813fea7280 ffffea0000a70e10 ffffea0002c4ec10 [ 1591.240014][T31705] raw: ffff888068d74000 0000000800020001 00000000f5000000 0000000000000000 [ 1591.248588][T31705] head: 00fff00000000240 ffff88813fea7280 ffffea0000a70e10 ffffea0002c4ec10 [ 1591.257236][T31705] head: ffff888068d74000 0000000800020001 00000000f5000000 0000000000000000 [ 1591.265886][T31705] head: 00fff00000000003 ffffea0001a35c01 00000000ffffffff 00000000ffffffff [ 1591.274537][T31705] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1591.283204][T31705] page dumped because: kasan: bad access detected [ 1591.289601][T31705] page_owner tracks the page as allocated [ 1591.295294][T31705] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 31373, tgid 31372 (syz.4.6696), ts 1572394283461, free_ts 1572334971822 [ 1591.316986][T31705] post_alloc_hook+0x231/0x280 [ 1591.321740][T31705] get_page_from_freelist+0x24dc/0x2580 [ 1591.327291][T31705] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1591.333079][T31705] allocate_slab+0x77/0x660 [ 1591.337564][T31705] refill_objects+0x331/0x3c0 [ 1591.342225][T31705] __pcs_replace_empty_main+0x2e6/0x730 [ 1591.347754][T31705] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 1591.354162][T31705] __alloc_skb+0x2c1/0x7d0 [ 1591.358564][T31705] nf_tables_commit+0x8f7d/0xa400 [ 1591.363589][T31705] nfnetlink_rcv+0x1c1b/0x27b0 [ 1591.368346][T31705] netlink_unicast+0x80f/0x9b0 [ 1591.373098][T31705] netlink_sendmsg+0x813/0xb40 [ 1591.378284][T31705] ____sys_sendmsg+0x972/0x9f0 [ 1591.383032][T31705] ___sys_sendmsg+0x2a5/0x360 [ 1591.387702][T31705] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1591.392630][T31705] do_syscall_64+0x14d/0xf80 [ 1591.397204][T31705] page last free pid 5183 tgid 5183 stack trace: [ 1591.403505][T31705] __free_frozen_pages+0xc2b/0xdb0 [ 1591.408612][T31705] __slab_free+0x263/0x2b0 [ 1591.413008][T31705] qlist_free_all+0x97/0x100 [ 1591.417575][T31705] kasan_quarantine_reduce+0x148/0x160 [ 1591.423012][T31705] __kasan_slab_alloc+0x22/0x80 [ 1591.427839][T31705] kmem_cache_alloc_node_noprof+0x384/0x690 [ 1591.433715][T31705] __alloc_skb+0x1d0/0x7d0 [ 1591.438130][T31705] alloc_skb_with_frags+0xca/0x890 [ 1591.443227][T31705] sock_alloc_send_pskb+0x878/0x990 [ 1591.448417][T31705] unix_dgram_sendmsg+0x460/0x18e0 [ 1591.453511][T31705] __sys_sendto+0x672/0x710 [ 1591.458005][T31705] __x64_sys_sendto+0xde/0x100 [ 1591.462746][T31705] do_syscall_64+0x14d/0xf80 [ 1591.467316][T31705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.473192][T31705] [ 1591.475582][T31705] Memory state around the buggy address: [ 1591.481187][T31705] ffff888068d70680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1591.489224][T31705] ffff888068d70700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1591.497349][T31705] >ffff888068d70780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1591.505382][T31705] ^ [ 1591.509963][T31705] ffff888068d70800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1591.518004][T31705] ffff888068d70880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1591.526040][T31705] ================================================================== [ 1591.549596][T31705] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1591.556811][T31705] CPU: 1 UID: 0 PID: 31705 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1591.567393][T31705] Tainted: [L]=SOFTLOCKUP [ 1591.571702][T31705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1591.581737][T31705] Call Trace: [ 1591.584998][T31705] [ 1591.587914][T31705] vpanic+0x56c/0xa60 [ 1591.591883][T31705] ? __pfx_vpanic+0x10/0x10 [ 1591.596372][T31705] panic+0xc5/0xd0 [ 1591.600076][T31705] ? __pfx_panic+0x10/0x10 [ 1591.604482][T31705] ? preempt_schedule_thunk+0x16/0x30 [ 1591.609834][T31705] ? preempt_schedule_thunk+0x16/0x30 [ 1591.615186][T31705] ? v4l2_fh_open+0xac/0x420 [ 1591.619761][T31705] check_panic_on_warn+0x89/0xb0 [ 1591.624679][T31705] ? v4l2_fh_open+0xac/0x420 [ 1591.629253][T31705] end_report+0x73/0x180 [ 1591.633478][T31705] ? v4l2_fh_open+0xac/0x420 [ 1591.638049][T31705] kasan_report+0x128/0x150 [ 1591.642534][T31705] ? v4l2_fh_open+0xac/0x420 [ 1591.647110][T31705] v4l2_fh_open+0xac/0x420 [ 1591.651512][T31705] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1591.657478][T31705] em28xx_v4l2_open+0x157/0x9a0 [ 1591.662315][T31705] ? do_raw_spin_lock+0x12b/0x2f0 [ 1591.667325][T31705] v4l2_open+0x1bf/0x3a0 [ 1591.671562][T31705] chrdev_open+0x4cd/0x5e0 [ 1591.675963][T31705] ? __pfx_chrdev_open+0x10/0x10 [ 1591.680881][T31705] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1591.687192][T31705] ? __pfx_chrdev_open+0x10/0x10 [ 1591.692115][T31705] do_dentry_open+0x785/0x14e0 [ 1591.696866][T31705] vfs_open+0x3b/0x340 [ 1591.700921][T31705] ? path_openat+0x2df0/0x3860 [ 1591.705667][T31705] path_openat+0x2e08/0x3860 [ 1591.710255][T31705] ? __pfx_stack_trace_save+0x10/0x10 [ 1591.715625][T31705] ? stack_depot_save_flags+0x33/0x810 [ 1591.721078][T31705] ? __pfx_path_openat+0x10/0x10 [ 1591.725995][T31705] ? __x64_sys_openat+0x138/0x170 [ 1591.731008][T31705] ? do_syscall_64+0x14d/0xf80 [ 1591.735754][T31705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.741799][T31705] ? __lock_acquire+0x6b5/0x2cf0 [ 1591.746718][T31705] do_file_open+0x23e/0x4a0 [ 1591.751202][T31705] ? __pfx_do_file_open+0x10/0x10 [ 1591.756213][T31705] ? _raw_spin_unlock+0x28/0x50 [ 1591.761043][T31705] ? alloc_fd+0x64b/0x6c0 [ 1591.765356][T31705] do_sys_openat2+0x113/0x200 [ 1591.770018][T31705] ? __pfx_do_sys_openat2+0x10/0x10 [ 1591.775207][T31705] ? exc_page_fault+0x6a/0xc0 [ 1591.779887][T31705] ? do_user_addr_fault+0xc6f/0x1340 [ 1591.785158][T31705] __x64_sys_openat+0x138/0x170 [ 1591.790021][T31705] do_syscall_64+0x14d/0xf80 [ 1591.794594][T31705] ? trace_irq_disable+0x3b/0x150 [ 1591.799593][T31705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.805640][T31705] ? clear_bhb_loop+0x40/0x90 [ 1591.810301][T31705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.816173][T31705] RIP: 0033:0x7f0af44a7407 [ 1591.820596][T31705] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1591.840209][T31705] RSP: 002b:00007ffc32288280 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1591.848871][T31705] RAX: ffffffffffffffda RBX: 00007f0af4b59880 RCX: 00007f0af44a7407 [ 1591.857548][T31705] RDX: 0000000000000000 RSI: 00007ffc32288f1a RDI: ffffffffffffff9c [ 1591.865507][T31705] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1591.873463][T31705] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1591.881440][T31705] R13: 00007ffc322884d0 R14: 00007f0af4cc0000 R15: 0000561870f8c4d8 [ 1591.889673][T31705] [ 1591.893071][T31705] Kernel Offset: disabled [ 1591.897385][T31705] Rebooting in 86400 seconds..